Tailgate Books

MEASUREABLE MEDIA LLC

TAILGATE BOOKS

PRIVACY POLICY

Version 1.1, effective October 20, 2026 | Last Updated: October 20, 2026

This Privacy Policy explains how Measureable Media LLC (“Measureable Media,” “we,” “us,” or “our”), a Colorado limited liability company, collects, uses, and discloses information in connection with Tailgate Books, including our mobile app, web application, website, and related features and services (together, the “Service”). Capitalized terms not defined in this Privacy Policy have the meanings given in our Terms of Use / User Agreement (the “Terms”), of which this Privacy Policy is a part. If this Privacy Policy conflicts with the Terms about how we process Customer Data on a Contractor's behalf, the Terms control.

This Privacy Policy applies to:

(a)Contractors — the one-person service businesses, whatever their trade, that create an account and subscribe to the Service (“Contractor,” “you,” or “your”);

(b)Helpers — the Service does not offer a separate helper login today; if we add one, this Privacy Policy will apply to a helper who is given access to a Contractor's account; and

(c)Customers — the homeowners, businesses, and other people a Contractor prepares estimates for or bills through the Service. Customers do not create accounts, are not charged by us, and are not bound by the Terms. Section 10.7 explains, in plain terms, how we handle a Customer's information.

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read and understood it. If you do not agree, do not use the Service.

KEY POINTS (a summary for convenience only; the full Policy below controls)

Two kinds of data. We hold Your Content (everything you put into the Service, including Customer Data) and Usage Data (technical information about how the Service runs), and we keep them on different schedules. (Section 7)

Your data is not for sale. We do not sell Your Content or Usage Data, use it for advertising, or use it to train AI models. (Sections 2, 6)

Ad results. If you came to us from one of our Facebook or Instagram ads, we tell Meta, from our own servers, when you start a free trial or make your first payment, using Meta's ad-click identifier, your email address in hashed form, and the IP address and browser information from your sign-up. We never send Meta your business records or anything about your Customers, and you can opt out. (Section 1.6)

Export before it's gone. You can export your records at any time before deletion — including throughout the roughly fourteen (14)-month window after a subscription lapses (thirty (30) days for a free trial that never became a paid subscription). This matches the export window in Section 16 of the Terms. (Section 7)

AI feature. Receipt reading is powered by Anthropic, and it is our only AI feature; estimate pricing comes from your own saved rates, not AI. We send Anthropic only the receipt image or PDF, and neither we nor Anthropic use your data or your Customers' data to train AI models. (Section 6)

1. INFORMATION WE COLLECT

1.1 Information You Provide Directly

Account Registration Data. When you create an account, we collect your name, business name, trade, email address, phone number, mailing address, your contractor license number if the Service asks for it, and the business settings you enter, such as your rates, your tax filing status and home state, and your own terms and notices for your Documents. We also record that you checked the box at sign-up confirming that you are at least 18 years old and that you agree to the Terms and this Privacy Policy, and the version you agreed to.

Authentication Credentials. You can sign in with an email address and password or with a sign-in link we email you. Passwords are managed by our authentication provider and are never stored in plain text; they must be at least eight characters, and they are checked against lists of passwords exposed in known breaches. If you turn on the optional two-factor sign-in, we store the setup needed to check your codes. If you turn on the optional app lock on your phone, your phone's operating system performs the face or fingerprint check; we receive only a yes-or-no result and never any biometric data.

Payment Information. Subscription payments are processed by Stripe, a PCI-DSS-compliant payment processor. We do not collect or store full card numbers, bank account numbers, or online banking credentials; we receive only a limited account identifier and status information from Stripe. If you connect a Stripe account to accept card payments from your Customers, Stripe collects your identity and bank details (such as your date of birth, address, the last four digits of your Social Security number, and your bank account) on its own pages; we receive only an account identifier and status flags showing whether Stripe has approved your account. Stripe may also ask you for a photo of a government ID, or a selfie, to verify your identity; it collects and uses those under its own privacy policy, and we never receive them.

Business Logo. A logo you upload so it can appear on your Documents and Customer pages, stored in a publicly readable location.

Communications. If you email our support, privacy, or legal address, we receive the contents of that email and any information you choose to include. Support is handled by email; support messages are not stored in the app.

Subscription Consent Record. When you start a trial or subscription, we record your user ID, the date and time, your IP address, the plan, whether a free trial applied, the first-charge date shown to you, the state of the consent checkbox, and the version of the Terms you agreed to, as described in Section 5.4 of the Terms.

Forwarded Receipts. Your account has its own private address for forwarding receipts, and only mail sent to that address is accepted. From each forwarded email we keep the address it was forwarded from, its subject line, and its image and PDF attachments, so you can recognize the receipt. If the email has no attachment, we extract the text of its body (without formatting, images, or links) and save it as a PDF copy, because many stores send the receipt as the email itself. We do not keep the email's headers or other recipients, and we skip very small images such as signature logos. An email with nothing that looks like a receipt appears in your account as a "no receipt" entry, and nothing from it is sent to our AI provider. We do not filter forwarded mail for spam.

1.2 Customer Data You Enter

“Customer Data” means information about your Customers that you or the Service enter, collect, or generate, including: names, phone numbers, email addresses, mailing addresses, job details, and notes you type (including any access instructions, such as gate codes, that you choose to record); photographs of a Customer's property; records of when a Document was sent and opened; records of an approval (the typed name and the date and time; for an approval given on the Document page, also the IP address, the link used, and the Customer's agreement to sign electronically; and, for an estimate, a copy of the accepted lines as they read at signing); and any name that appears incidentally on a receipt or photograph. You decide what Customer Data to enter, and Section 12 describes your responsibilities as to it.

When a Customer pays a Document by card, Stripe's own payment page asks the Customer for an email address and card details, including the billing postal code. Stripe collects that information directly from the Customer, under its own privacy policy. We do not pass the Customer's name or email address to Stripe, and we do not receive the card details.

1.3 Information Generated Through Use of the Service

Documents and Document Tracking. Estimates, change orders, and invoices you create (“Documents”), and whether and when a Customer opened one (a count and the first and last times).

Approval and Signature Records. When a Customer types their name on a Document page to approve a Document, we record the typed name, the date and time, the IP address, the link used, and the Customer's agreement to sign and receive the Document electronically, and, for an estimate, a copy of the lines accepted as they read at signing. When you record an approval a Customer gave you in person, we store the name and time you enter, but no IP address or link. If you mark a sale as made in person away from your place of business, such as at the Customer's home, we record that too.

Photographs and Receipts. Receipt images (captured by camera, chosen from your photo library, or forwarded by email) and photographs of your work (taken in the app or chosen from your photo library). The app reduces file size and re-encodes each photo before upload, which removes all metadata, including location, timestamp, and device information, as described in Section 5.

AI-Generated Outputs. The AI Feature (Section 6) reads a receipt and suggests four values: the store, the total, the date, and an expense category. Our servers check every value before it is stored (only allowed categories, validated amounts and dates, and text shortened to set lengths; anything else is discarded). We keep the checked values with the receipt, along with the values you confirm and a record of which AI model read it, so that a misread receipt can be understood later; we do not keep the provider's full response. Nothing it produces is posted to your books until you review and approve it, and it is never shown to a Customer.

Dictation Text. If you use dictation, the transcription is done by your phone's operating system or your web browser, not by us. On a phone that can transcribe on the device, the app requires it to, so your voice stays on the phone; on older phones or phones without the needed offline language pack, your audio may be sent to Apple or Google to be transcribed, and in a web browser such as Chrome it is sent to the browser's provider (for example, Google). The app explains this the first time you use the microphone. We receive only the resulting text. No audio is ever sent to us, our hosting provider, or our AI provider, and we create no voiceprint or other biometric identifier. (Section 9.7 of the Terms.)

Usage Data. We automatically collect technical and diagnostic information about how the Service performs, such as your app version, your device model and operating system, crash and error reports, and our servers' own security logs (“Usage Data”), to operate, secure, debug, and improve the Service (but never to train, fine-tune, or improve any AI or machine-learning model). Our error-reporting tool is configured not to collect personal information; the only identifier attached to an error report is an internal user ID. An error report may occasionally include some personal information incidentally. Apart from our web host's request logs (Section 3.1), we record an IP address in only two places: a Customer's IP address when the Customer approves a Document on the Document page (not when a Document is opened), and your IP address in your subscription consent record. The app does not collect your precise location, contacts, or advertising identifier, does not use push notifications, and does not use product-analytics, advertising, or tracking tools.

1.4 Information From Third Parties

1.5 Our Website, Cookies, and Browser Storage

Sign-in storage (strictly necessary). If you sign in to the Tailgate Books web app, we store an authentication token in your browser's local storage that keeps you signed in and protects the security of your session. In the mobile apps, the same token is kept in your phone's secure keychain. It is required for sign-in to work, and it is not used to track you. We do not set cookies in the web app.

Other storage in the app. The web app also keeps in your browser's local storage your preferences (language, the email address you last signed in with, and whether app lock is on), which notices and celebrations you have already seen, a queue of changes waiting to upload, an unsaved estimate draft, and an offline copy of your own records so the app works without a signal. These stay on your device, are used only to run the app for you, and are not used to track you. We do not use session storage. Our marketing website stores only your language preference and, if you arrived from one of our Meta ads, the ad-click identifier described in Section 1.6, and it loads no fonts, scripts, or other resources from any other company, except that the two pages a Contractor uses to respond to a card dispute and to set up card payments load Stripe's own script to open Stripe's embedded forms. Our Cookies Policy lists each item.

Customer Document pages. The page a Customer opens to view a Document loads no third-party scripts, fonts, or analytics, sets no cookies, and tells search engines not to index it.

Marketing website analytics. Our marketing website, gettailgatebooks.com, may use a privacy-friendly analytics tool that measures overall traffic, such as visits, referring sites, popular pages, country, and device type, without cookies, without collecting personal information, and without tracking you across other websites or visits. If we add one, we will name it on our subprocessor page.

No advertising cookies, pixels, or scripts. We do not use advertising, retargeting, or cross-site tracking cookies or pixels on any of our websites or apps. The only information we share for advertising is the report our servers send Meta when someone who came from one of our ads starts a trial or makes a first payment, as Section 1.6 describes, and you can opt out of it. Because we use only strictly necessary storage, first-party storage that no other company can read, and cookieless analytics, we do not show a cookie consent banner.

1.6 Advertising Measurement (Meta)

What we do. We advertise Tailgate Books on Facebook and Instagram, which are operated by Meta Platforms, Inc. (“Meta”). To learn which ads lead to sign-ups, and so Meta can show our ads to businesses likely to find them useful, our servers tell Meta, through Meta’s Conversions API, when a person who reached our website by clicking one of our Meta ads starts a free trial or makes a first subscription payment. We send nothing about a person who did not arrive from one of our Meta ads. We do not use the Meta Pixel, Meta’s software development kit, or any Meta cookie or script on our website, web app, Document pages, or mobile apps.

What we send. For each of those two events, we send Meta: the type of event (free trial started or first payment); its date and time; for a first payment, the amount and currency; the ad-click identifier Meta added to the link you clicked; the email address on your account in hashed form; and the IP address and browser information (user agent) from your sign-up, which help Meta match the event to the right account. Hashing turns the email address into a fixed code, but it does not make it anonymous: Meta can match the code to a Meta account that uses the same email address.

What we never send. We never send Meta Your Content, Customer Data, any Document, receipt, or photograph, your business records, or anything about your Customers. Nothing is sent from the Document pages your Customers open or from our mobile apps.

How we capture the ad-click identifier. When you click one of our Meta ads, Meta adds an identifier to the web address of the page you land on. Our website keeps it in your browser’s local storage, and passes it to our sign-up page, so that if you sign up we can save it with your account. It is not a cookie, and Meta and other companies cannot read it from your browser. Our Cookies Policy lists it.

How Meta uses it. Meta receives this information as an independent business under its own terms (the Meta Business Tools Terms) and its own privacy policy, not as our vendor acting only on our instructions. Meta matches it to its users to measure how our ads perform and report the results to us, to decide who sees our ads, and, under its terms, to improve its own advertising systems. Meta may combine it with information it already holds about you. Meta’s privacy policy is at https://www.facebook.com/privacy/policy.

Your choice. You can tell us not to send this information about you by emailing privacy@gettailgatebooks.com, and we will send Meta nothing further about you. If your browser sends a Global Privacy Control signal when you visit our website or sign up, we treat it as that request: our website does not keep the ad-click identifier, and we send Meta nothing about you. You can also control how Meta uses information for ads in your Facebook or Instagram ad settings. Under some state privacy laws, this reporting may be a “sale” or “sharing” of personal information or “targeted advertising”; Section 10 describes your rights.

How long we keep it. We delete the ad-click identifier once we have sent the first-payment event, and in any case no more than ninety (90) days after you clicked the ad. We delete the IP address and browser information we keep for this purpose at the same time. We keep a record of each event we sent with your account record and delete it with your account (Section 7). Meta keeps what it receives under its own policy.

2. HOW WE USE INFORMATION

2.1 Providing and Operating the Service

2.2 AI Feature Operation

The AI Feature (Section 6) is powered by a third-party AI model provider, currently Anthropic. For receipt reading, we send the provider only the receipt image or PDF, never the surrounding email, its addresses, or any identifier of you or your business. The image is sent as you photographed or forwarded it, without redaction, so anything printed on the receipt goes with it. Estimate building does not use AI, and no Customer records, rate lists, estimates, or photographs of the work are ever sent to the provider.

2.3 No Marketing to Customers; No Sale; No Model Training

We use Your Content, including Customer Data, only to provide, maintain, support, and secure the Service for you; to prevent fraud and abuse; and to comply with law. We do not sell Your Content or Customer Data, use it for advertising, or use it to market to your Customers, and we do not combine one Contractor's Customer Data with another's. We will not use Your Content — including receipts, photographs, estimates, invoices, Customer Data, or AI Feature inputs and outputs — to train, fine-tune, or improve any AI or machine-learning model, and we will not show or disclose one Contractor's data, including its prices, to another Contractor. Any exception requires your prior, written, opt-in consent specific to that use; continued use of the Service or acceptance of updated Terms is not consent. This prohibition applies to Your Content in every form, including after it has been de-identified or aggregated, and to Usage Data. We may create de-identified and aggregated data that cannot reasonably be used to identify you, any Customer, or any individual, and use it to improve the Service and its features (but never to train, fine-tune, or improve any AI or machine-learning model) and for internal research and benchmarking, such as typical prices for a type of work, reported only in a form drawn from enough businesses that no single business's figures can be identified, and in no event from fewer than ten (10) Contractors or in a form in which a single Contractor's data makes up most of the figure; we will not try to re-identify it and will not sell or license data that identifies anyone.

2.4 Communications

We send you transactional emails and notifications about your account, security, Documents, payments, subscription, data-retention and deletion notices, and changes to these Terms or this Privacy Policy. Some of these emails, such as payment receipts and notices that your card is about to expire, with a link to update it, are sent on our behalf by our payment processor, Stripe. We do not send marketing email. We also email you a reminder before your trial ends and a yearly reminder of your subscription terms and how to cancel. You cannot opt out of essential account notices while your account is active.

2.5 Legal and Security Purposes

2.6 Advertising Measurement

Measuring how our Facebook and Instagram ads perform, and helping Meta deliver them, by reporting trial starts and first payments to Meta as Section 1.6 describes. This uses only the account information listed there, never Your Content or Customer Data.

3. HOW WE SHARE INFORMATION

We do not sell your Personal Data for money. We share information only as described in this Section.

3.1 Vendors Who Process Data on Our Behalf

We use the following vendors to operate the Service. Each processes data under written terms, including the vendor's data-processing agreement where it offers one, that limit its use of the data to providing its service to us, except that Stripe, and our email provider as to its delivery records, also use some data as independent controllers for their own purposes, such as preventing fraud and abuse, verifying identity, securing and improving their services, and meeting legal requirements, under their own privacy policies. Meta, which receives the advertising information described in Section 1.6, is not our vendor; it uses that information as an independent business under its own terms. Our current list is also published on our subprocessor page at gettailgatebooks.com/subprocessors.

Vendor Function Data Involved Location & Role
Supabase Database, authentication, file storage, backups, server functions, and storage of our secret keys All Your Content and account data United States (AWS us-west-2, Oregon). Subprocessor.
Stripe Subscription billing and sales tax; card payments from your Customers to your own Stripe account; identity verification for that account Your billing and payment data; identity and bank details you give Stripe directly; the email address and card details, including the billing postal code, that a paying Customer enters directly on Stripe's payment page; for a card dispute, the evidence described in Section 3.7 United States; Stripe may transfer data to its affiliates and subprocessors in other countries. Processor for us, and an independent controller for fraud prevention, identity verification, legal compliance, and improving its services (PCI-DSS compliant).
Anthropic AI: receipt reading only Receipt images, which may show your name, a store account number, or the last four digits of a card Its terms do not limit processing to the United States. Subprocessor. No training on submitted data; kept only for a limited period under its commercial terms (longer only where needed to enforce its usage policies).
Resend Transactional email delivery and inbound receipt forwarding Your and your Customers' email addresses; Document email content; forwarded receipt emails United States (us-east-1). Keeps email content, delivery status, and logs for about 30 days. Also keeps delivery records (such as sender and recipient addresses) as an independent controller to operate and secure its service. Subprocessor.
Sentry Error and crash reporting Crash and error reports tagged with an internal user ID; configured not to collect personal information United States; reports kept about 90 days. Subprocessor.
Netlify Hosts our website and web app and serves the Customer-facing Document page Page requests, including IP addresses. Stores no Documents. U.S. company; pages are delivered through a global network, but no Service data is stored outside the United States. Its own request logs, which include viewers' IP addresses, are kept for up to about a year. Subprocessor.
Google Workspace Mailbox that receives messages sent to our support, privacy, and legal addresses The contents of emails you or a Customer send us United States (Google Workspace data region). Support email is kept three years; mail to our privacy address is kept twenty-four (24) months, and mail to our legal address seven (7) years. Subprocessor.
GitHub, Expo, Namecheap Source code hosting; building and updating our apps; our domain name and DNS Our own code and configuration; no Customer Data United States. Service providers to us.
Apple, Google App distribution; speech recognition on phones and in Chrome Your app-store account information, under their own terms; dictation audio where your device or browser sends it Independent providers under their own terms; not our subprocessors.
Meta Advertising measurement for our Facebook and Instagram ads (Section 1.6) Only for a person who came from one of our Meta ads: the event (free trial started or first payment), its time, the first-payment amount and currency, Meta’s ad-click identifier, the account email address in hashed form, and the IP address and browser information from sign-up. Never Your Content or Customer Data Independent business under the Meta Business Tools Terms and its own privacy policy; may process data outside the United States. Not our subprocessor.

Service data is stored in the United States. Email sent to our support, privacy, and legal addresses goes directly to our Google Workspace mailbox and is stored in the United States. Some vendors, such as Stripe, our AI provider, and our web host, may process or access it from other countries under the transfer terms of their data-processing agreements. We will give you at least thirty (30) days' advance notice before a new vendor of ours begins to process Customer Data, on our subprocessor page and by email, as described in Section 7.6 of the Terms, and you may object by canceling your subscription before the change takes effect. Each of our vendors also uses its own subprocessors, which it lists and updates on its own website under its own notice terms.

3.2 Legal Requirements

We may disclose information if required by law, regulation, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Measureable Media, our Contractors, Customers, or the public.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. We will provide notice before your information becomes subject to a materially different privacy policy.

3.4 With Your Consent

We may share information for other purposes with your prior consent.

3.5 Aggregated / De-Identified Data

We do not sell or license aggregated or de-identified data, and we use it only as described in Section 2.3. If we ever share it, for example with a vendor that helps us analyze it, it will be in a form that cannot reasonably be used to identify any individual or business, we will contractually prohibit the recipient from attempting to re-identify it, and we will not attempt to re-identify it ourselves.

3.6 App Store Providers

If you download the app from the Apple App Store or Google Play, those providers process your app-store account information under their own privacy policies. They are not our subprocessors and are not listed in Section 3.1.

3.7 Card Disputes

If a Customer disputes a card payment made to a Contractor, the Service drafts dispute evidence for the Contractor's Stripe account from the Contractor's own records: the Customer's name and email address; the approval record (the typed name, the date and time, and, for an approval given on the Document page, the IP address); the invoice and its lines; when each Document was emailed and first opened; and when it was paid. When the dispute arrives, the Service saves that draft to the dispute at Stripe without submitting it, so the information reaches Stripe at that point. We do this on the Contractor's behalf and at the Contractor's direction, as Section 6.8 of the Terms describes. The Service itself never submits evidence. The Contractor can review the draft, add to it, and submit it through Stripe, or accept the dispute. If the Contractor has not responded by Stripe's deadline and the dispute qualifies, Stripe's Smart Disputes feature may submit the evidence on file for the Contractor, together with information from Stripe's own records. Stripe shares dispute evidence with the card networks and the Customer's card issuer so they can decide the dispute, under Stripe's privacy policy and the card networks' rules.

3.8 Advertising Measurement

We share limited information about Contractors who came to us from one of our Meta ads with Meta, as Section 1.6 describes. We never share Customer Data for advertising.

4. EMAILING YOUR CUSTOMERS

4.1 Email on Your Behalf. When you send a Document, we deliver an email from our sending domain send.gettailgatebooks.com that shows your business name and logo and uses your email address as the reply-to address. Each Document and Document email also carries a "Made with Tailgate Books" notice linking to our website and a link to this Privacy Policy. You choose the recipients, and we do not verify that an address is correct or that the recipient wants the message.

4.2 Your Responsibility to Obtain and Document Consent. You may use the Service to email only people you have a genuine business relationship with, or whose prior consent you have obtained directly, as described in Section 10 of the Terms. Before you enter a Customer's email address or send them a Document, you must have either (a) a genuine, pre-existing business relationship with that Customer arising from a specific job, inquiry, or estimate request, or (b) that Customer's prior opt-in consent to receive electronic communications from you. Section 10.7 of the Terms requires you to keep documentation showing which basis applies to each Customer — for example, the job or estimate request, a signed work order, or a dated record of how and when consent was given — and to retain it for at least three (3) years after your last message to that Customer. We may ask you to produce that documentation, and Section 10.8 of the Terms describes what happens if you cannot.

4.3 Our Safeguards. We and our email provider may limit, filter, delay, block, or suspend sending, monitor bounces and complaints, and suspend your sending if messages appear unsolicited or abusive. We do not guarantee delivery.

4.4 Messages You Send Yourself. If you copy a Document link and send it through your own phone, email account, or messaging app, that message is sent by you, not by us, and you are solely responsible for complying with the laws that apply to it. We do not send text messages or automated calls to you or to your Customers.

5. PHOTOGRAPHS, NOTES, AND INFORMATION YOU MAY NOT ENTER

5.1 Photographs. Before photographing a Customer's property, you must have the Customer's permission and any other permission the law requires. Do not photograph people, children, personal documents, screens, or areas where people expect privacy. Whether you take a photo in the app or choose one from your phone's photo library, the app reduces its size and re-encodes it before upload, which removes all metadata, including location, timestamp, and device information; it does not detect or blur people or objects that appear in the image. (The time a photo was taken is captured separately as data within the Service, to help order before-and-after photos, but this information does not remain in the image file itself.) Photographs are private to your account unless marked for a Document. Photographs of the work are not sent to an AI provider; receipt photographs are (Section 6).

5.2 Information You Must Not Enter. The Service is not designed to collect sensitive information about your Customers and is not directed to children. You must not enter, upload, forward, or dictate: (a) Social Security, passport, driver's license, or other government identification numbers; (b) payment card numbers, bank account numbers, or passwords or other login credentials for any bank or other online service; (c) health, medical, disability, or mobility information about any individual; (d) biometric identifiers or the precise location of any individual; (e) information about any person's race, ethnicity, religion, sexual orientation, immigration status, or similar sensitive characteristics; (f) photographs of identifiable people taken without their consent; or (g) personal information about anyone you know is under 18. The app reminds you of these limits the first time you dictate and each time you take a work photo. If information covered by this Section is entered by mistake, delete it and tell us at support@gettailgatebooks.com.

5.3 Business Logo. A logo you upload is stored in a publicly readable location so it can appear on your Documents and Customer pages. Upload only a logo you have the right to make public. The logo settings screen reminds you of this.

6. AI FEATURES AND DATA

6.1 What the AI Features Do. The Service currently uses artificial intelligence in one place: reading a receipt photo or forwarded receipt to suggest four values: the store, the total, the date, and an expense category (the "AI Feature"). Each reading is labeled "Read by AI. Please check it, then tap anything to fix it." We record which AI model read each receipt, and we may pause the AI Feature at any time. Nothing it produces is posted to your books until you review and approve it, and AI output is never shown to a Customer. Building an estimate does not use AI: the Service turns your description into estimate lines on your device and proposes prices by matching it against your own saved rates. If we add AI features, we will update this Privacy Policy and the Terms first.

6.2 Third-Party AI Provider. The AI Features are powered by a third-party AI model provider, currently Anthropic, through its commercial application programming interface. We send the provider only the receipt image or PDF, and we use it under its standard commercial terms, under which it does not use the data we send, or its output, to train its models, and keeps that data only for a limited period (longer only where needed to enforce its usage policies).

6.3 No Model Training. We will not use Customer Data, receipts, photographs, estimates, invoices, or AI Feature inputs or outputs, or any de-identified or aggregated data derived from them, to train, fine-tune, or improve any AI or machine-learning model, whether for our own benefit or another Contractor's, without your prior written, opt-in consent, as described in Section 15.3 of the Terms.

6.4 Accuracy. AI output is generated probabilistically and can be wrong, incomplete, or misleading. You are solely responsible for reviewing every AI suggestion before you rely on it, as Section 11 of the Terms describes in full.

6.5 No Decisions About People. The AI Features do not score or profile individuals or make credit, eligibility, employment, housing, or similar determinations.

7. DATA RETENTION AND DELETION

We keep two broad categories of information on different schedules: Your Content — the business and Customer records you create, including Customer Data, Documents, receipts, and photographs — and Usage Data — the technical and diagnostic information described in Section 1.3. The table in Section 7.2 shows each category and how long we keep it. This schedule is the same one described in Section 16 of the Terms.

7.1 What Happens After Your Subscription Lapses

Event When What Happens
Subscription lapses Day 0 Your subscription ends and is not renewed. Your account becomes read-only: you can view and export your records, but not add or change them. Nothing is deleted. The retention clock starts.
Read-only period Months 0–12 Your Content stays stored and exportable in full. You can resubscribe at any time to restore full access and stop the clock.
First deletion notice 12 months after lapse We email the address on your account: deletion is scheduled, you have sixty (60) days, and how to resubscribe or export your records.
Reminder 30 days before deletion We send a reminder email.
Deletion ~14 months after lapse Sixty (60) days after the first notice, unless you have resubscribed, we permanently delete your business record and everything attached to it. One audit record remains, showing only that a deletion occurred and when.

Deletion confirmation. After deletion, we email you a confirmation that your data has been removed.

If you only had a free trial. If your account was only ever on a free trial and never became a paid subscription, the clock starts when the trial ends (or, if the first charge after the trial failed and no retry succeeded, when the subscription ends). Your account becomes read-only, we email you a notice about seven (7) days before deletion, and your account and its data are permanently deleted thirty (30) days after the trial ended.

If you never started a trial. If you create an account but never start a free trial, the clock starts when you sign up: we email you a notice about seven (7) days before deletion, and your account and its data are permanently deleted thirty (30) days after you signed up. A sign-in that never set up a business holds no records and is removed thirty (30) days after it was created.

Resubscribing. If you resubscribe and later lapse again, the schedule starts over. Notices go to the email address on your account.

7.2 Retention by Category

Category Retention Period What Happens After
CUSTOMER CONTENT
Customer records, jobs, hours, mileage, expenses, estimates, invoices, change orders, payments, notes, and the forwarding address and subject line of receipts you email in While the subscription is active, then per Section 7.1 (read-only period plus 60 days) Cascade-deleted from the business record by our nightly deletion process
Document open records and approval / signature records (typed name, date and time, IP address, E-SIGN consent, accepted-line snapshot) Same as the business record Deleted with the business record
A Customer's personal information that you remove from inside the app Removed immediately (name, email, phone, address, private notes, photographs of the Customer's property, the address on each estimate and job, and the address each Document was emailed to) Your financial records for that Customer stay without the Customer's name or contact details, each invoice keeps its job address because it sets the sales tax and is part of your tax record, and the signed-approval record stays as proof the work was authorized, all until the business record is deleted
Receipt photographs and work photographs Same as the business record Removed from file storage by the nightly deletion process
Business logo Same as the business records in first row Removed with other files
AI Feature inputs and outputs (the receipt image sent, and the values returned) We keep the returned values and the values you confirm with the receipt; we do not keep the provider's full response Deleted with the business record. The AI provider keeps the receipt image it processed only for the limited period its commercial terms allow
Document links Active until revoked, expired, or deleted Stop working at deletion
USAGE DATA
App version and device information attached to error reports; server and security logs, which can include IP addresses 90 days for our own server and security logs; up to about a year for our web host's request logs Rolling deletion
Error and crash reports 90 days Deleted by the vendor under its own terms
Sent emails and delivery records (sender, recipient addresses, content, delivery status) 30 days Deleted by the vendor under its own terms
ACCOUNT, BILLING & LEGAL RECORDS
Your account and profile data (name, business name, trade, license number, contact details, Stripe account identifier and status) Same as the business record Deleted with the business record, including the sign-in record
Subscription billing, tax, and accounting records About seven (7) years Kept after account deletion for that period, then deleted
Record of your consent to the subscription and Terms (user ID, date and time, IP address, plan, whether a trial applied, first-charge date shown, checkbox state, Terms version) While your account is open and at least three (3) years after it closes Kept after account deletion for that period, then deleted
Meta ad-click identifier, the sign-up IP address and browser information kept with it, and record of advertising events sent to Meta (Section 1.6) Identifier, IP address, and browser information: until the first-payment event is sent, and no more than ninety (90) days after the ad was clicked. Event record: same as the business record Deleted; Meta keeps what it received under its own policy
Support messages Three (3) years after the message is sent or received Deleted on a rolling basis
Privacy requests and legal notices sent to our privacy and legal addresses Twenty-four (24) months for mail to our privacy address; seven (7) years for mail to our legal address Deleted at the end of that period by a retention rule in our mailbox
Deletion audit record Indefinitely Not deleted — it holds no content, only the date of deletion and an internal identifier that no longer links to anything
Records under a legal hold or dispute Until the hold ends; while it applies, deletion and the notices in Section 7.1 are paused When the hold ends, the schedule in Section 7.1 starts over
Backups Daily backups are kept about seven (7) days, so deleted data is gone from backups within about a week Used only for disaster recovery; if restored, deleted data is deleted again

7.3 Exporting Your Data

You can export everything you have recorded at any time until it is deleted — including after you cancel and while your account is read-only. That means you have the full window described in Section 7.1 to export: approximately fourteen (14) months from the date your subscription lapses (the twelve (12)-month read-only period, plus the sixty (60) days that follow the first deletion notice). If your account was only a free trial, the window is thirty (30) days from the end of the trial. You can (a) create a full copy, including your records as spreadsheets, a full-history PDF, and your receipt and work photographs, on your phone or by signing in on the web from any computer, so you can export even if you lose your phone; and (b) have the spreadsheets and PDF emailed to yourself (photographs are left out because of their size). Exports include your approval and signature records: who approved and when, the IP address and link for an approval given on the Document page, the address the Document was sent to, the Customer's agreement to sign electronically, the lines accepted and declined, approvals you recorded by phone, and change orders. Emailed exports are not encrypted and do not expire, and they contain your Customers' personal information, so handle them securely. If we suspend or end your access for fraud, illegality, or a security risk, this export window does not apply, and Section 19.3 of the Terms instead gives you at least thirty (30) days to export. This is the same export timeline described in Sections 16.2 and 19.3 of the Terms.

7.4 Deleting Your Account Now

You can delete your account and all your data at any time in the app, from Settings → Delete account. Before you confirm, the app offers a one-tap link to export and asks you to type a confirmation. Deletion is immediate, permanent, and cannot be undone: it cancels your subscription (unused time is not refunded), removes your photographs from storage, deletes your business record and everything attached to it, and deletes your sign-in. A record showing only that a deletion occurred remains, and deleted data leaves our backups within about seven (7) days. If a legal hold applies to your account (Section 16.7 of the Terms), deleting your account cancels your subscription and closes your account, and we delete your data when the hold ends.

7.5 What May Remain After Deletion

After deletion, the following may remain: (a) backup copies, overwritten in the ordinary course; (b) our own billing, tax, and accounting records and our record of your consent, kept as described in the table above; (c) records held by our vendors under their own policies, such as payment and identity records Stripe must keep, sent emails and delivery records our email provider keeps for about thirty (30) days, error reports our error-reporting provider keeps for about ninety (90) days, request logs our web host keeps for up to about a year, and receipt images our AI provider keeps for the limited period its terms allow, and advertising events Meta received under Section 1.6, which Meta keeps under its own policy; (d) information we must keep to comply with law, resolve a dispute, or prevent fraud, held only as long as needed; (e) copies that you or your Customers have already downloaded, printed, or forwarded; and (f) the deletion audit record described in Section 7.2.

8. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards designed to protect Your Content, including:

No system is perfectly secure. You are responsible for securing your own devices and credentials, including keeping your device locked and its software up to date.

9. DATA BREACH NOTIFICATION

If we become aware of a breach of security that leads to unauthorized access to or acquisition of Your Content, we will notify affected Contractors by email without undue delay and, in any event, within seventy-two (72) hours after we confirm the breach, or sooner if the law requires, whether or not the law requires notice. Where the law requires notice to individuals or regulators, we will follow it, including Colorado's breach-notification law (Colo. Rev. Stat. § 6-1-716), which generally requires notice to affected Colorado residents within thirty (30) days after a breach is determined and to the Colorado Attorney General if 500 or more residents are affected, and Texas's (Tex. Bus. & Com. Code § 521.053), which generally requires notice to affected individuals within sixty (60) days and to the Texas Attorney General within thirty (30) days if 250 or more Texans are affected. We will cooperate with affected parties to mitigate harm. You are responsible for notifying your Customers where the law requires it, unless the law requires us to do so directly. We will give you the information we have about which of your Customers were affected, and reasonable help in preparing any notice.

10. YOUR PRIVACY RIGHTS

10.1 Self-Service Export and Deletion. The fastest way to access, correct, or delete your own information is through the Service itself: you can edit your account and Customer records directly, and export or delete your data as described in Section 7.

10.2 Other Requests. Depending on your location and applicable law, you may have the right to request access to, correction of, or deletion of Personal Data we hold about you, or to receive it in a portable format. To submit a request, contact us at privacy@gettailgatebooks.com. We will respond within the time applicable law requires.

10.3 Requests From Customers. Customers do not have accounts, but they may contact us — for example, to ask what information we hold. If a Customer asks us to show, correct, or delete information, we will acknowledge the request, refer it to the Contractor who entered the data, and tell the Customer we have done so, and the Contractor agrees to respond promptly and within the time the law requires. We may respond directly where the law requires it or where a Customer reports abuse or fraud. This mirrors Section 7.4 of the Terms. Section 10.7 explains this process for Customers.

10.4 Colorado and Texas Residents. Measureable Media is a Colorado company. The Colorado Privacy Act applies to businesses that process the personal data of 100,000 or more Colorado consumers a year, or 25,000 or more while earning revenue from selling personal data, and the Texas Data Privacy and Security Act does not apply to small businesses as defined by the U.S. Small Business Administration, except for its rule against selling sensitive personal data without consent. Neither law treats a person acting in a business capacity as a consumer. Whether or not either law applies to us, if you are a Colorado or Texas resident you may ask us to confirm whether we process your Personal Data, and to access, correct, delete, or obtain a portable copy of it, by writing to privacy@gettailgatebooks.com. We will respond within forty-five (45) days. If we decline your request, you may appeal by replying to our decision, and if we deny your appeal, you may contact the Colorado Attorney General or the Texas Attorney General. We do not sell Personal Data for money, we do not use sensitive data for advertising, and we do not use Personal Data for profiling. The advertising reporting described in Section 1.6 may count as targeted advertising or a sale of personal data under these laws. Whether or not they apply to us, you may opt out of it as Section 1.6 describes, and we treat a Global Privacy Control signal as a request to opt out.

10.5 California Residents. If you are a California resident, you may have additional rights under the California Consumer Privacy Act / California Privacy Rights Act, including the right to know, delete, and opt out of the sale or sharing of Personal Information. We do not sell Personal Information for money. The advertising reporting described in Section 1.6 may be “sharing” for cross-context behavioral advertising; you may opt out of it as Section 1.6 describes, and we treat a Global Privacy Control signal as a request to opt out.

10.6 Other States. Residents of other states with comprehensive privacy laws may have similar rights. Contact us at privacy@gettailgatebooks.com and we will honor requests as applicable law requires.

10.7 If You Are a Customer of a Contractor

This Section is for homeowners and other customers who received an estimate or invoice from a contractor who uses Tailgate Books. You don't have an account with us and haven't agreed to our Terms. Here is how we handle your information.

Who we are to you. Your contractor uses Tailgate Books, our software, to prepare estimates and invoices and to keep business records. Your contractor decides what information about you to enter and send. We hold it on the contractor's behalf, and use it only to provide the software to them.

What we hold. What your contractor enters, such as your name, phone number, email address, address, job details, and notes (which can include access instructions such as a gate code; those notes are never shown on your documents), and photographs of the work at your property. We also hold records of when you opened a document and, if you approved one, your typed name, the date and time, your IP address, the lines you accepted, your agreement to sign electronically, and whether your contractor marked the sale as made in person. When you pay by card, Stripe's payment page asks you for your email address and card details, including your postal code, and Stripe collects them directly; neither your contractor nor we ever see your card number. Stripe's privacy policy, at stripe.com/privacy, explains how Stripe uses your payment information. If you dispute a card payment, Tailgate Books saves records of the job from your contractor's account, including your name, email address, and approval record, with the dispute at Stripe, where your contractor, or Stripe on your contractor's behalf, can submit them. Stripe shares them with the card networks and your bank to decide the dispute.

What we don't do. We don't sell your information, use it for advertising, market to you, or contact you on our own behalf. We never send your information to Meta or any other advertising company. We don't use your information to train, fine-tune, or improve any artificial intelligence or machine-learning model. If you are a customer of two contractors who use Tailgate Books, your records are kept separately and are never combined. Location and other hidden data are stripped from photographs before they are stored.

Your document link. The link in your email is the key to your document: anyone who has it can view that one document until it expires or your contractor revokes it, so don't forward it unless you mean to share it.

How long we keep it. For as long as your contractor keeps their Tailgate Books account, and then until their account is deleted under Section 7. When you approve an estimate, we email you a copy of it, so you have your own record.

Your choices. The fastest way to see, correct, or delete your information is to ask your contractor, who can remove your personal information from inside the app. Their financial records of the job are kept without your name or contact details, but each invoice keeps the job address, which is part of the contractor's tax record, and the record of your approval, including your typed name, is kept as proof the work was authorized. You can also write to us at privacy@gettailgatebooks.com. We will acknowledge your request, forward it to your contractor, and let you know we have done so, and we may respond directly where the law requires it or if you report abuse or fraud.

11. CHILDREN'S PRIVACY

The Service is business software for Contractors, who must be at least 18 years old. It is not directed to children, and we do not knowingly collect Personal Data from children under 13. Section 5.2 above prohibits Contractors from entering personal information about anyone they know is under 18. If we become aware that we have inadvertently received Personal Data from a child under 13, we will delete it promptly. If you believe we have collected information from a child, contact us immediately at privacy@gettailgatebooks.com.

12. CONTRACTOR RESPONSIBILITIES FOR CUSTOMER DATA

When you use the Service to process a Customer's Personal Data, you act as the data controller (or “business”) and we act as the processor (or “service provider”), as Section 7.6 of the Terms describes. In this capacity:

13. THIRD-PARTY LINKS AND SERVICES

The Service depends on and may link to third-party services, including Stripe, Apple, Google, our AI provider, and our hosting and email vendors. This Privacy Policy does not apply to those services, and we are not responsible for their privacy practices. Please review their policies directly:

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy. For a material change, we will give you at least thirty (30) days' notice by email and in the app before it takes effect, consistent with Section 25 of the Terms. The “Last Updated” date at the top of this Policy reflects the most recent revision. Your continued use of the Service after the effective date of a change constitutes your acceptance of the updated Policy.

15. DISPUTE RESOLUTION

Any dispute between a Contractor and us arising under this Privacy Policy is resolved under the dispute-resolution, binding-arbitration, and class-action-waiver provisions of Section 23 of the Terms, which are incorporated here by reference. Customers have not agreed to the Terms, and this Section does not apply to them. This Privacy Policy is governed by the laws of the State of Colorado.

16. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Measureable Media LLC, a Colorado limited liability company

1500 N Grant St, Ste R, Denver, CO 80203

Support: support@gettailgatebooks.com | Privacy: privacy@gettailgatebooks.com | Legal notices: legal@gettailgatebooks.com

Website: gettailgatebooks.com

This Privacy Policy is part of, and incorporated by reference into, the Tailgate Books Terms of Use / User Agreement.