Privacy Policy

If you submit our contact form: the name, email address, phone number, reason for contacting us, and message you choose to provide, so we can respond to your inquiry.

If you sign in to the staff/contractor portal: your email address and full name, and, if you sign in with Google, the basic profile information Google shares with us (name, email address, and profile photo). We do not receive your Google password or access any other Google account data.

Portal activity and content: purchase orders, invoices, quotes, service reports, and work photos you or your team upload; your assigned role and permissions; and, if you enable two-factor authentication, metadata about your verification method (not the underlying secret).

Automatically collected: basic, aggregated site performance and usage analytics (such as page views, device/browser type, and load performance) via Vercel Analytics and Speed Insights. We do not use this data for advertising or track you across other websites.

• Respond to quote requests and general inquiries
• Authenticate staff/contractor accounts and enforce role-based access to the portal
• Manage purchase orders, invoices, payments, quotes, and contractor work uploads
• Maintain the security and reliability of our systems

We do not sell your personal information. We share it only with the service providers that help us operate our site and portal, under their own privacy and security commitments:

• Supabase — hosts our database and handles authentication (including Google sign-in) and file storage.
• Google— provides the optional "Sign in with Google" authentication method.
• Vercel — hosts our website and provides basic, privacy-friendly analytics and performance monitoring.

We may also disclose information if required by law or to protect the rights, property, or safety of Moonlit Renovations, our users, or others.

Portal access is restricted to an allowlist of approved email addresses maintained by our administrators, and every account is assigned a specific role (contractor, admin, or IT) that limits what it can view or change. Accounts can be deactivated by an administrator at any time, and staff can optionally enable two-factor authentication for additional account security.

We retain portal records (such as purchase orders, invoices, and uploaded work photos) for as long as needed for our business, accounting, and legal recordkeeping obligations. Contact form submissions are kept only as long as needed to respond to and follow up on your inquiry.

Our portal uses essential cookies to keep you securely signed in. We do not use advertising or third-party tracking cookies.

If you would like to access, correct, or request deletion of information we hold about you — including revoking portal access — contact us using the details below.

Our site and portal are intended for business use by adults and are not directed at children. We do not knowingly collect information from children.

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

Questions about this policy or your information? Reach us at moonlitrenovations@gmail.com.