Privacy Policy

Bernier LLC (“Bernier LLC,” “we,” “us,” or “our”) is a Colorado LLC that operates the NevarPro contractor booking platform (the “Service”). We are committed to protecting the privacy of all users of the Service. This Privacy Policy describes the personal information we collect, how we use and disclose it, and the choices and rights available to you.

This Policy applies to all users of the Service, including contractors who create NevarPro accounts (“Contractors”) and customers who book services through a Contractor's booking site (“Customers”). We are headquartered in Colorado and comply with applicable Colorado law, including the Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., the California Consumer Privacy Act (CCPA/CPRA), and other applicable federal and state privacy laws.

1. Quick Summary

• We provide a SaaS contractor booking platform that helps contractors accept appointments and manage their schedules.
• We do not sell personal information. We do not use personal data for targeted advertising or to build user profiles for commercial purposes.
• We share data only with vetted service providers that help us operate the Service, or when required by law.
• We do not use Customer booking data to train AI models.
• You can contact us at privacy@nevarpro.com to exercise your privacy rights.

2. Scope and Definitions

• “Personal Information” means information that identifies, relates to, or could reasonably be linked with a particular individual or household.
• “Contractor” means a business or individual who creates a NevarPro account to operate a booking site.
• “Customer” means an individual who books services through a Contractor's NevarPro-powered booking site.
• “Booking Data” means Personal Information provided by or about a Customer in connection with scheduling or paying for a service through the Platform.

3. Information We Collect

3.1 Information You Provide to Us

We collect information you voluntarily provide, including:

• Contractor account information: email address, business name, logo, branding preferences, service descriptions, pricing, schedule, and service areas
• Google Calendar OAuth tokens: when a Contractor connects their Google Calendar (stored in encrypted vault storage)
• AI assistant conversations: messages exchanged with our onboarding assistant or admin chat
• Customer Booking Data: name, email address, phone number, service address, services selected, appointment details, and notes provided when booking a service
• Communications: emails, support tickets, survey responses, and feedback

3.2 Payment Information

Payment processing is handled directly by Stripe. We do not collect or store credit card numbers or full payment account details. We receive and store transaction identifiers, deposit amounts, and booking payment status. Contractors who accept customer payments must connect a Stripe account; Stripe's own privacy practices govern information provided to them.

3.3 Information Collected Automatically

When you use the Service, we and our service providers may automatically collect:

• Log data: IP address, browser type, operating system, referring URLs, pages viewed, and date/time of visit
• Device information: hardware model, operating system version, unique device identifiers
• Usage data: booking funnel steps completed, drop-off points, clickstream data, and navigation paths

3.4 Cookies and Similar Technologies

We use session cookies to maintain your login state and support secure authentication. We do not use third-party advertising cookies or cross-context behavioral tracking pixels. You can control cookie settings through your browser, though disabling strictly necessary cookies may impair the Service.

3.5 What We Do Not Collect

We do not knowingly collect precise geolocation data, biometric identifiers, health or genetic information, financial account numbers, government ID numbers, or other sensitive categories of personal information. We do not knowingly collect personal information from children under 13.

4. How We Use Personal Information

We use Personal Information only for legitimate business purposes, including to:

• Provide, maintain, personalize, and improve the Service
• Create and manage Contractor accounts and authenticate users
• Process Customer bookings and Contractor scheduling
• Sync confirmed bookings with connected Google Calendars
• Send transactional emails (booking confirmations, 24-hour reminders, completion receipts, cancellation notices, and new booking notifications)
• Power AI-assisted onboarding and admin features
• Respond to inquiries and provide customer support
• Send administrative communications (e.g., updates to this policy)
• Monitor, secure, and debug the Service and prevent misuse and fraud
• Conduct analytics and product development using de-identified or aggregated data
• Comply with law and respond to legal process

Legal bases (where applicable): We process personal data based on your consent, the performance of a contract, compliance with legal obligations, or our legitimate interests in operating and improving the Service.

We do not use Booking Data to train AI models, build commercial user profiles, or for targeted advertising. We do not engage in “sale” or “sharing” of Personal Information as defined under the CCPA/CPRA.

5. How We Share Personal Information

We do not sell your personal data. We share Personal Information only in the following limited circumstances:

5.1 Service Providers (Sub-processors)

We share Personal Information with vetted vendors that process data on our behalf under written contracts that restrict use of the data to the services they provide to us. Current providers include:

• Stripe — payment processing and Contractor payouts via Stripe Connect
• Google — calendar integration for Contractors who connect their Google Calendar
• Supabase — database and authentication infrastructure (data stored in the United States)
• OpenAI — AI onboarding assistant and admin chat features
• Nevarmail — transactional email delivery
• Vercel — platform hosting and infrastructure

5.2 Contractors

Booking Data provided by Customers is shared with the applicable Contractor as necessary to fulfill the booked service (appointment details, contact information, service address, and notes). Contractors are responsible for their own handling of Customer data in connection with their service delivery.

5.3 Legal and Safety Disclosures

We may disclose Personal Information when we have a good-faith belief that doing so is required to: comply with law, lawful requests, or legal process; protect the rights, property, or safety of users, Bernier LLC, or the public; or investigate, prevent, or take action regarding suspected or actual illegal activity.

5.4 Business Transfers

If Bernier LLC is involved in a merger, acquisition, reorganization, or sale of assets, Personal Information may be transferred as part of that transaction, subject to the acquirer agreeing to uphold this Policy.

5.5 With Your Consent

We may share information at your direction or with your express consent.

5.6 De-identified and Aggregated Data

We may share de-identified or aggregated information that cannot reasonably be linked to an individual for analytics, product improvement, and research. We will not attempt to re-identify such data.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect Personal Information, including TLS encryption in transit, encrypted vault storage for OAuth tokens, row-level security on our database, role-based access controls, least-privilege provisioning, and access controls limiting data access to authorized personnel. Despite these measures, no system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting Personal Information, we will notify affected users and regulators as required by applicable law.

7. Data Retention

We retain Personal Information only for as long as necessary to provide the Service and for the purposes described in this Policy, unless a longer retention period is required or permitted by law. Contractor account data is retained for the life of the account. Customer Booking Data is retained for three years after the booking date to support record-keeping and dispute resolution. When data is no longer needed, we will delete or anonymize it in accordance with our data retention practices.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect Personal Information from children under 13. If you become aware that a child under 13 has provided us with Personal Information, please contact us at privacy@nevarpro.com and we will take steps to delete such information.

9. International Users and Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, which may have data-protection laws different from those of your country. We implement appropriate safeguards for such transfers where required by applicable law.

10. Your Privacy Rights

10.1 All Users

You may request to access, correct, update, or delete your personal information by emailing privacy@nevarpro.com or using in-product controls in your account settings.

10.2 Colorado Residents (CPA)

If you are a Colorado resident, the Colorado Privacy Act (CPA), C.R.S. § 6-1-1301 et seq., provides you with the following rights with respect to your personal data:

• Right to know: Confirm whether we are processing your personal data and access that data
• Right to correct: Correct inaccuracies in your personal data
• Right to delete: Request deletion of personal data you have provided to us or that we have collected about you
• Right to data portability: Obtain a copy of your personal data in a portable, readily usable format
• Right to opt out: Opt out of processing for targeted advertising, sale of personal data, or profiling in furtherance of decisions with legal or similarly significant effects. We do not currently engage in these activities.
• Right to appeal: Appeal our decision if we decline to take action on a request. We will respond to appeals within 45 days.

We will respond to verifiable requests within 45 days. In certain circumstances, we may extend this period by an additional 45 days with notice to you. We will not discriminate against you for exercising any of these rights.

10.3 California Residents (CCPA/CPRA)

California residents have the right to:

• Know the categories and specific pieces of Personal Information we collect, the sources, purposes, and categories of recipients
• Delete Personal Information we collected from you, subject to legal exceptions
• Correct inaccurate Personal Information
• Opt out of “sale” or “sharing” of Personal Information — we do not sell or share Personal Information as defined under the CCPA/CPRA
• Limit use of sensitive Personal Information — we do not use sensitive Personal Information for purposes beyond those permitted without a right to limit
• Non-discrimination for exercising your rights

To exercise these rights, contact us at privacy@nevarpro.com. We will verify your identity using account credentials and, if necessary, additional information proportionate to the sensitivity of the request. You may authorize an agent to submit a request on your behalf by providing written authorization.

10.4 Other State Privacy Laws

Residents of other U.S. states with comprehensive privacy laws (including Virginia, Connecticut, Utah, Texas, Oregon, Montana, and others) may have similar rights, including rights to access, correct, delete, or port Personal Information and to opt out of targeted advertising, sale, or profiling that produces legal or similarly significant effects. We do not engage in such targeted advertising or profiling. Contact privacy@nevarpro.com to exercise applicable rights. Appeals of denied requests may be submitted to the same address.

11. No Financial Incentives; No Discrimination

We do not offer financial incentives in exchange for the collection, sale, or retention of Personal Information, and we do not discriminate against users who exercise their privacy rights.

12. Do Not Track and Global Privacy Control

Some browsers transmit “Do Not Track” signals. Because there is no industry-standard approach to responding to such signals, we do not currently alter our data practices in response to Do Not Track signals. We honor the Global Privacy Control (GPC) signal where required by applicable law. We do not engage in cross-context behavioral advertising.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last Updated” date at the top of this policy and may notify active Contractors via email. We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: