Window Man

Privacy Policy

Last updated: March 5, 2026

Window Man ("we", "us", "our") operates itswindowman.com. This policy explains what data we collect, how we use it, and how long we keep it. We believe in plain language — no legalese.

Data Retention Schedule

We apply different retention periods depending on data type and sensitivity.

Data TypeRetentionNotes

Uploaded quote documents (PDF, images)Download Now90 daysAutomatically deleted from our storage. Download a copy to keep it permanently.

Structured audit data (scores, findings, pillar results)Until deletion requestRetained to power your report history and future comparisons.

Email addressUntil deletion requestUsed for magic link verification and report delivery only.

Phone number (hashed)Until deletion requestStored as a one-way hash (SHA-256). Cannot be reversed. Used for OTP verification only.

Session cookies24 hours (email) / 30 days (phone-verified)HttpOnly, Secure, SameSite=Lax. Revoked on logout.

Analytics events (scores, risk levels, actions)2 yearsAggregated and anonymized for product improvement. No PII in event payloads.

IP addresses (rate limiting)24 hoursUsed only for rate limiting. Not stored in our database.

What We Collect

Quote documents: PDFs and images you upload for analysis. These are processed by our AI engine to extract structured data, then deleted after 90 days.

Contact information: Email and phone number, collected during the verification flow. Phone numbers are hashed before storage.

Audit results: Scores, findings, risk levels, and pillar results generated from your quote. Retained indefinitely to power your report history.

Usage analytics: Anonymous events (e.g., "report viewed", "script copied") to improve the product. No PII in event payloads.

What We Don't Do

✓We do not sell your data to third parties.
✓We do not store your phone number in plain text.
✓We do not share your quote documents with contractors.
✓We do not use your data for advertising targeting.
✓We do not retain uploaded documents beyond 90 days.

Your Rights

You may request deletion of your account and all associated data at any time by emailing [email protected]. We will process your request within 30 days.

Contact

Questions about this policy? Contact us at [email protected].