Homeowner Privacy Notice

This is the short, plain notice a Homeowner must be able to read before they submit their details in an estimator, satisfying GDPR Art. 13 and the "notice at collection" duty under US state privacy laws. It is deliberately short. The full policy is privacy.md.

It must be reachable from the estimator's contact step. As at 2026-09-02 it is not. See the implementation note at the end.

---

English (en-US)

How your details are used

Who gets your details. The business whose estimator you just used. They receive your name, the contact details you give, your answers, the estimate range you were shown, and any photos you upload, so they can follow up about this project. They decide how they use it after that. If you want it corrected or deleted, ask them first.

Who runs the tool. EdgeQuote, a service operated by Beyond the Edge Studio, runs the estimator for that business and stores the information on their behalf. We do not use it for our own marketing, we do not sell it, we do not share it for advertising, and we do not use it to train AI.

What we collect. Your name; an email address, a phone number, or both; your answers to the questions and the estimate calculated from them; the area or postal code you enter; your preferred contact time; up to three photos if you choose to add them; and a scrambled (hashed) version of your internet address, which we use only to block abuse and which cannot be turned back into your real address.

Cookies. This estimator sets none. No cookies, no trackers, no advertising pixels, no session recording. We count how many people used it each day, but those counts hold nothing that identifies you.

Your estimate is not a quote. It is a price range calculated from the business's own price list and the answers you gave. It is not an offer, not a binding price, and not a decision made about you.

How long it is kept. Normally 24 months, then it is deleted automatically. The business can choose a shorter period.

Your rights. You can ask to see your data, correct it, delete it, get a copy, or object to it being used. Ask the business directly, or write to sebastien@beyondtheedgestudio.com and we will find your record by your email address or your phone number and act on it. We reply within 30 days (EU/UK) or 45 days (US states). If you are in the EU you may also complain to your data protection authority; in France that is the CNIL.

One request. Please do not include other people's details, documents, or anything sensitive in your photos or your answers.

Full policy: edgequote.beyondtheedgestudio.com/legal/privacy · Delete your data: edgequote.beyondtheedgestudio.com/legal/data-deletion

---

Français (fr-FR)

Comment vos informations sont utilisées

Qui reçoit vos informations. L'entreprise dont vous venez d'utiliser l'estimateur. Elle reçoit votre nom, les coordonnées que vous donnez, vos réponses, la fourchette de prix affichée et les photos que vous ajoutez, afin de vous recontacter au sujet de ce projet. C'est elle qui décide de l'usage qu'elle en fait ensuite. Pour une correction ou une suppression, adressez-vous d'abord à elle.

Qui fait fonctionner l'outil. EdgeQuote, un service exploité par Beyond the Edge Studio, fait fonctionner l'estimateur pour cette entreprise et conserve les informations pour son compte. Nous ne les utilisons pas pour notre propre prospection, nous ne les vendons pas, nous ne les partageons pas à des fins publicitaires et nous ne les utilisons pas pour entraîner une intelligence artificielle.

Ce que nous collectons. Votre nom ; une adresse e-mail, un numéro de téléphone, ou les deux ; vos réponses aux questions et l'estimation qui en découle ; la zone ou le code postal indiqué ; votre créneau de contact préféré ; jusqu'à trois photos si vous choisissez d'en ajouter ; et une version chiffrée (hachée) de votre adresse internet, utilisée uniquement pour bloquer les abus et impossible à reconvertir en adresse réelle.

Cookies. Cet estimateur n'en dépose aucun. Aucun cookie, aucun traceur, aucun pixel publicitaire, aucun enregistrement de session. Nous comptons le nombre d'utilisations par jour, mais ces compteurs ne contiennent rien qui vous identifie.

Votre estimation n'est pas un devis. C'est une fourchette calculée à partir du tarif de l'entreprise et de vos réponses. Ce n'est ni une offre, ni un prix ferme, ni une décision prise à votre sujet.

Durée de conservation. En principe 24 mois, puis suppression automatique. L'entreprise peut choisir une durée plus courte.

Vos droits. Vous pouvez demander l'accès à vos données, leur rectification, leur effacement, une copie, ou vous opposer à leur utilisation. Adressez-vous à l'entreprise, ou écrivez à sebastien@beyondtheedgestudio.com : nous retrouverons votre fiche à partir de votre adresse e-mail ou de votre numéro de téléphone et y donnerons suite. Nous répondons sous 30 jours (UE/Royaume-Uni) ou 45 jours (États-Unis). Dans l'UE, vous pouvez également saisir votre autorité de protection des données ; en France, la CNIL (cnil.fr).

Une demande. Merci de ne pas inclure les informations d'autres personnes, des documents, ni quoi que ce soit de sensible dans vos photos ou vos réponses.

Politique complète : edgequote.beyondtheedgestudio.com/legal/privacy · Supprimer vos données : edgequote.beyondtheedgestudio.com/legal/data-deletion

---

IMPLEMENTATION NOTE (for the developer, not part of the notice)

This notice is not yet reachable from the product. To discharge the Art. 13 duty it must be:

1. Served at /legal/privacy and linked in the locale the estimator is running in. The estimator already knows its locale (client.locale, en-US or fr-FR).
2. Linked from the consent line on the contact step. That line is rendered at src/components/estimator/Estimator.tsx:497 from the i18n key est.contact.consent in src/i18n/en-US.ts:35 and src/i18n/fr-FR.ts:50. The link must open in a new tab so a Homeowner never loses a part-completed estimate by reading it.
3. Changing that sentence changes the consent wording. CONSENT_VERSION in src/app/api/lead/route.ts:36 is currently 2026-08-23.v1 and must be incremented in the same commit, so existing lead records keep pointing at the wording that was actually shown to those people.
4. The estimator is embedded in third-party sites in an iframe. Confirm the link is not blocked by the host page's Content-Security-Policy and that it targets _blank with rel="noopener".

NOTES FOR YOUR LAWYER

1. This notice assumes the Contractor is the controller. If the relationship is instead joint controllership (see privacy.md note 3), this notice must also identify EdgeQuote as a joint controller and summarise the Art. 26 arrangement.
2. Consent versus contract as the basis. The current wording asks the Homeowner to "agree to be contacted." If the intended basis is instead the performance of a pre-contractual step at the Homeowner's request (Art. 6(1)(b)), the wording should say so, because a consent basis carries a withdrawal right that the product does not currently expose to Homeowners other than by request.
3. The phrase "your estimate is not a quote" is doing consumer-law work, not just privacy work. Confirm it is prominent enough at the point the range is displayed, not only in this notice. Under French law an unclear price indication to a consumer carries its own exposure.
4. Photographs of a home may reveal more than the sender intends. The warning above is a mitigation, not a defence. Consider whether photographs should carry a shorter retention period than the lead itself.
5. Notice at collection under US state law must generally appear at or before the point of collection, not only behind a link. Confirm whether the single consent sentence plus a link satisfies the states in scope, or whether a short summary must be visible inline.

WHAT THIS DOES NOT COVER

• The Contractor's own notice obligations to the Homeowner once they hold the data.
• Any consent required before the Contractor telephones or texts the Homeowner. That is the Contractor's obligation under the TCPA, state mini-TCPA statutes, and equivalent French and EU rules, and this notice does not obtain it for them.
• Marketing consent of any kind. Nothing here permits either EdgeQuote or the Contractor to add a Homeowner to a marketing list.