Privacy Policy

1. Who we are

Kuldesac is operated by Spendy LLC, a Florida limited liability company (“Kuldesac,” “we,” “us,” or “our”). For purposes of applicable data-protection laws, Spendy LLC is the controller of the personal information collected through kuldesac.com. You can reach us at:

Spendy LLC
13900 CR 455 STE 107308
Clermont, FL 34711, USA
ops+kuldesac@spendy.cc

This Privacy Policy describes what information we collect, how we use it, with whom we share it, and the choices you have. It applies to kuldesac.com and any related sites, applications, APIs, and services we provide (the “Service”), and supplements our Terms of Service.

2. Information we collect

2.1 Information you provide

• Account information. Your email address, display name, optional first/last name, phone number, role (customer or provider), and authentication codes.
• Business information (Providers). Business name, address, phone, website, hours, categories, services, coverage areas, logos, photos, promotions, and billing details (handled by our third-party payment processor).
• Saved locations and quote requests (Customers). Addresses, coordinates, labels, service categories, photos, descriptions, and chat messages exchanged with Providers.
• Communications. Messages, support requests, and feedback you send us or other users.

2.2 Information we collect automatically

• Device and usage data. IP address, user agent, device characteristics, a non-identifying browser fingerprint we use for rate-limiting and abuse prevention, session cookies, pages viewed, clicks, search queries, and timestamps.
• Location data. Approximate location derived from your IP address, the postal code or address you enter, or — only with your browser’s permission — your device’s geolocation when you use “near me” search.
• Search events. The category, geography, and result composition of searches you perform (including for anonymous visitors) so we can operate, secure, and improve the Service and understand demand patterns.
• Cookies and similar technologies. Strictly necessary cookies for session/authentication, and limited functional cookies for preferences. See Section 7.

2.3 Information from third parties

• Mapping and place data providers. Place details, addresses, geocodes, ratings, hours, and photos used to enrich listings and search results.
• Payment processors. Payment status and subscription metadata for Provider billing. Card details are entered directly with our payment processor and are not stored on our servers.
• Email and authentication delivery. Delivery status of one-time login codes and transactional emails.

3. How we use information

We use personal information to:

• Provide, operate, and maintain the Service, including matching Customers and Providers, displaying listings, processing quote requests, and routing messages;
• Authenticate accounts and send one-time login codes;
• Process payments, manage subscriptions, and send billing notices through our payment processor;
• Communicate with you about the Service, including transactional emails and, with consent where required, marketing;
• Personalize search results based on geography and stated preferences;
• Detect, investigate, and prevent fraud, spam, abuse, and security incidents;
• Analyze usage and demand (including aggregated geographic, category, and search trend data) to improve the Service and inform business decisions;
• Comply with legal obligations and enforce our Terms.

Where required, we rely on the following legal bases: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service; your consent (for example, for precise geolocation or marketing where required); and compliance with legal obligations.

4. How information is shared

• Between Customers and Providers. When you submit a quote request or message a Provider, the information needed to respond (your name, contact details, location, photos, and message contents) is shared with that Provider. Providers’ public listing information is shown to Customers and anonymous visitors.
• Service providers. We share information with trusted vendors that help us run the Service, including hosting and infrastructure, database and storage, payment processing, mapping and place data, analytics, and email delivery. These vendors may process information only on our instructions and under appropriate confidentiality and security obligations.
• Public listings. Business listings, including any photos, descriptions, and coverage information, are public by design.
• Legal and safety. We may disclose information when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of Spendy LLC, our users, or the public, or to investigate fraud or violations of our Terms.
• Business transfers. If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.
• Aggregated/de-identified data. We may share aggregated or de-identified data (for example, demand by state or category) that cannot reasonably be used to identify you.

We do not sell personal information for money.

We also do not “share” personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or similar state laws, and we do not engage in “targeted advertising” as that term is defined under the Virginia, Colorado, Connecticut, Texas, Utah, or other comprehensive state privacy laws.

4a. Sensitive personal information

The Service may collect information that is treated as “sensitive personal information” under some state laws, including precise geolocation (only with your browser’s permission) and account log-in credentials. We use sensitive information only for the purposes described in Section 3 and not to infer characteristics about you. We do not knowingly collect government-issued identifiers, biometric data, health information, or information about race, ethnicity, religion, union membership, sexual orientation, or immigration status.

4b. Automated processing

We use rules and algorithms to rank search results, match Customers and Providers, and detect fraud or abuse. We do not use solely automated processing to make decisions that produce legal or similarly significant effects about you. Account suspensions, bans, and other consequential decisions involve human review.

5. Retention

We retain personal information for as long as your account is active, as needed to provide the Service, and as required to comply with our legal obligations, resolve disputes, and enforce our agreements. Search-event and abuse-prevention logs are retained for a limited period appropriate to those purposes. When information is no longer needed, we delete or de-identify it.

6. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, hashed authentication tokens, scoped access controls, and rate limiting on sensitive operations. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

7. Cookies and tracking

We use a small number of cookies and similar technologies that are strictly necessary to operate the Service (for example, to keep you signed in) and limited functional cookies for preferences. We do not use cookies for cross-site advertising. You can control cookies through your browser settings; disabling strictly necessary cookies will break sign-in and core features.

8. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. Your choices and rights

You can:

• Access and update most of your information from your account settings;
• Manage saved locations, business listings, and promotions from your account;
• Cancel paid subscriptions at any time from your billing page;
• Unsubscribe from marketing emails using the link in any such email, and from SMS marketing (where applicable) by replying STOP;
• Sign out and request deletion of your account by emailing ops+kuldesac@spendy.cc or writing to the address in Section 13.

Depending on where you live (for example, California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, and other U.S. states with consumer-privacy laws), you may have additional rights, including the right to know, access, correct, delete, or obtain a portable copy of your personal information, the right to opt out of certain “sharing” for cross-context behavioral advertising (which we do not do), and the right not to be discriminated against for exercising these rights. To exercise any of these rights, use either of the two methods in Section 13. We will verify your request using the email associated with your account (and may request additional information for verification). We respond within the time required by law. You may designate an authorized agent to act on your behalf; we may require written proof of authorization. If we deny your request you may appeal by replying to our decision with the subject line “Privacy Appeal.”

Nevada residents. Nevada law allows certain residents to opt out of the sale of covered personal information. We do not sell covered information, but you may submit a verified request using the contact methods in Section 13.

10. U.S.-based service; international users

Kuldesac is operated from the United States and is intended for users in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to, stored, and processed in the U.S. and other jurisdictions where our service providers operate, which may have data-protection laws different from those of your country.

11. Google Maps

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your use of Google Maps content on Kuldesac is also subject to the Google Privacy Policy.

12. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective” date at the top and, if changes are material, take reasonable steps to notify you. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

13. Contact and how to submit a privacy request

Questions, requests, or complaints about this Policy or our handling of personal information? You can reach us in either of two ways:

• Email: ops+kuldesac@spendy.cc (please include “Privacy Request” in the subject line).
• Mail: Spendy LLC, Attn: Privacy, 13900 CR 455 STE 107308, Clermont, FL 34711, USA.