Privacy Policy

This Privacy Policy explains how Ntros, Inc., doing business as “Ntros” (“Ntros,” “we,” “us,” or “our”), collects, uses, discloses, stores, protects, and otherwise processes information when you access or use Ntros, including our mobile applications, websites, web applications, APIs, search features, business profiles, messaging tools, quote tools, review features, contact-matching features, recommendation tools, shared links, notifications, and related services (collectively, the “Platform”).

This Privacy Policy applies to all users of the Platform, including consumers, service providers, business owners, business admins, employees, team members, introducers, reviewers, recommendation recipients, public-link recipients, and other users.

By accessing or using the Platform, you acknowledge this Privacy Policy. If you do not agree with this Privacy Policy, do not use the Platform.

1. Summary

Ntros is a professional and trade services discovery and communication platform. The Platform helps users find, evaluate, contact, recommend, and communicate with home and trade service businesses and professionals. Because the Platform uses account profiles, business profiles, service search, messaging, reviews, optional contact matching, and relationship-based trust context, we process information that may identify you, relate to you, or be associated with your account, device, business, contacts, service requests, communications, or Platform activity.

In general, we use information to:

1. create and manage accounts;
2. authenticate users and protect accounts;
3. enable service discovery and provider search;
4. display business and provider profiles;
5. support contact matching and relationship-based trust context;
6. enable messages, introductions, quotes, reviews, recommendations, shared links, and public pages;
7. provide notifications and customer support;
8. improve, secure, debug, and analyze the Platform;
9. prevent fraud, spam, abuse, unauthorized access, and misuse;
10. comply with legal obligations; and
11. enforce our Terms of Service and other policies.

We do not sell your personal information for money. We do not knowingly sell personal information of children. We do not use contact import data to build an unrelated advertising database. If our practices change, we will update this Privacy Policy and provide any legally required choices.

2. Scope of This Privacy Policy

This Privacy Policy applies to information processed through the Platform.

This Privacy Policy does not apply to:

1. services performed by providers or businesses outside the Platform;
2. websites, apps, or services operated by third parties;
3. payment processors, app stores, map providers, cloud providers, authentication providers, analytics providers, AI providers, or other third-party services except where we describe our own use of them;
4. information collected by another user, provider, business, or public-link recipient after you choose to share it with them; or
5. employment or contractor data of Ntros employees or contractors, unless we expressly state otherwise.

If you interact with a provider, business, app store, payment processor, or other third party, their own privacy policy may apply.

3. Information We Collect

We collect information in several ways: directly from you, automatically from your use of the Platform, from your device permissions, from other users, from businesses and providers, from service providers, and from public or third-party sources where permitted.

3.1 Account and Identity Information

We may collect:

1. first name and last name;
2. preferred name;
3. email address;
4. phone number;
5. phone verification status and related verification metadata;
6. date of birth;
7. account login identifiers;
8. authentication information and security tokens;
9. profile photo or avatar;
10. headline, bio, skills, links, and social/profile links;
11. address or general location, such as city, state, ZIP code, or country;
12. locale, timezone, and language preferences;
13. account status, onboarding status, account creation date, login date, and account history;
14. notification preferences;
15. subscription or plan information if paid features are offered;
16. legal acceptance records, such as the Terms and Privacy Policy version you accepted and the time of acceptance; and
17. customer support, feedback, and account request information.

3.2 Business and Provider Information

If you create, claim, manage, join, appear on, or interact with a business or provider profile, we may collect:

1. business name;
2. business description;
3. logo, photos, and media;
4. business contact information, such as email, phone number, website, and social links;
5. business address, service area, travel policy, and location-related service coverage;
6. service categories, service types, service offerings, pricing notes, free-estimate indicators, emergency-service indicators, availability, schedules, and exceptions;
7. licenses, certifications, insurance indicators, years in business, credentials, and related status fields;
8. business owner, admin, employee, and team-member relationships;
9. roles, permissions, invitations, invite codes, acceptance status, and affiliation history;
10. team-member visibility, discovery consent, professional role, intro policy, and messaging permissions;
11. platform signals such as response time, response rate, completed job count, profile completeness, and last-active indicators;
12. business settings, such as messaging identity, employee visibility, and address visibility;
13. ownership transfer, closure, suspension, verification, or account-status metadata; and
14. analytics related to business profile activity, search appearances, provider recommendations, messages, quotes, reviews, and user engagement.

Some business information may be publicly visible or visible to other users depending on your settings, business status, and Platform features.

3.3 Contacts, Phone Numbers, and Network Matching Information

Ntros may allow you to import or sync contacts or submit phone numbers to help identify people you may already know and to provide relationship-based trust context in service discovery.

When you use contact-matching features, we may collect or process:

1. phone numbers from your contacts or address book;
2. normalized phone numbers;
3. contact-import session identifiers;
4. source platform, such as iOS, Android, or web;
5. tokenized, hashed, or otherwise transformed contact identifiers;
6. per-user salt or token metadata used for matching;
7. match status, such as matched, unmatched, hidden, suppressed, ambiguous, or visible;
8. whether a matched user is discoverable by phone number;
9. contact suppression, delete, clear, trust preference, or trust-tier settings;
10. one-way or mutual contact-import relationship signals;
11. network summary information, such as matched count, network people count, and network provider count; and
12. related timestamps and operational metadata.

For contact matching, we may process raw phone numbers long enough to normalize, tokenize, match, secure, or transmit them. Our goal is to store privacy-preserving contact representations where feasible rather than storing full raw address-book contents for matching. However, you should not import contacts unless you have the right to do so and understand that contact-derived matching can reveal possible relationships.

Contact matching may be inaccurate, incomplete, delayed, hidden, suppressed, or ambiguous. A contact match does not necessarily mean two people know each other well, endorse each other, or have a current relationship.

3.4 Search, Discovery, and Recommendation Information

When you search for services, providers, or businesses, we may collect:

1. search queries;
2. structured search criteria;
3. service category, service type, and service-intent information;
4. location search terms, ZIP codes, cities, service areas, or device-provided location if you choose to provide it;
5. filters, preferences, constraints, timeline, budget, and project context;
6. clarification answers;
7. search result impressions;
8. ranking, scoring, and match signals;
9. selected providers, saved providers, shortlists, or collections;
10. click, tap, view, and engagement events;
11. provider fit, service fit, offering fit, and match-explanation signals;
12. network-only or trust-related search preferences;
13. public or authenticated search mode; and
14. analytics related to search quality, latency, performance, relevance, and outcomes.

We may use search and discovery information to provide results, improve ranking, personalize the Platform, debug search behavior, generate analytics, prevent abuse, and improve service quality.

3.5 Location Information

We may collect location-related information if you provide it or enable location features, including:

1. device location;
2. approximate location;
3. precise location, if permission is granted and the feature requires it;
4. manually entered city, state, ZIP code, address, or neighborhood;
5. property or project location information;
6. business address and service area;
7. service coverage regions;
8. location search terms; and
9. IP-derived approximate location or network metadata.

We use location information to help find relevant providers, determine service-area coverage, improve search results, support maps or location-based features, detect fraud or abuse, operate the Platform, and provide business tools.

You can disable device location access through your device settings. If you disable location access, some features may be unavailable or less accurate.

3.6 Messages, Introductions, Quotes, and Communications

When you use messaging, quote, introduction, or business inbox features, we may collect:

1. conversation participants;
2. sender Persona;
3. messages and message bodies;
4. attachments, photos, or media included in communications;
5. quote requests, quote offers, quote updates, clarification rounds, no-bid actions, withdrawals, selections, declines, cancellations, and related records;
6. service inquiry context, such as service needed, description, budget, timeline, urgency, location, photos, and other requirements;
7. intro requests, intro acceptances, declines, forwarding, status updates, and intro-related metadata;
8. read status, unread status, pinned status, archived status, hidden status, assignment status, and timestamps;
9. response-time and awaiting-response indicators;
10. business team assignment and admin visibility metadata;
11. notification events; and
12. moderation, abuse-prevention, safety, and audit metadata.

Messages and quote-related records may be visible to other conversation participants and, where applicable, authorized business owners, admins, assigned team members, or users acting through a business Persona.

3.7 Reviews, Ratings, and Public Feedback

When you use review and rating features, we may collect:

1. review text;
2. ratings;
3. tags;
4. photos or media attached to reviews;
5. service offering reviewed;
6. business reviewed;
7. professional or subject user reviewed;
8. transaction source or verification information where available;
9. helpful votes;
10. flags, moderation status, removal/restoration status, and flag reasons;
11. review visibility settings;
12. reviewer affiliation snapshots where relevant; and
13. review aggregates and analytics.

Reviews may be public, connection-visible, or otherwise visible depending on Platform features and settings. Even if a review is removed or hidden from public display, we may retain records as needed for legal, safety, audit, moderation, fraud-prevention, or dispute purposes.

3.8 Media and Uploaded Files

We may collect photos, images, logos, profile pictures, business logos, project photos, review photos, quote attachments, inquiry photos, and related metadata, including:

1. asset identifiers;
2. file type;
3. file size;
4. image dimensions;
5. upload status;
6. attachment purpose;
7. visibility setting;
8. storage path or access information;
9. timestamps; and
10. moderation or error metadata.

Depending on the feature, uploaded media may be visible to other users, businesses, providers, reviewers, message participants, public-link recipients, or the public.

Please do not upload sensitive, confidential, private, or unauthorized images or documents unless the feature specifically requires them and you have the right to share them.

3.9 Collections, Recommendation Packets, Shared Links, and Public Pages

If you create, publish, send, receive, redeem, or interact with provider collections, recommendation packets, shared links, or public pages, we may collect:

1. collection title, description, scenario tags, and provider entries;
2. recommendation packet title, notes, handoff context, client reference snapshots, and provider entries;
3. preferred contact information for a recommended provider;
4. connector notes to recipients or providers;
5. share token, token hash, token issue time, token expiration time, and link state;
6. link open count, last opened time, redemption count, saved status, intro request status, contact-start status, and delivery state;
7. recipient type, such as Ntros user or external link recipient;
8. public or published URL slug;
9. archive, revoke, resend, duplicate, or publish actions; and
10. analytics related to link views, packet delivery, recommendations, intros, and contact starts.

Shared links may allow recipients to view content without the same account relationship or context as the creator. You should not include confidential, private, or sensitive information in shared links unless you have the right to share it and understand who may access it.

3.10 Notifications and Device Information

We may collect information needed to send and manage notifications, including:

1. push notification tokens;
2. Firebase Cloud Messaging tokens;
3. platform, such as iOS, Android, or web;
4. app variant, app ID, bundle ID, or package name;
5. device and notification source metadata;
6. first seen, last seen, disabled, failure count, and failure-code metadata;
7. notification preferences;
8. notification delivery, open, failure, and interaction events; and
9. in-app notification center preferences.

You can adjust push notification permissions through your device settings and Platform settings.

3.11 Analytics, Diagnostics, Logs, and Usage Data

We may collect analytics, diagnostics, and usage data, including:

1. pages, screens, buttons, tabs, links, and features viewed or used;
2. app launches, session events, navigation events, and product interactions;
3. search events, message events, quote events, review events, invite events, connector events, and business events;
4. device type, operating system, app version, app variant, browser type, and network information;
5. IP address and request metadata;
6. crash logs, error logs, performance logs, latency, request duration, and diagnostic data;
7. security logs, authentication status, rate-limit signals, abuse-prevention signals, and fraud-prevention signals;
8. cookie, local storage, or similar technology data for web experiences; and
9. aggregated or de-identified analytics.

We use this information to operate, debug, secure, improve, and analyze the Platform.

3.12 AI-Assisted and Automated Processing Data

Ntros may use AI-assisted, machine learning, embedding, search, ranking, classification, summarization, moderation, or analytics tools. These tools may process:

1. search queries;
2. structured query data;
3. service categories and service offerings;
4. provider profile information;
5. business profile information;
6. project descriptions;
7. inquiry context;
8. quote or message context when a feature requires it;
9. reviews and public feedback;
10. recommendation packet content;
11. moderation signals;
12. analytics and search-quality signals; and
13. generated outputs, summaries, classifications, or match explanations.

We use AI-assisted processing to provide search, recommendations, inquiry generation, clarification prompts, provider matching, analytics, moderation, and Platform improvement. AI-assisted outputs may be inaccurate or incomplete. You should review outputs before relying on them or sending them to others.

We do not use AI-assisted features to make credit, insurance, employment, housing, or legal eligibility decisions.

3.13 Information From Other Users

Other users may provide information about you, including when they:

1. import contacts that include your phone number;
2. invite you to join a business;
3. add you as a business team member;
4. recommend a provider where you are the preferred contact;
5. send you a recommendation packet;
6. message you;
7. request an introduction involving you;
8. review a business or provider associated with you;
9. flag content or report abuse;
10. identify you as an introducer, contact, team member, or participant; or
11. include your information in a quote, message, case, collection, packet, or shared link.

We may process that information to operate the relevant feature, enforce policies, support privacy settings, prevent abuse, and provide the Platform.

3.14 Information From Third Parties and Public Sources

We may receive information from:

1. authentication providers;
2. app stores;
3. cloud, storage, analytics, crash-reporting, push-notification, SMS, email, mapping, AI, and infrastructure providers;
4. business service providers;
5. payment processors if paid features are offered;
6. public business listings, public websites, public records, or other publicly available sources;
7. users who submit business or provider information; and
8. legal, safety, security, fraud-prevention, or abuse-prevention sources.

We may combine information from different sources where permitted by law and appropriate for Platform functionality, safety, security, analytics, personalization, or compliance.

3.15 SMS / Text Messaging Communications

Ntros operates an SMS messaging program ("Ntros Alerts") under the privacy practices described in this section.

Information collected. When you opt in to receive SMS messages from Ntros, we collect your mobile phone number, your express consent to receive recurring text messages from us, and related metadata such as opt-in timestamp, IP address, and the URL where you opted in, for compliance and deliverability purposes.

How we use this information. We use your phone number solely to send you SMS messages related to the Ntros home services referral marketplace, including account confirmations and security alerts, service-provider introductions and referral notifications, marketplace updates relevant to your activity, and promotional offers and program announcements you have consented to receive. We honor opt-out requests immediately and remove the number from all future sends.

No third-party sharing for marketing. Ntros does NOT share, sell, rent, or transfer your phone number, mobile opt-in consent, or any SMS-related personal information to third parties or affiliates for marketing or promotional purposes. Mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes under any circumstances. We may share this information only with service providers (such as Twilio) acting on our behalf to deliver SMS messages, and only to the extent necessary to operate the SMS program. These service providers are contractually prohibited from using the data for any other purpose.

Carrier disclaimer. Carriers are not liable for delayed or undelivered messages. Message and data rates may apply.

Opt-out and help. You may opt out of SMS communications at any time by replying STOP, END, CANCEL, UNSUBSCRIBE, or QUIT to any message. For help, reply HELP or contact support@ntros.ai.

4. How We Use Information

We use information for the following purposes.

4.1 Provide and Operate the Platform

We use information to:

1. create and manage accounts;
2. authenticate users;
3. verify phone numbers and account status;
4. create and display user profiles;
5. create, claim, manage, and display business profiles;
6. manage personas, roles, permissions, and business affiliations;
7. provide service search, provider discovery, rankings, recommendations, and trust context;
8. provide contact matching and network summaries;
9. support messages, introductions, quotes, reviews, recommendations, collections, packets, and public links;
10. provide media uploads and file access;
11. send notifications;
12. provide support and respond to requests;
13. process account deletion, data access, correction, and privacy requests;
14. maintain app settings and preferences; and
15. perform other functions you request or authorize.

4.2 Personalize and Improve the Platform

We use information to:

1. personalize search results and user experience;
2. improve provider relevance and search quality;
3. improve trust and relationship context;
4. analyze feature usage;
5. understand user needs and product performance;
6. develop new features;
7. test and debug features;
8. improve reliability, latency, and performance;
9. conduct research and analytics; and
10. generate aggregated or de-identified insights.

4.3 Safety, Security, Fraud Prevention, and Moderation

We use information to:

1. protect accounts;
2. verify authentication;
3. prevent spam, abuse, scraping, fraud, fake accounts, fake reviews, and unauthorized access;
4. enforce rate limits;
5. detect suspicious activity;
6. investigate violations of our Terms of Service;
7. moderate user-generated content;
8. respond to flags and reports;
9. secure infrastructure;
10. audit access and system activity;
11. preserve evidence; and
12. protect users, providers, businesses, Ntros, and third parties.

4.4 Communication

We use information to:

1. send account, security, verification, service, support, legal, and administrative communications;
2. send push notifications, email notifications, in-app notifications, and SMS where applicable;
3. notify you about messages, quotes, reviews, intros, invitations, recommendations, account activity, or business activity;
4. provide product updates and marketing communications where permitted;
5. respond to support requests; and
6. collect feedback.

You can manage some communication preferences through app settings, device settings, unsubscribe links, or by contacting us. Some transactional or legal communications may still be sent even if you opt out of marketing.

4.5 Legal and Compliance

We use information to:

1. comply with applicable laws;
2. respond to legal requests;
3. enforce our Terms of Service and policies;
4. protect legal rights;
5. resolve disputes;
6. maintain records;
7. comply with app-store requirements;
8. respond to privacy rights requests;
9. investigate or prevent harm; and
10. support audits, compliance, and legal obligations.

5. How We Disclose Information

We may disclose information as described below.

5.1 To Other Users

We disclose information to other users when necessary for Platform functionality, including:

1. profile information shown to other users;
2. business profile information;
3. team-member and business affiliation information based on settings;
4. connected employee, mutual contact, or trust context where permitted;
5. messages and message metadata to conversation participants;
6. quote requests, quote offers, clarifications, and related records to relevant participants;
7. reviews, ratings, photos, and feedback according to visibility settings;
8. collections, recommendation packets, and shared-link content to recipients;
9. public or published pages to viewers;
10. notifications related to user interactions; and
11. contact or network match context where permitted by settings and Platform design.

5.2 To Businesses and Business Users

If you interact with a business or act through a business Persona, we may disclose relevant information to that business’s authorized owners, admins, team members, dispatchers, estimators, or assigned users.

This may include messages, quote requests, inquiries, assignments, customer context, service needs, reviews, analytics, business profile activity, team activity, and other information relevant to business operations.

5.3 To Public or Link Recipients

Some information may be public or accessible by link, including:

1. public business profiles;
2. public provider profile elements;
3. public reviews;
4. published provider collections;
5. public or shared recommendation packets;
6. public share-link previews;
7. public pages;
8. business logos, descriptions, service offerings, service areas, and contact details; and
9. other content you choose to publish or share.

Anyone with access to a public page or share link may view, save, copy, screenshot, or forward that information. Revoking a link may prevent future access through the Platform but may not remove copies already obtained.

5.4 To Service Providers

We may disclose information to service providers that help us operate the Platform, including providers of:

1. cloud hosting;
2. databases;
3. storage;
4. authentication;
5. analytics;
6. crash reporting;
7. push notifications;
8. email;
9. SMS;
10. customer support;
11. security;
12. fraud prevention;
13. maps, places, and location services;
14. search, embeddings, AI, and machine learning;
15. payment processing if paid features are offered;
16. app-store distribution;
17. logging and monitoring; and
18. software development and infrastructure.

Service providers may process information only as needed to provide services to us, comply with law, protect security, or as otherwise permitted by their agreements with us.

5.5 For Legal, Safety, and Security Reasons

We may disclose information if we believe disclosure is necessary or appropriate to:

1. comply with law, subpoenas, court orders, legal process, or government requests;
2. enforce our Terms of Service or policies;
3. protect the rights, property, privacy, security, or safety of Ntros, users, providers, businesses, or others;
4. investigate fraud, abuse, security incidents, or illegal activity;
5. prevent harm;
6. respond to emergencies;
7. establish, exercise, or defend legal claims; or
8. cooperate with law enforcement or regulators where required or appropriate.

5.6 Business Transfers

We may disclose or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, corporate transaction, or transition of service to another provider.

5.7 With Your Consent or Direction

We may disclose information when you direct us to do so, authorize a feature, share content, invite a user, send a message, request an introduction, create a public link, publish a collection, submit a review, or otherwise consent.

5.8 Aggregated or De-Identified Information

We may disclose aggregated, de-identified, or anonymized information that cannot reasonably be used to identify you, such as general usage statistics, search trends, service category trends, performance metrics, or business insights.

6. No Sale of Personal Information

We do not sell personal information for money.

As of the Effective Date, we do not knowingly sell personal information or share personal information for cross-context behavioral advertising as those terms are commonly used under U.S. state privacy laws. We also do not use imported contact data to sell advertising lists or build unrelated advertising profiles.

If we later engage in practices that qualify as a “sale” or “sharing” under applicable privacy laws, we will update this Privacy Policy and provide legally required opt-out mechanisms.

7. Sensitive Information

Some information processed by the Platform may be considered sensitive under certain laws. Depending on how you use the Platform, this may include:

1. precise location;
2. phone number;
3. contacts or address-book information;
4. account login information;
5. contents of messages;
6. photos, videos, or uploaded files;
7. information about a home, property, household, or service need;
8. professional license or credential information;
9. payment-related information if paid features are offered; and
10. information you voluntarily enter into free-form fields.

We use sensitive information to provide the Platform, authenticate users, secure accounts, enable features you request, prevent abuse, comply with law, and protect users. We do not use sensitive information to infer characteristics unrelated to providing, securing, improving, or enforcing the Platform unless we obtain consent or are legally permitted to do so.

Please avoid submitting highly sensitive information unless the Platform specifically requests it and it is necessary for the feature you are using.

8. Contact Matching and Relationship Context

Contact matching is a core trust-related feature of Ntros. It can help identify whether you may know someone associated with a business, whether someone in your network works at a provider, or whether an introducer may exist.

Because contact matching can reveal possible relationships, we use controls such as tokenization, visibility settings, suppression settings, verified-phone requirements, contact deletion/clear controls, and match visibility rules where applicable.

However, you should understand that:

1. importing contacts may help the Platform infer possible relationships;
2. another user may have your phone number in their contacts even if you do not have theirs;
3. some connections may be one-way, mutual, hidden, suppressed, ambiguous, or not shown;
4. privacy settings may affect whether you appear in contact or trust context;
5. a contact match does not necessarily mean endorsement, recommendation, trust, friendship, current employment, or recent interaction; and
6. contact matching may be incomplete or inaccurate.

You can manage certain contact and discoverability settings in the Platform where available.

9. Location and Service-Area Data

We use location-related information to help users find relevant providers, determine service coverage, support maps or place lookup, display business service areas, improve search quality, and prevent misuse.

Location data may include both user-provided locations and device-derived locations. You can deny or revoke device location permissions through your device settings.

If you provide a property address, project location, or business address, that information may be used to support service discovery, quotes, messaging, provider search, service-area matching, and business operations. Business addresses and service areas may be public or partially public depending on settings.

10. User-Generated Content

The Platform includes user-generated content, such as profiles, business profiles, messages, reviews, ratings, photos, quote requests, quote offers, collections, recommendation packets, shared links, and feedback.

User-generated content may be visible to other users, businesses, providers, public-link recipients, or the public depending on the feature and settings.

We may review, moderate, remove, restrict, preserve, or disclose user-generated content when needed to operate the Platform, enforce policies, protect users, respond to reports, comply with law, prevent abuse, or resolve disputes.

You should not submit content that you do not want others to see if the feature is public, shared, business-visible, message-visible, or link-visible.

11. Reviews and Ratings

Reviews and ratings may be public or visible to other users. Review content may include your name, profile information, rating, review text, tags, photos, transaction context, service offering, business, provider, and timestamps.

We may use reviews and ratings to:

1. display feedback;
2. calculate aggregates;
3. improve search and ranking;
4. detect fake reviews or abuse;
5. support moderation;
6. provide business insights;
7. enforce policies; and
8. comply with legal obligations.

We may retain review records even if a review is removed from public display, including for fraud prevention, moderation, legal, safety, or dispute-resolution purposes.

12. Messaging and Quotes

Messages, introductions, quotes, and related communications are not public by default, but they may be visible to participants, authorized business users, assigned team members, admins, or others with appropriate access to the relevant conversation or business Persona.

We may access, preserve, or review message and quote information to:

1. provide messaging and quote features;
2. deliver notifications;
3. support users;
4. enforce policies;
5. investigate abuse;
6. prevent fraud;
7. improve features;
8. comply with law; and
9. resolve disputes.

Do not send confidential or highly sensitive information through messages unless necessary and appropriate for the service interaction.

13. AI-Assisted Processing

Ntros may use AI-assisted tools to interpret searches, generate structured queries, suggest clarifications, generate inquiry copy, summarize service needs, rank providers, support recommendations, improve search quality, assist moderation, and analyze Platform performance.

AI-assisted tools may process information you provide, such as search queries, service descriptions, project context, business information, provider information, messages, quote context, reviews, or recommendation content, depending on the feature.

We may use third-party AI service providers to process information on our behalf. Where we use such providers, we take reasonable steps designed to limit processing to Platform-related purposes and protect information according to our agreements with those providers.

You should not include highly sensitive information in AI-assisted inputs unless necessary for the feature. AI-assisted outputs may be inaccurate or incomplete.

14. Cookies, Local Storage, SDKs, and Similar Technologies

We and our service providers may use cookies, local storage, mobile SDKs, device identifiers, analytics tools, crash-reporting tools, and similar technologies to:

1. keep you signed in;
2. remember settings;
3. operate the Platform;
4. measure usage;
5. diagnose crashes and errors;
6. improve performance;
7. prevent fraud and abuse;
8. support notifications;
9. secure accounts; and
10. understand feature engagement.

You may be able to control cookies through your browser settings and mobile permissions through your device settings. Some Platform features may not work properly if you disable certain technologies.

15. Third-Party Services

The Platform may integrate with or rely on third-party services, including:

1. app stores;
2. authentication providers;
3. Firebase and related Google services;
4. cloud hosting and database providers;
5. analytics providers;
6. crash-reporting providers;
7. push notification providers;
8. SMS and email providers;
9. storage providers;
10. maps, location, and place-search providers;
11. AI, search, embedding, or machine-learning providers;
12. payment processors if paid features are offered;
13. customer support tools; and
14. security and monitoring tools.

These third parties may process information according to their own terms and privacy policies where applicable. We are not responsible for third-party privacy practices except where required by law or our agreements with them.

16. Data Retention

We retain information for as long as reasonably necessary to provide the Platform, operate our business, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, maintain security, and support legitimate business purposes.

Retention periods vary depending on the type of information, the feature, user settings, legal requirements, safety needs, and operational needs.

For example:

1. account information is generally retained while your account is active;
2. profile and business information may be retained while the profile or business account exists;
3. contact-matching tokens and metadata may be retained until you clear contacts, delete contact tokens, delete your account, or retention is no longer needed, subject to legal and operational exceptions;
4. messages, quotes, reviews, and transaction-related records may be retained for dispute resolution, safety, audit, fraud prevention, and legal reasons;
5. public content may remain visible until removed, hidden, revoked, or archived, subject to copies already accessed by others;
6. analytics and logs may be retained for a limited period or aggregated/de-identified for longer-term analysis;
7. security logs may be retained as needed to protect the Platform;
8. backups may retain information for a limited period before deletion cycles complete; and
9. certain records may be retained if required by law, court order, tax obligations, accounting obligations, fraud prevention, safety investigations, or dispute resolution.

When information is no longer needed, we may delete, de-identify, aggregate, or archive it.

17. Account Deletion and Data Deletion

You may request account deletion through Settings > Account > Delete account in the app or by visiting https://ntros.ai/account-deletion. You may also contact us at privacy@ntros.ai.

When you request account deletion, we will delete or de-identify personal information associated with your account unless we need to retain it for legitimate reasons, such as:

1. security;
2. fraud prevention;
3. legal compliance;
4. dispute resolution;
5. safety investigations;
6. enforcement of our Terms;
7. tax, accounting, or business records;
8. preserving records of completed transactions, quotes, messages, reviews, or business activity where appropriate;
9. protecting other users’ rights; or
10. maintaining backups for a limited period.

Account deletion may not delete information that other users already received, copied, screenshotted, downloaded, saved, or shared. It may also not delete reviews, business records, messages, quote records, public content, or shared-link content where retention is legally permitted and reasonably necessary.

Temporary deactivation is not the same as deletion. If you request deletion, we will process it as a deletion request unless we are legally permitted or required to retain specific information.

18. Your Choices

Depending on the feature and your location, you may have the following choices.

18.1 Account and Profile Settings

You can update certain account, profile, visibility, notification, discoverability, and business settings in the Platform.

18.2 Contact Matching Choices

Where available, you may:

1. choose whether to import contacts;
2. clear imported contacts;
3. delete individual contact tokens;
4. suppress users;
5. adjust discoverability by phone number;
6. adjust whether you appear as a named trust signal; and
7. manage certain network or contact visibility settings.

18.3 Location Choices

You can deny or revoke device location permission through your device settings. You may still be able to use manual location search.

18.4 Notification Choices

You can manage push notifications through device settings and Platform settings. You may unsubscribe from marketing emails using unsubscribe links where available. We may still send transactional, security, legal, and account-related communications.

18.5 Marketing Choices

You may opt out of marketing communications by following unsubscribe instructions or contacting us. We do not currently use imported contacts for unrelated marketing campaigns.

18.6 Public and Shared Content Choices

You can adjust certain visibility settings, revoke certain links, archive content, remove items from collections, or delete content where Platform tools allow. Revoking access may not remove copies already accessed by others.

18.7 Device Permissions

You can manage app permissions such as contacts, location, camera, photos, microphone, notifications, and speech recognition through your device settings.

19. Your Privacy Rights

Depending on where you live, you may have legal rights regarding your personal information. These may include the right to:

1. know or access the personal information we process about you;
2. receive a copy of certain personal information;
3. correct inaccurate information;
4. delete personal information;
5. opt out of certain sales, sharing, targeted advertising, or profiling where applicable;
6. limit certain uses of sensitive personal information where applicable;
7. withdraw consent where processing is based on consent;
8. object to or restrict certain processing;
9. appeal a denied privacy request where required by law;
10. authorize an agent to make a request where permitted; and
11. not be discriminated against for exercising privacy rights.

You may submit privacy requests by contacting privacy@ntros.ai or visiting https://ntros.ai/support.

We may need to verify your identity before fulfilling a request. We may deny or limit a request where permitted by law, such as when we cannot verify your identity, need to retain information for legal or safety reasons, need to protect another person’s privacy, or the request is excessive or not legally required.

20. U.S. State Privacy Notice

This section applies to residents of U.S. states with applicable comprehensive privacy laws, where those laws apply to Ntros.

20.1 Categories of Personal Information We May Collect

In the past 12 months, depending on your use of the Platform, we may have collected the following categories:

1. identifiers, such as name, email, phone number, account ID, user ID, device identifiers, and IP address;
2. contact information, such as email address, phone number, address, and business contact details;
3. protected classification information, only if voluntarily provided or inferred from user content and not used for unlawful discrimination;
4. commercial information, such as subscription status, service interests, quote activity, provider interactions, and business activity;
5. internet or electronic network activity, such as app usage, search activity, clicks, views, logs, and diagnostics;
6. geolocation information, such as device location, service location, business location, or approximate IP-based location;
7. audio, electronic, visual, or similar information, such as photos, images, voice input where used, and uploaded media;
8. professional or employment-related information, such as provider role, business affiliation, licenses, certifications, business role, and service credentials;
9. education information if voluntarily provided in profile or credential fields;
10. inferences, such as search preferences, provider fit, service categories, network context, trust signals, and platform analytics;
11. sensitive personal information, such as precise location, account login credentials, phone contacts, message contents, and possibly license or credential information depending on feature use; and
12. user-generated content, such as messages, reviews, ratings, photos, quote requests, business information, and recommendation content.

20.2 Sources

We collect personal information from:

1. you;
2. your device;
3. your use of the Platform;
4. other users;
5. businesses and providers;
6. contact import features;
7. service providers;
8. app stores;
9. public sources; and
10. third-party integrations where permitted.

20.3 Purposes

We collect and use personal information for the purposes described in this Privacy Policy, including providing the Platform, search, contact matching, messaging, quotes, reviews, recommendations, security, analytics, support, legal compliance, and improvement.

20.4 Categories of Personal Information Disclosed

We may disclose the categories listed above to the categories of recipients described in this Privacy Policy, including other users, businesses, public-link recipients, service providers, legal recipients, and parties to business transfers.

20.5 Sale or Sharing

As of the Effective Date, we do not knowingly sell personal information or share personal information for cross-context behavioral advertising as those terms are commonly used under U.S. state privacy laws.

20.6 Sensitive Personal Information

We use sensitive personal information to provide requested Platform features, secure the Platform, prevent fraud, comply with law, and support expected Platform functionality. We do not use sensitive personal information for purposes that would require a right to limit under California law unless we provide the required notice and choice.

20.7 Non-Discrimination

We will not discriminate against you for exercising privacy rights. However, some features may require certain information to function. If you request deletion or restrict certain processing, some features may be unavailable or may not work properly.

20.8 Authorized Agents

Where required by law, you may authorize an agent to submit a privacy request on your behalf. We may require proof of authorization and may require you to verify your identity directly.

21. California “Shine the Light” Notice

California residents may request information about certain disclosures of personal information to third parties for their direct marketing purposes. As of the Effective Date, we do not disclose personal information to third parties for their own direct marketing purposes in a way that triggers this requirement. If this changes, we will update this Privacy Policy.

22. Do Not Track and Global Privacy Controls

Some browsers provide “Do Not Track” signals. There is no consistent industry standard for responding to Do Not Track signals, and we do not currently respond to them.

If applicable law requires us to honor Global Privacy Control or similar opt-out preference signals, we will do so for applicable users and applicable processing activities.

23. Children’s Privacy

The Platform is not intended for children under 18. We do not knowingly collect personal information from children under 13.

If you believe a child under 13 has provided personal information to us, contact us at privacy@ntros.ai. If we learn that we collected personal information from a child under 13 without legally required consent, we will take appropriate steps to delete it.

Users must not submit information about children unless they have the legal right to do so and the information is necessary for a legitimate service request.

24. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. These may include authentication controls, access controls, encryption in transit, secure infrastructure practices, logging, monitoring, tokenization or hashing where appropriate, least-privilege access practices, and vendor controls.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for protecting your account credentials, devices, email account, phone number, and authentication methods.

If you believe your account or information has been compromised, contact us immediately at security@ntros.ai or support@ntros.ai.

25. International Users

Ntros is operated from the United States. If you access the Platform from outside the United States, your information may be processed in the United States or other countries where privacy laws may differ from those in your location.

By using the Platform, you understand that your information may be transferred to and processed in the United States and other jurisdictions.

If we expand Platform availability or legal obligations in additional jurisdictions, we may update this Privacy Policy or provide supplemental notices.

26. Business Users and Business Contact Data

If you use Ntros on behalf of a Business, we may process business contact information, role information, permissions, business messages, service inquiries, analytics, and related records. Some information about a Business User may be visible to business owners, admins, team members, consumers, or the public depending on settings and Platform features.

If your Business provides personal information about employees, contractors, or team members, the Business is responsible for having the right to provide that information and for giving any required notices to those individuals.

27. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we may notify you by email, in-app notice, website notice, account notice, or other reasonable means.

The updated Privacy Policy will be effective on the date stated in the updated policy unless a different date is provided. Your continued use of the Platform after the updated Privacy Policy takes effect means you acknowledge the updated policy.

28. Contact Us

If you have questions or requests about this Privacy Policy or our privacy practices, contact us at:

Ntros, Inc. 4195 Pioneer Trl, Unit A, Mantua, OH 44255 Privacy Email: privacy@ntros.ai Support Email: support@ntros.ai Security Email: security@ntros.ai