Privacy Policy

Last Updated: September 15, 2026

1Introduction

This Privacy Policy explains how Mr. Nailed It Inc., a Delaware corporation (“Mr. Nailed It,” “Company,” “we,” “us,” or “our”), collects, uses, discloses, sells, shares, and otherwise processes personal information through www.mrnailedit.com, branded landing pages and questionnaire funnels (including subdomains such as *.mrnailedit.com), the Pro / Pro Max dashboard, Agency tools, Field Sales capture links, AI tools, SMS/email communications, and related services (collectively, the “Platform”).

By using the Platform, submitting a service request, creating an account, or otherwise providing personal information, you acknowledge this Privacy Policy. Our Terms of Use, available at /terms, govern use of the Platform and are incorporated here by reference.

This Policy is designed to satisfy U.S. state privacy notice requirements, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, “CCPA/CPRA”), and similar laws in other states. If you are a Consumer, we also provide a “Notice at Collection” in Section 4.

2Who This Policy Covers

This Policy applies to:

This Platform is intended for users in the United States who are 18 years of age or older.

3Roles and Responsibilities

Mr. Nailed It is a “business” under CCPA/CPRA and a controller of personal information collected through the Platform. We operate a home-services lead generation, CRM, marketplace, campaign, and software platform. We are not the contractor who performs home-improvement work.

When a Lead is delivered, sold, or otherwise made available to a Pro, that Pro becomes an independent business with its own obligations for how it contacts and uses the Lead. Pros who export Leads (including through webhooks, CSV/export tools, or connected ad accounts) are responsible for securing that data and complying with applicable law.

Agencies that manage Pro accounts may access client data, including Lead data, under their agency relationship.

4Notice at Collection

We collect the categories of personal information listed in Section 5. We collect them to operate the Platform, match Consumers with Pros, process payments, prevent fraud, run advertising and analytics, provide AI features, and as otherwise described in Section 6.

We sell and share personal information as those terms are defined under CCPA/CPRA. In particular, submitting a Lead is a request to be connected with one or more contractors. We may sell, share, license, or transfer Lead information to Pros, including through our internal Marketplace, and a Lead may be offered to more than one Pro. See Section 7 and /do-not-sell.

Sensitive personal information we may collect (only where relevant to a flow you use) includes: government identifiers processed by our payment partner during payout onboarding (for example date of birth and SSN last four, handled by Stripe); account login credentials; precise property address; and, in some Field Sales programs, marital status. We do not use sensitive personal information to infer characteristics for cross-context behavioral advertising, except as needed to provide the service you requested.

We retain personal information for as long as described in Section 11.

5Personal Information We Collect

5.1 Information you provide

Depending on how you use the Platform, this may include:

5.2 Information collected automatically

5.3 Information from others

6How We Use Personal Information

We use personal information to:

We do not use automated processing as the sole basis for a legal or similarly significant decision about a Consumer (for example, we do not approve or deny credit). Lead scoring and matching are product features used to prioritize outreach and marketplace quality.

7How We Disclose, Share, and Sell Personal Information

7.1 Disclosures that are core to the service

We disclose personal information to:

7.2 Sale and sharing under CCPA/CPRA

Under CCPA/CPRA, “sale” and “sharing” are defined broadly. Connecting Consumers with contractors, listing Leads on our Marketplace, and using advertising pixels or hashed identifiers for ads may constitute a sale and/or sharing of personal information.

Categories that may be sold or shared include identifiers (name, phone, email), location (address/ZIP), commercial information (project and survey details), internet activity (site interactions and advertising identifiers), and inferences (lead scores or similar). Photos and chat content may be disclosed to the Pro handling the request and to AI vendors that generate a result you requested.

We do not sell personal information of children we know to be under 16.

You may opt out of sale/sharing as described in Section 13 and at /do-not-sell. Opting out of sale/sharing may prevent us from matching you with contractors. It does not automatically stop a Pro who already received your Lead; you should also tell that Pro to stop contacting you, and you may ask us to relay a deletion or do-not-contact request.

7.3 What we do not currently do

8AI Features and Uploaded Media

The Platform uses artificial intelligence provided by vendors such as OpenAI, Anthropic, Google (including image and landing-page generation tools), Runway, and Kling, depending on the feature.

When you use AI Room Staging, expert chat with photos, AI landing-page / questionnaire builders, campaign creative generation, translation, or similar tools, the text, images, and related metadata you submit are sent to those providers to generate an output. Generated images, videos, and copy may be stored on our hosting and file-storage infrastructure (currently Vercel Blob) and associated with your account or Lead.

You represent that you have the right to upload any photo or content you submit (for example, you took the photo of your own room, or you have authority to use a client’s photo). Do not upload images of minors or anyone who has not agreed to the upload.

AI outputs may be inaccurate or unrealistic. They are for illustration, marketing, or operational assistance only and are not professional design, engineering, legal, or financial advice.

9Cookies, Pixels, and Tracking

We and our partners use cookies, pixels, tags, and similar technologies to keep you logged in, remember progress in a funnel, measure performance, detect fraud, and advertise.

Technologies currently used on the Platform may include:

You can control cookies through your browser settings. Blocking cookies may break login, funnels, or payments. We do not currently display a separate cookie-consent banner. California and other state residents can opt out of sale/sharing used for cross-context behavioral advertising via /do-not-sell or by contacting us as described in Section 13.

We honor browser “Do Not Track” or Global Privacy Control signals only to the extent we have implemented support and applicable law requires it. If a signal is not processed automatically, use /do-not-sell or email us.

10Service Providers and Subprocessors

We use third parties to help operate the Platform. The specific vendor may change. Categories and current primary providers include:

These parties process personal information only as needed to provide their services to us or as independent controllers when you interact with them directly (for example, paying via Stripe Checkout or connecting a Meta ad account). We do not currently use Twilio as our SMS provider or AWS as our primary application host; older materials that referred to those vendors are superseded by this Policy.

11Retention

We retain personal information for as long as reasonably necessary to provide the Platform, maintain accounts and transaction records, resolve disputes, prevent fraud, enforce agreements, and comply with legal, tax, and accounting obligations.

Lead, marketplace, billing, consent, OTP, and communication logs may be retained after a request is completed because they are needed for compliance, chargebacks, TCPA/consent defense, and audit trails.

When you delete an account, we deactivate access and delete or de-identify personal information we are not required or permitted to keep. Residual copies may remain in backups for a limited period.

12Security

We use commercially reasonable administrative, technical, and organizational measures, including encryption in transit, access controls, and authentication cookies. No method of transmission or storage is 100% secure. You are responsible for protecting account credentials and for securing any webhook endpoint or export destination you configure.

If we determine a security incident affecting personal information requires notice, we will notify affected users and regulators as required by applicable law, without unreasonable delay.

13Your Privacy Rights

Depending on your state of residence, you may have some or all of the following rights, subject to verification and legal exceptions:

These rights are provided under CCPA/CPRA and similar laws that may apply in states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Florida, and others as they come into force. We will apply the rights available in your jurisdiction.

How to submit a request:

We may need to verify your identity (for example, by matching email, phone, and request details, or by sending a one-time code). You may use an authorized agent as permitted by law. We will respond within the time required by applicable law (generally 45 days, which we may extend as permitted).

If we deny a request, we will explain why. Where the law provides an appeal, you may appeal by replying to our decision email.

We will not discriminate against you for exercising privacy rights. If fulfilling a request means we cannot provide a service that requires the data (for example, matching you with a contractor), we will explain that limitation.

14Communications, SMS, and Opt-Out

If you check an SMS consent box, reply to an OTP, or otherwise agree to messages, you consent to receive SMS from Mr. Nailed It (and, for a Lead, from Pros who received your request) about your request, account, or—where separate consent is collected—marketing. Message frequency varies. Message and data rates may apply.

You may opt out of SMS by replying STOP (or the equivalent instruction in the message). For help, reply HELP or contact us. Opting out of marketing SMS does not opt you out of transactional messages that are necessary to provide a service you requested (for example, a booking confirmation or security code), except where law requires otherwise.

Pros are independently responsible for complying with the Telephone Consumer Protection Act (TCPA), Telemarketing Sales Rule, CAN-SPAM, and state calling/texting laws for their own outreach. A Consumer’s submission of a Lead is consent to be contacted about that request by Mr. Nailed It and by Pros to whom the Lead is provided. It is not consent for unrelated robocalls, and it does not authorize anyone to ignore a later opt-out.

We do not claim a right to contact numbers on the National Do Not Call Registry for telemarketing without a legally valid exemption or consent. If you are on a Do Not Call list, you may still receive calls or texts that are informational about a request you submitted, or that are otherwise allowed by law.

15Professional Users, Agencies, and Sub-Users

If you are a Pro, Agency, or sub-user, we process your business-account data to provide software, billing, Marketplace, campaigns, and support. Authorized Mr. Nailed It staff, and Agencies you join, may access your account (including through impersonation/support-login tools) to provide support, onboarding, quality control, fraud review, or as you request.

If you connect Meta, Google Ads, or similar accounts, we receive tokens and campaign data needed to run or measure ads you authorize. You must comply with those platforms’ terms.

If you enable outbound webhooks, you instruct us to transmit Lead personal information, which may include names, phones, emails, addresses, and project details, to URLs you control. You are responsible for that destination’s security and for using the data lawfully.

You must honor Consumer opt-out, deletion, and do-not-contact requests that we or the Consumer communicate to you, and you must not upload Lead lists unless each person consented to be contacted.

16Children’s Privacy

The Platform is not directed to children under 18, and we do not knowingly collect personal information from children under 13 (COPPA) or under 16 for sale/sharing. If you believe a minor provided personal information, contact us and we will delete it as required.

17International Users

The Platform is operated from the United States. If you access it from another country, you understand that your information will be processed in the United States, which may have different data-protection rules than your country. We do not currently target the Platform as a GDPR service to the European Economic Area, United Kingdom, or Switzerland. If those laws apply to a particular interaction, we will process data as required, which may include relying on contractual clauses with vendors.

18Third-Party Links and Connected Tools

The Platform may link to third-party sites, embed maps or schedulers, or open WhatsApp, phone, or ad-platform pages. Their privacy practices are governed by their own policies. We are not responsible for those services.

19Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date shows the current version. Material changes will be posted on the Platform and, where required, notified by email or in-product notice. Continued use after the effective date constitutes acceptance of the updated Policy, except where applicable law requires additional consent.

20Contact

Mr. Nailed It Inc.

A Delaware corporation

Website: https://www.mrnailedit.com

Privacy requests: privacy@mrnailedit.com

Operational / legal contact: daniel.shushan@mrnailedit.com

Phone: +1 (818) 644-1898

Mailing address: 15233 Ventura Blvd, Sherman Oaks, CA 91403, USA

To exercise CCPA/CPRA rights, visit /my-data or /do-not-sell, or use the contacts above.