Privacy Policy

When you request a free estimate on our website, the form collects:

• the services you are interested in and your project details;
• your ZIP code;
• your name, and your phone number and/or email address;
• your preferred visit date and time of day, if you choose one;
• your optional answer to “How did you hear about us?”.

If you reached our site through a link with a source tag or campaign tags, the form also sends those tags (src, utm_source, utm_medium, utm_campaign), the domain of the website that sent you and the first page you opened. This stays in your browser for up to 24 hours. It is never stored in a cookie.

When we work with you, we also keep the service address, project notes, estimates, invoices, your electronic signature on an estimate (typed name, drawn signature, date and time), payment records and receipts. We also keep photos of the work area taken before, during and after the job. Location (GPS) data is removed from those photos.

If you pay online, Stripe processes the payment. We receive the payment status, the amount and limited details such as the card brand or bank name and the last four digits. We never see or store full card or bank account numbers.

Like any website, our hosting provider and our app process your IP address and basic request details to deliver pages, keep the service secure and prevent abuse (for example, limiting repeated form submissions).

• To answer your request, schedule a visit and prepare your estimate and contract.
• To send you confirmations, estimates, invoices and receipts, and to follow up on your request.
• To schedule and carry out the work, take payments and keep business, warranty and tax records.
• To understand, in aggregate, how visitors find and use our website.

We do not sell your personal information, and we do not use it to build advertising profiles.

We share information only with the companies that help us run the business, and only as needed for their service:

• Render: hosts our website and app.
• Supabase: our database and private file storage. Customer records, documents and photos are stored privately, and sensitive records are encrypted (AES-256-GCM) before they are stored.
• Resend: sends our emails (request confirmations, estimates, invoices and receipts).
• Google (Gmail): our business mailbox, nextfinishcarpentry.us@gmail.com, where your replies arrive.
• Stripe: processes online payments when you choose to pay online.
• Umami Cloud: cookieless visit statistics (see below).
• Google Calendar: the owner's business calendar for scheduled visits and jobs (see “Google user data”).
• Google Fonts: loads the website's fonts, so Google receives your IP address when a page loads.

We may also disclose information if the law requires it, or to protect our rights or someone's safety.

Our public website counts visits with Umami Cloud. It uses no cookies, does not build a profile of you, honors your browser's “Do Not Track” setting and never runs on our admin panel or on the estimate and invoice links we send you. It records page views, the referring website, the device type and the country.

The public website sets no cookies. Our private admin panel uses a sign-in cookie, for the business owner only. Stripe's checkout page may use its own cookies, as described in Stripe's privacy policy.

Visitors and clients are never asked to sign in with Google. Google sign-in exists only in our private admin panel, and only the business owner uses it, to connect the business's own Google Calendar.

When the owner connects Google, the app requests these permissions (scopes):

• openid and email: to show which Google account is connected;
• calendar.app.created: to create a dedicated “Next Finish” calendar;
• calendar.events: to create, update and delete events for scheduled site visits and jobs on that calendar (or on the owner's primary calendar, if he chooses it in Settings).

Each event contains only what the owner needs on the road: the client's name, the service, the address, the date and time window, the phone number, the estimate number and a link to our admin panel. Prices, emails and private notes are never sent to Google, and clients never receive calendar invitations. The app does not read, list or analyze any other events or calendars.

The Google sign-in token is stored encrypted (AES-256-GCM) on our server and is never sent to a browser. Google user data is never sold, never shared with third parties, never used for advertising and never used to train AI models. It is used only to keep the owner's calendar in sync with the app.

The owner can disconnect at any time in the admin panel, which revokes the app's access. Access can also be removed at https://myaccount.google.com/permissions. After that, events already created stay in the calendar until they are deleted there.

Next Finish Carpentry's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

• Estimate requests: while we are in contact about your project, and afterwards as part of our business records, unless you ask us to delete them.
• Signed estimates, invoices, payment records and receipts: as long as needed for warranty, legal and tax purposes.
• Job photos: as long as we keep the job record, or until you ask us to remove them from our portfolio.
• Google Calendar events: in the owner's calendar until they are deleted there. Disconnecting removes the stored Google token.

You can ask for a copy of your information, ask us to correct it or ask us to delete it by emailing nextfinishcarpentry.us@gmail.com. We may need to confirm your identity first. We will answer within a reasonable time. We may keep records the law requires us to keep, such as signed contracts and payment records.

If you don't want follow-up messages about your request, reply to any message and tell us.

We use HTTPS everywhere, encrypt sensitive records before storing them and limit access to the business owner. No method of transmission or storage is 100% secure, but we work to protect your information.

Our services are for adults, and our website is not directed to children under 13. We do not knowingly collect information from children. If you think a child sent us information, email nextfinishcarpentry.us@gmail.com and we will delete it.

If we change this policy, we will post the new version on this page and update the effective date at the top.

• Next Trim LLC dba Next Finish Carpentry
• Mailing address: 727 Summerwind Lane, Lewis Center, OH 43035
• Email: nextfinishcarpentry.us@gmail.com
• Phone or text: +1 (380) 269-5741