Privacy Policy
Last updated August 30, 2026
1. Overview
This Privacy Policy explains what information Goshawk collects, how it's used, and who it's shared with. It applies to everyone who interacts with Goshawk — Contractors who create an account, and the homeowners and customers (“Customers”) whose information is collected while an estimate, proposal, or contact-form message is generated, even though Customers never create an account of their own.
2. Information We Collect From Contractors
Your name, email, and phone; your business name, address, and the services you offer; any license, bond, or insurance documents you submit for compliance review; the pricing prompts, tier descriptions, and disclaimer text you configure; and billing information, which is collected and stored by Stripe directly — Goshawk never sees or stores your card number.
3. Information We Collect From Customers
When a homeowner uses the public estimate tool, a Contractor's quote widget, or the contact-form widget, we collect what they enter to generate an estimate or send a message: name, phone, email, property address, any photos submitted for measurement or context, and answers to job-specific questions. A homeowner's estimate/proposal information is shared with the Contractor it was routed to or attributed to; it is not shared with any other Contractor.
4. Information Collected Automatically
Standard technical information any web server logs — IP address, browser type, request timestamps — and anti-abuse signals from Cloudflare Turnstile, used to tell real visitors apart from automated abuse on public forms. We don't run third-party advertising trackers or analytics scripts on any Goshawk property today.
5. How We Use Information
To generate and send estimates and proposals; to route a Customer's request to the right Contractor; to review Contractor compliance documents; to process subscription billing; to send transactional email (an estimate, a proposal acceptance link, a contact-form notification); to respond to support inquiries; and to operate, secure, and improve the Service.
6. Third-Party Service Providers
Goshawk shares information with the following providers only as needed for them to do their job, and each handles it under their own privacy policy, not this one: Google (sign-in, and address/satellite measurement data); Stripe (subscription billing, and, if a Contractor connects their own account, that Contractor's own customer payments); Cloudflare (Turnstile bot-protection); Brevo (transactional email delivery); Microsoft Azure (hosting, database, and file storage); and, only if a Contractor chooses to connect one, QuickBooks or Wave.
7. How Long We Keep Information
Contractor account information is kept for as long as the account exists. Customer/estimate information is kept for as long as it's useful to the Contractor it was routed to, or until deletion is requested under §9. Compliance documents are kept for as long as needed for compliance review and are stored as private files, never made public.
8. Data Sharing
Goshawk does not sell personal information. Information is shared only with the third-party providers in §6, with the Contractor a Customer's request was routed to, and if legally required — for example, in response to a valid subpoena or court order.
9. Security & Your Choices
All traffic to Goshawk is encrypted in transit (HTTPS/TLS); data is stored on access-controlled Microsoft Azure infrastructure. No system is completely secure, and we can't guarantee absolute security. To ask what information we have on file about you, request a correction, or request deletion where we're able to honor it, contact privacy@goshawk.pro. Contractors can view and update most of their own account information directly in Pro Portal. Goshawk uses only functional/session cookies needed for sign-in — no third-party advertising cookies.
10. Children's Privacy
Goshawk isn't directed at children and we don't knowingly collect information from anyone under 13. If you believe a child has provided us information, contact privacy@goshawk.pro and we'll remove it.
11. Where Information Is Stored
Goshawk's servers, database, and file storage run in Microsoft Azure data centers in the United States. Goshawk is not currently built to meet GDPR, UK GDPR, or similar international data-protection frameworks, and doesn't represent that it does — if you need specific assurances about cross-border data transfer before providing information, contact us first at privacy@goshawk.pro.
12. Changes to This Policy
Goshawk may update this Privacy Policy from time to time. If changes are material, we'll make reasonable efforts to notify active accounts. Continuing to use the Service after changes take effect means you accept the updated policy.
13. Contact
Questions about this Privacy Policy, or a request under §9? Contact privacy@goshawk.pro.