What we know about you, and what we do with it.

Changes to this policy

If what we collect or how we use it changes, this policy gets updated before or at the same time as the change, and the effective date at the top moves. That is exactly what happened here: on August 9, 2026 we added our own self-hosted visitor counting, launched the member portal and opened the agency console, so this page grew an analytics table, the member-area section, the agency-partner section, the location-lookup disclosure and a new date on the same day. On September 14, 2026 it named Tailgate Office, LLC as the business and described the free install. On September 15, 2026 it gained how long consent and opt-out records are kept, and the one promotional text a business can send through our platform, only to someone who agreed to it. On September 23, 2026 the form table gained “Where you came from”, the day the form started keeping a link’s tag on the inquiry. On September 24, 2026 it listed every email the service sends, said trials are set up automatically, added the website field, the office’s records and the homeowner IP addresses kept with them, paying invoices through a contractor’s own Stripe account, Google Fonts and our mail relay, SMTP2GO, and said the “Where you came from” note now names the page of this site the sign-up link was on. On October 1, 2026 it gained the section on businesses in our contractor directory: what we read from a business’s own website and publish, what we never keep, the free correct-or-remove and claim forms, and how long a requester’s or claimant’s details are kept. On October 2, 2026 that section added that a business can ask us to call the number its own website shows to claim its listing, and what we keep about such a request and for how long, and that a business claiming its listing is offered, in its editor, the opening hours its own website publishes. Also on October 2, 2026 the offer to call was withdrawn before anyone used it, and the section added that a business can claim with a short code on its own website or in its domain’s DNS settings before it has an account, what that check reads and what we keep, and that a verified claim fills in the trial form from the browser that made it, and that a listing may also show a line from a public license, registration or building-permit list that names the business, with its source and date. On October 3, 2026 it added that a business that claims its listing can answer a few set questions in its own words and type in an email address to show, which shows only while its account is on a trial or a paid plan. Also on October 3, 2026 the directory section added that a free trial started from the browser that checked a claim code writes the new account onto the claim, so the listing can be attached from any device; and “Exactly what is published” caught up with the profile page: the dated lines read from the business’s own website (services, towns, the year, a printed license number, its pages, free estimates, online booking, a prices page, the hours in its page’s structured data, emergency and financing words, its social pages), the summary sentence, the nearby cards’ distances and facts, the public-record lines, and the state’s before-you-hire text; and the section added a way to claim a listing by typing the email address the business’s own website shows. On October 4, 2026 that way was withdrawn before anyone used it: a business claims with an email at its own domain, a short code on its own website or a record in its domain’s DNS settings, and the directory keeps nothing of the email addresses a website shows.

In October 2026 the directory section added that each listing’s views and Call and Website taps are counted, as monthly totals kept for 13 months, without cookies or personal data, and that the counter briefly holds a one-way code of the internet address, never matched to an address after its day, to stop one connection inflating a count.

In October 2026 the directory section also added that a listing can name the business’s own pages on Facebook, Instagram, LinkedIn, X, YouTube, TikTok, Pinterest or Nextdoor when its own home page links them, as plain links to sites we never visit or copy, and that a business that claims its listing can give, change or hide those addresses.

In October 2026 the directory section also added the photos a business can add to its claimed listing while its account is on a trial or a paid plan: that a profile photo is public, that we keep the resized copy and the caption and never the original or its location details, that the copies sit in the same private storage as quote photos and reach a visitor from our own server while the business’s own browser sends them to Amazon and loads them from there in the portal, and when they are deleted.

In October 2026 the directory section also added the listing a business with no website can make itself from its account: what such a listing shows and that its page said it was made by the business, and that a person would look at it before it first showed (both reworded since, as below), that it shows only while the account is on a trial or a paid plan, and what we keep about it, including the one-way form of a confirmation code texted to the number the business typed, once our own texting is registered.

In October 2026 the directory section also added that a listing’s “This number did not reach this business?” link, the “Is your business missing?” box and a confirmed correction can ask our crawler to read that business’s website again, and that nothing about the person asking is kept with that beyond a brief one-way code of the internet address, of the counter’s kind, to limit repeat asks.

In October 2026 the directory section also added that a business can ask for a pause instead of a removal: its listing hidden for 90 days and back by itself after that unless the business asks to remove it, its details kept for when it returns, nothing put on the do-not-list record, the pause starting on the confirm click only from an address at the business’s own domain, and any other pause waits for a person, as a removal does.

In October 2026 “What we use it for” also added the card “The Field Notes newsletter”, before its signup opened: what the signup box keeps about an address and for how long, that only a confirmed address gets the weekly email, that the address is never sold or shared with anyone for their own use, that SMTP2GO carries the email, and that an address that unsubscribes is never sent our sales email either.

In October 2026 the card “Setting up what you asked for” also added that we use what a sign-up sends to keep one free trial per business, by comparing a new sign-up’s phone number, website and business name with our earlier accounts, and that a sign-up that matches one waits for a person to look at it first, as one our spam check holds does.

On October 5, 2026 the directory section added the Save button, a visitor’s own shortlist of businesses kept in their browser only and never sent to us, and “Exactly what is published” added the questions to ask, most of them from the Federal Trade Commission’s public advice, that a profile shows where we have nothing checked for its state, a business’s own emergency words quoted on its card in the nine trades people call in a hurry, and a card’s note when that business’s own website names the town of the page. The same day a state license line began to name the day the board first issued that license, and a third way of matching one was added: by the license number and name a business’s own website prints, each such pair checked by a person before it shows. Also that day the section added the “Is your business missing?” box: what it keeps and for how long, and that a website new to us sent through it is never emailed, texted or made a sales lead.

On October 6, 2026, after our own review of the directory’s legal risks on October 5: “What is never published or kept” became “What the directory never shows”, because our sales research may hold a street address and an email address a business’s own website printed, which no listing shows, the directory’s private record of where each fact came from can hold one a page title or footer printed, and the directory keeps a ZIP code to search by; the page says a removal keeps its records rather than deleting them, and when the business reaches our sales research’s opt-out list; the access paragraph says which records are kept instead of deleted, and that what the directory section deletes is deleted on its schedule; the research record names the town, state and ZIP code it holds; the Do Not Track sentence says we do not sell your information or share it for advertising; the checks the directory makes before a made listing, a trial’s photo or a license pair shows are said to be Tailgate Office’s; the request to be called is said to be closed; the directory’s forms, the administrators’ preview cookie and our answer to Do Not Track and Global Privacy Control signals were added; and the page no longer says a lawyer will review it.

Also on October 6, 2026, after decisions the owner made on that review: the page says what our web server’s own request log notes for each request. It no longer says we contact anyone by phone: the form’s phone number is said to be used for the trial account, we answer by email, the example of a link’s tag is no longer a call, and the closed request to be called is closed for good. A listing made from an account is now quoted as saying it was made from an account that says it is the business, which we have not confirmed. And a listing removed on a person’s privacy request, or on a removal asked for by the business (through the correct-or-remove form, or from its own account) or by a person the page names, now also has the email address, street address and ZIP code blanked, for good, in our research record of that business and in the directory’s private record of where its facts came from, and its website goes on our research opt-out list at once; its name, domain, phone number, town, state and trades stay. The removal paragraph names exactly what is blanked: in the research record, the email, street and ZIP code and our note of where that address came from, its notes holding an email address or an address, and the address in the search results that first found it; in the directory, all the text each of the listing’s facts was read from (the address and date of the page it came from stay), and the listing’s ZIP code with its earlier values, and on a privacy request its town and state facts too, even when the listing was removed before the request came. The do-not-list record is said to keep the phone number for 24 months, not for good. A claim we approve by hand, on written evidence and never on a call, is said to carry our note of that evidence, deleted with the claim’s other details; claiming by phone is closed in our code whatever its settings say. The correct-or-remove form no longer asks for a phone number. A listing made from an account is no longer said, in our own words, to be made by the business. And the note on payment cards gives the true reason we hold no card data: we take no card, and a contractor’s customers pay its invoices on Stripe’s own page. On October 10, 2026 a scheduled task on our server began deleting each day’s file of that log 90 days after it was written, and the page says so.

Also on October 6, 2026, “Exactly what is published” added that the cards pointing to nearby businesses, and the cards on the directory’s list pages, may say a business lists Saturday or Sunday hours, taken from the opening hours its own website publishes in its page’s structured data, or from the hours it saved after claiming its listing, and never whether it is open at this moment.

On October 7, 2026 the directory’s pages gained two lines that are about a place, never about a business, and so change nothing above: the pages of a town may carry a dated line naming the public offices that issue building permits there, read from those offices’ own pages, and the questions-to-ask box links the state’s own license search where we checked one. No data about a visitor or a business is involved in either.

On October 7, 2026 the policy said who else may see a support question. The “What we use it for” section gained the card “When you write to our support”: when you write to us by email, through our contact form or on the Help page of your account, we may use Anthropic, an AI company, to sort your message and draft the answer, when this is switched on; what Anthropic receives and never receives, that it may not train on it and deletes it within 30 days, and that questions about money, cancelling, legal matters or your data always go to a person; and that if you are not a customer yet our assistant may answer you automatically, when this is switched on, from our public help articles and prices alone. Retention gained the 24 months we keep support conversations and the assistant’s drafts. The member-area section says that a contractor who turns on suggested replies sends the conversation it is replying to to Anthropic under its own API key, when it presses the button, and nowhere else. And the list of outside services gained Anthropic, for support and for suggested replies, and Google Workspace, our email provider, which receives the email you send us. On that day none of the assistant’s answering was switched on, which is why the card says “may” and “when this is switched on”.

On October 8, 2026 the card “When you write to our support” said how the support mailbox is read: that email to support@tailgateoffice.com, or to hello@, billing@, sales@, legal@, privacy@, compliance@, partners@ or agencies@ at tailgateoffice.com, arrives in one support mailbox at Google Workspace; that when this is switched on our own server reads that one mailbox, with read-only access, and no other; that it looks at the address lines of each new message, leaves alone bulk mail, automatic replies, bounces and our own alerts, and stores the rest with the conversation for the 24 months the retention line says; that of those only a message that passed every check the card describes, with earlier quoted emails removed, is sent to Anthropic, and that a message to legal@, privacy@, compliance@, partners@ or agencies@ never is and always goes to a person, as replies from contractors’ customers and directory requests never are; that our owner’s own mailbox is never read by our server; and that of a message it leaves alone we keep only a note that it was checked, for 30 days. On that day the reading was not switched on, which is why the paragraph says “when this is switched on”.

On October 9, 2026 our phone number came off this page, as it came off every page of this site: email and the contact form are the ways to reach us, and the line at the top and the Contact card say so. The form table’s Message row stopped saying nothing reads a message for its words, because our spam check does and a question may be sorted and drafted by our AI assistant, as the card “When you write to our support” says; and “Responding to you” stopped saying that leads are answered by hand.

On October 11, 2026 the directory section added that a business can also be found through a public license or registration list, and that our sales research keeps a private copy of those lists, with the people they name, which is never published or used to call or text anyone, and how to ask us to stop using a record; “What we collect” and the access paragraph say so too. It also said that Tailgate Office may send a business a sales email, listed or not, only to the address its own website publishes and never to a business that asked to be removed from the directory or opted out, and our compliance page, which had said the directory never uses an email address found on a website, now says the same.

On October 17, 2026 “What we use it for” added a paragraph on Tailgate Office’s own texting program, which Tailgate Office, LLC is registering with the mobile carriers: who it texts and how a person asks for its texts, that the texts are notices and never marketing, how often, how STOP, START and HELP work, the texts to our own subscribers, that mobile numbers and texting consent are never shared with or sold to anyone for their marketing, and that nothing is texted until the carriers approve the program and we switch it on, with links to the program’s own SMS terms and SMS privacy pages. The sentence on carrier registration filed per business now names that program too, and Retention says its consent and opt-out records are kept for the same five years, counted from the last of the consent, the last text to that number, a STOP or a START.

On October 21, 2026 the form table said what the trial form asks for: your name and your email, and nothing else, with no message box. Your business’s name, phone, city, state and ZIP code, your trade and your website are asked in your account’s first setup instead, where all of them are required, the website unless you tick that you do not have one yet. The Company name, Website, Phone, Trade and City, state and ZIP rows say so, the Company name row says that a trial started from a directory listing you claimed starts its account with that listing’s details, the Message row says the trial form has no message box, and the card “Setting up what you asked for” no longer says the trade field matters.

Also on October 21, 2026 the member-area section said what goes to Anthropic, an AI company, when a contractor asks us to build a NapkinPrice price sheet from its own description, once that is switched on: what it types in that box and its trade, under our own API key, when it presses the button, and nothing else from its account, with anything shaped like an email address or a phone number taken out first; that Anthropic may not train on it and deletes it within 30 days; and that we keep the price sheet, not what was typed. “What we never do with your data” and the location-lookup card name Anthropic for it too.

Also on October 21, 2026 the same line came to cover a CrewFunnel job post drafted from a contractor’s own description of the job, once that is switched on: what it types in that box and its trade go to Anthropic under our own API key when it presses “Draft my job post”, and nothing else from its account, nothing about its customers or applicants unless typed there, with anything shaped like an email address or a phone number taken out first; and we keep a job post it drafts only once the contractor posts it, and not what was typed. “What we never do with your data” and the location-lookup card name it too.

On October 22, 2026 suggested replies moved to our own API key, once that is switched on: when a contractor presses “Suggest a reply” on a conversation with a customer, we send Anthropic up to the last 12 messages of that conversation, with anything shaped like an email address, a phone number, a payment card number or a Social Security number taken out, and the contractor’s business name, trade, services, hours, phone number and how it likes to sound; never a conversation with a job applicant; the draft only fills the reply box, and nothing reaches the customer until the contractor presses Send; and we keep a count of the drafts and their cost, not a copy of what was sent. Contractors no longer give us an Anthropic API key of their own. The “Leads and conversations” row and “What we never do with your data” say the same.

On October 23, 2026 the trial form gained an optional mobile number for our own text alerts, under a box you tick only if you want them, and the form table gained its row: the number is kept only with that box ticked, saved on your new account with a record of the tick (while our spam check holds a sign-up, in a note on the inquiry until the account is set up), and texted nothing but a code until you type that code on your Account page; the card “Setting up what you asked for” says the trial form may take it. “What we never do with your data” added that the outside services it names exclude text messaging originator opt-in data and consent, which are never shared with any third parties.

On October 26, 2026 the directory section’s paragraph on removals said what a removal keeps in our sales research as it is today. Since October 2026 our research keeps a short note of its own about how a business was found (such as the website’s own title, its trade and town, and the day we read the website, or our filter’s reason) in place of a search engine’s own titles and snippets, so the paragraph no longer names those among what a removal keeps; it names that note. Nothing else about removals changed. The effective date at the top moved to that day.

Also on October 26, 2026 the free-install promotion had ended, so the section on the member area no longer says that claiming a free NapkinPrice install sends your business name, contact details and website to Data Processing, LLC: two things go to someone else when you ask, not three. The list of the emails the service sends no longer names the claim’s confirmation, and “Who we are” now says Tailgate Office, LLC was started by the team behind the web agency Data Processing LLC, where it had said the agency founded the company. Also that day the check that keeps one free trial per business, which the card “Setting up what you asked for” describes, began to run on new trial sign-ups.

On October 27, 2026 the paragraph on Tailgate Office’s own texting program, under “What we use it for”, came to describe that program as it now stands: our texts to our own subscribers, the contractors who use Tailgate Office, about their own accounts (the code that confirms their mobile number, alerts about their own new leads, and previews of texts their account composed), only at the one mobile number each gave us with a ticked box and confirmed with a code. It no longer describes notices for contractors’ customers: those are not part of the program, and a contractor’s texts to its own customers need that contractor’s own registration with the mobile carriers. The sentence on carrier registration filed per business no longer names the program. The effective date at the top moved to that day.

On October 29, 2026 the directory section’s two sentences on sales email came to allow one more address besides the one a business publishes on its own website: the email address a public license or registration list gives for the business itself, leaving out the address of anyone licensed or registered on their own and any address we can tell is a person’s own mailbox, such as a free mailbox spelled as a person’s name, with the same real sender, postal address and one-click opt-out honored for good, and still never to a business that asked to be removed from the directory or opted out. Our compliance page now says the same. The paragraph on our private copy of the license and registration lists now says they are the lists agencies publish or provide on request, names Massachusetts’ and North Carolina’s among its examples, and says the copy keeps them as the agencies give them. The effective date at the top moved to that day.

Also on October 29, 2026 the section on the member area gained a row for your carrier registration details: what the setup guide asks before your own texting number is registered with the mobile carriers (for a business with an EIN, its legal name, the EIN, its address and a contact; for a sole proprietor with no EIN, your own name as on your ID and your own mobile number), why we keep them, and that a filing sends them to Telnyx and The Campaign Registry, with one code text to a sole proprietor’s mobile. The card on what we do with member-area data names the carriers beside Stripe.

Also on October 29, 2026 the row on the message outbox and logs gained one sentence: for a business that texts from its own registered number, we keep a record of each text part and call minute on that number and what it cost at the carriers’ price, with our billing records, so it can be charged at cost, as the terms of service say; the record holds no message text and no customer’s number.

Also on October 29, 2026 “What we use it for” added a paragraph on voice messages: where a contractor’s missed calls reach a greeting Tailgate Office plays on the contractor’s own texting number, a message a caller leaves after the greeting is recorded, stored for us by Amazon Web Services for 90 days from the call and then deleted, turned into text by Amazon Transcribe only for a contractor on a paid plan, and heard only by that contractor’s business; Retention gained the same 90 days. The paragraph on Tailgate Office’s own texting program now says that Tailgate Office, LLC has submitted the program to the mobile carriers, and that a contractor’s customers are texted only from the contractor’s own number, and that nothing is texted from the program until the carriers approve it.

Also on October 29, 2026 the paragraph on our texting products and the list of what we never do named two promotional texts, not one: besides a business’s follow-up about a price estimate, a review request after a job, which goes by text only to someone who ticked its own separate box. The sentence on carrier registration filed per business now adds that a business texts from its own registered number. The paragraph on the only outside services that can see anything gained the ones texting adds: Telnyx, which carries our own program’s texts once the carriers approve it and, once texting is switched on for a business, the texts and the phone calls on its own number, and holds a voice message only until we copy it or delete it there; Telnyx and The Campaign Registry, for its registration details; and Amazon Transcribe, for a paid plan’s voice messages.

On October 31, 2026 the policy said what happens when a member of our team brings you to us. The form table gained the row “A team member who brought you”: a trial started from a browser that followed a team member’s link, which sets the tg_team cookie with their code for 90 days, or started within 90 days of a team member first writing to your business, matched by your website or email address, records that one team member, who is paid a share of what you pay us for your first 12 paid months and sees your business’s name, how you came, when you started, whether you are paying, how many of those months you have paid, and the month and their share of each payment, including a share a refund or charge-back takes back. The card “When you write to our support” added that people who work for us under contract may help answer support, under a confidentiality agreement, seeing only the conversations we pass to them, card and Social Security numbers, email addresses and phone numbers hidden, each opening logged. The part on how a business is found added that members of our team may write to a business from our sales research by hand, what they see of it, the limits on how often, and that a business that asks one of them to stop is never contacted by our team again and goes on our sales opt-out list; “Its pages elsewhere” now says it is our crawler that never visits or copies those sites. The cookie section names tg_team and TGTEAM, the sign-in of our Team desk, as the cookie policy does. The effective date at the top moved to that day.

On November 1, 2026 “What we never do with your data” named the three companies that run the service for us and so hold or can see any record we keep, which it had not named: Data Processing LLC, our affiliated hosting company, which runs our servers and builds the service; rsync.net, which stores the nightly copies of our database backups and our site’s files; and Anthropic, whose AI tools the people who build and run the service use in that work. After the mobile carriers’ sentence on texting opt-in data and consent, which stays word for word, it now says what that sentence means: no one gets your texting opt-in or consent from us to send you texts of their own, to market or to sell or hand on, and the companies that hold or carry such records do so as part of running our service for us. “Where your data lives” now names the nightly backups, and so no longer says there is no second copy of the analytics records anywhere: what it says is that no analytics or advertising company is given them, and that they are never sold. For the same reason the opening line of “And what our own analytics record” no longer says there is no copy of them anywhere else; it says that no analytics or advertising company is given a copy. The section on the member area now points to the same list. The card on the location lookup no longer says that nothing about a visit ever leaves our server while the lookup is off, since the nightly backups hold the analytics records too; it says that no lookup service is sent anything then, and its sentence on IP addresses now excepts the companies that run the service for us and points to the full list. Nothing about how the service runs changed: these words describe what it already did. The effective date at the top moved to that day.

Also on November 1, 2026 the form table’s Plan interest row caught up with the trial form, which no longer asks for a plan: it now says that every trial comes with all four tools and the office and that you choose a plan when you activate, on the Billing page of your account, and that a plan named in the link you followed to the form is noted on your inquiry and your account, so your Billing page starts on it and we can count which plans bring people in, or the Tailgate Office Bundle when the link names none. It had said we ask so we set up the product you actually asked about, not a pitch for all four. Nothing we collect, or how we use it, changed.

Also on November 1, 2026 the member-area row on your office records came to name the email that confirms a visit you book or move from your inbox: when the conversation has an email address, the customer is emailed the day and time at once, with a link that adds the visit to their calendar and the same footer and one-click unsubscribe as the other emails your office sends, unless you switch it off. Until then the only visit email the row named was the reminder, among the emails you switch on.

On November 2, 2026 the section on the member area gained a row for free installation requests: what we keep when you ask us to put your quote form on your website, and that the person who does it signs in only through your platform’s invitation, never with your password, and opens, copies and keeps nothing else there. The list of the emails the service sends also gained the one with your quote form’s code that you can ask us to send to the person who looks after your website. The effective date at the top moved to that day.

Also on November 2, 2026 the member-area row on homeowners’ IP addresses came to say how long each is kept: the address is now deleted from a quote request and from a message sent through your website form 90 days after it came in, and from a photo upload once the upload is two hours old, which has been the practice since September 2026; on an accepted estimate it is still kept for as long as the estimate. Until then the row said each was kept for as long as the record it came with.

On November 3, 2026 the part on how a business is found said what goes to Anthropic, an AI company, when a member of our team asks our Team desk to draft a message to a business, once that is switched on: the business’s name (or its website’s address), trade, town and state and the channel, whether it is a first message or a follow-up, the team member’s own name and, after a first message, their own link to our website, and a reply the business sent that the team member pastes, with anything shaped like an email address, a phone number, a payment card number or a Social Security number taken out; nothing else about the business, and never a person’s private details from our research; that Anthropic may not train on it and deletes it within 30 days; and that we keep a count of the drafts and what they cost, not a copy of what was sent. The paragraph there on how our team writes to a business came to name the one exception to “nothing is read or copied from those sites”: a reply a team member pastes to draft an answer. “What we never do with your data” names it too. The effective date at the top moved to that day.

Also on November 3, 2026 the list of the emails the service sends gained the trial check-in: about five days before a trial ends, or once just after a trial cancelled or ended before that, an email asking how the trial went and whether its price is too much; and, when a reply answers the price plainly, we note that answer on our record of the account and count it with the others when we decide how to price our tools.

On November 4, 2026 the lines on what goes to Anthropic, an AI company, for support, suggested replies, the price-sheet and job-post drafts and our Team desk’s drafts came to say that it goes under an API account of ours or of one of our owners, where they had said our own API key or named no account. What is sent, and Anthropic’s 30 days and its promise not to train on it, did not change. The effective date at the top moved to that day.

On November 6, 2026 the section on the member area gained a row for optional two-step login: what we keep for it if you turn it on for your sign-in (the key your authenticator app uses, encrypted, and your recovery codes, only as one-way hashes), what we use it for and when we delete it, what is recorded about it in our log of your account’s activity, with the internet address, and how long those lines are kept, and that we ask for no phone number for it and send no code by text message. The list of the emails the service sends gained the security notices about it. The effective date at the top moved to that day.

On November 7, 2026 the part on how a business is found added that every sales email says that it is a sales email, and which website we read and on what date. The effective date at the top moved to that day.

We will not quietly swap the page and hope nobody kept a copy. The current version is always at this address, dated.