Privacy

What we collect

• Account: your name, email, phone number if you add one, and your sign-in.
• Your home: addresses, rooms, appliances, documents, photos, notes, maintenance history, and access codes you choose to store (codes are kept encrypted and every time one is shown is logged).
• Jobs and contracts: requests, quotes, messages, photos, signed contracts and their signing records (time, network address and browser).
• Contractors: business name, address, signer, licence and registration numbers and what the State registry says about them, insurance documents, price book, and ratings.
• Payments: amounts, status and Stripe identifiers. Card and bank numbers go straight to Stripe; Mezzo never sees or stores them.
• Use: which pages and features are used, so we can tell whether Mezzo works. We use only the cookies needed to keep you signed in.

Invoices, receipts and service plans

• When a contractor sends an invoice, they give us the customer’s name, email and billing address. The customer opens a private link to pay; no account is made. Receipts a contractor attaches to an expense are stored privately for that business.
• A service plan stores the customer’s name and email (held by the contractor), the home it is for, a label for the card or bank account (such as “Visa ending 4242”, never the number), each payment, the visits, and a copy of the words the customer agreed to.
• A contractor’s optional public page shows its business name, town, trades, areas, badges, reviews and photos it chose to add. It never shows a phone number, email or street address.

Reviews, claims, waivers and certificates

• A review and its writer’s business are shown with the review once it is released. A review is released when both sides have written one or after 14 days. The public sees the homeowner’s town, not the street.
• A warranty claim, its description and its conversation are shared between the homeowner, the contractor and, if it is escalated, Mezzo’s staff.
• A lien waiver is kept as signed (name, title, date, amount) and shared with the homeowner and the contractor.
• When a contractor shares a certificate of insurance, Mezzo records who it was shared with (the name and email entered), how often the link was opened, and the link’s expiry.

When our staff look at your account

Mezzo’s support staff see a directory entry only (your name, email, accounts and when you joined) unless you turn on “Let support look at my account”. Staff actions that change something, and every look at an account you shared, are written to an audit log that cannot be edited. Staff can also see review reports and escalated claims that involve you, and, for a home-repair AI session that was flagged for safety, the conversation (opening it is logged).

Customers a contractor brings to Mezzo

A contractor can invite a customer they already have. To do that they give us the customer’s name, email and job-site address. Nothing is added to any account until the customer opens the link and chooses to sign in. If the customer never opens it, that information is deleted after 30 days.

AI processing

Some features send text or photos you provide — a request description, notes for a quote, a question about your home, a photo of an appliance label, a photo of a room for your home inventory, a scanned document you upload to your home’s vault — to an AI service (Anthropic) so it can answer. We send only what that feature needs; access codes and other secrets are never sent. Allowances limit how often each person can use these features.

Who we share it with

• The other people on a job. A contractor sees the job-site address and details of work they are quoting or have been awarded, and not your whole home. A homeowner sees a contractor’s business profile, licence checks and ratings.
• Service providers that run Mezzo: Supabase (database and files), Vercel (hosting), Stripe (payments), Resend (email), Twilio (text messages, only if you turn them on), Anthropic (AI), the U.S. Census geocoder (address checking) and, when switched on, a property-records vendor for public facts about a home. They may use the data only to provide their service to Mezzo.
• Authorities, when the law requires it.
• We do not sell personal information.

Keeping it, and closing your account

• You can export or delete your data from Account settings.
• When you close your account we delete your personal data and scrub your name from records other people on a job share. Before deleting, Mezzo writes a sealed archive of what it removes. That archive is kept for six years, readable only by platform administrators, so Mezzo can settle a dispute or answer a legal request, and is then erased. During those six years we can restore the account if you ask.
• Signed contracts stay whole. A contract names the homeowner and the contractor and each is entitled to a copy, so it is kept as signed after either of them closes an account.
• Access codes, push tokens, notifications and AI usage counts are not archived.

Notifications

Mezzo emails you about your jobs and home, and can send phone notifications and — only if you turn them on and give a number — text messages. For texts we keep a record of when you agreed, the exact wording you saw and the number it applies to, and whether you have replied STOP, so we text only numbers that agreed and never after STOP. Every email carries our postal address and a way to change what we send. You can change each channel, set quiet hours and choose digests under Settings → Notifications. Payment trouble, disputes, recalls, schedule conflicts and “technician on the way” are urgent and can come through during quiet hours.

Your choices and contact

You can see and correct your information in the app, and ask us for a copy or deletion at any time. Contact Mezzo support from the app. [Support address and any state-specific rights language to be added once counsel has reviewed this text.]