Privacy Policy

Last updated: April 13, 2026

Mr.GC ("we," "us," or "our") operates an AI-powered marketplace connecting New York City homeowners with licensed contractors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application.

1. Information We Collect

We collect information you provide directly, including your name, email address, phone number, and physical address when you create an account. For contractors, we also collect license numbers, trade certifications, and banking details for payment processing. When you upload photos for AI analysis, we process those images to identify repair needs and do not retain them beyond the active job lifecycle. We also collect usage data such as device type, browser, IP address, and interaction patterns to improve our services.

2. How We Use Your Information

We use your information to operate and improve the Mr.GC platform, including matching you with appropriate contractors, processing payments, verifying contractor licenses, providing AI-powered photo analysis, and communicating with you about your jobs and account. We also use aggregated, anonymized data to analyze trends, improve our AI models, and enhance the overall user experience. Your language preference is stored to deliver content in your chosen language.

3. Payment Processing (Stripe)

All payment processing is handled by Stripe, Inc. We do not store your full credit card number or bank account details on our servers. Stripe is PCI DSS Level 1 compliant, the highest level of certification in the payment industry. Payment holds, captures, and contractor payouts via Stripe Connect are subject to Stripe's own privacy policy and security measures. We store only a Stripe customer ID to link your account with your payment methods.

4. Data Sharing

We do not sell your personal information. We share limited data with contractors or customers as necessary to facilitate jobs (e.g., your name and job details when a contractor is assigned). We may share information with service providers who assist in operating the platform, including Stripe for payments, Supabase for data hosting, Anthropic for AI photo analysis, and Twilio for SMS communications. We may also disclose information when required by law, to protect our rights, or to comply with legal proceedings.

5. Data Security

We implement industry-standard security measures to protect your data. OTP codes used for arrival verification are hashed using bcrypt before storage. Database access is protected through Row Level Security (RLS) policies. All data in transit is encrypted via TLS. Photo uploads are stored in secure cloud storage with signed URLs that expire after one hour. While no method of transmission or storage is 100% secure, we strive to use commercially acceptable means to protect your personal information.

6. Your Rights

You have the right to access, update, or delete your personal information at any time through your account settings. You may request a copy of all data we hold about you. You can opt out of non-essential communications. If you are a resident of California, you have additional rights under the CCPA, including the right to know what personal information is collected and the right to request deletion. For New York residents, applicable state privacy protections also apply.

7. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at privacy@mrgc.com. You may also reach us by mail at: Mr.GC, New York, NY 10001, United States.