Privacy Policy

The Request an Estimate form collects your first name, last name, project city, ZIP code, phone number, email address, project type, preferred follow-up method, and the project note you provide. Phone and email are required so PERFECT HOME PHILOSOPHY has two reliable ways to identify and follow up on a project inquiry.

You may also choose to upload project photos or supported documents. Uploaded files are used to review the room, project conditions, measurements, plans, or other information you intentionally provide with the request.

The form also records a form version and privacy-notice version so the business can identify which intake experience was used when the request was submitted.

The Contact form collects your first name, last name, project city, ZIP code, phone number, email address, preferred follow-up method, and the message you provide. It is intended for general project questions, follow-up, or other messages that do not need the structured Request an Estimate form.

You may optionally attach supported photos or documents to a Contact message. Contact submissions use the same private lead-storage boundary as estimate requests and may include limited source attribution so the business can understand how the inquiry reached the website.

Files submitted through Contact or Request an Estimate are stored in a private client-attachment area, separate from the public website Media Library. They are not published as project images, made publicly browsable, or sold.

The upload workflow records limited technical metadata such as the original filename, file type, size, and a cryptographic file fingerprint used to prevent the same file from being stored repeatedly with one submission. The fingerprint is used for duplicate protection, not to identify the person who uploaded the file.

Authorized business recipients may receive the inquiry details and attached files through the private operational notification tools used to review and respond to new leads. Hosting, storage, email, translation, and messaging providers may process submitted information as necessary to provide those services.

The Reviews form may collect the display name you provide, a private email address for verification or follow-up, an optional project city and service type, a rating, the review text, publication permission, and acknowledgement of this privacy notice.

Submitting feedback does not make it public automatically. A review can appear on the PERFECT HOME PHILOSOPHY website only when the client has granted publication permission and the submission is approved through moderation. Feedback submitted without publication permission remains private.

When publication permission is granted, the website may display the submitted display name, rating, review text, and optional service or city context. The email address is not published with the review.

The website may keep a random anonymous session identifier, the first public landing page, the referring site origin when available, and standard UTM campaign fields. This information is used to understand which public pages and referral sources lead to estimate requests, contact messages, or review submissions without placing a visitor's name, phone number, email address, private message, project note, or uploaded file in the general analytics event table.

The anonymous session and campaign values are kept in browser session storage for the current browsing session when that storage is available.

For short-term abuse and rate-limit protection on public form and secure-upload endpoints, the server may derive a one-way cryptographic request fingerprint from the client network address supplied by the hosting platform. The original network address is not written to the PERFECT HOME PHILOSOPHY form-attempt database record; only the derived fingerprint, form type, outcome, and timestamp are stored for this protection layer.

The website uses Google Analytics 4 and Microsoft Clarity as measurement tools in a consent-aware configuration. Advertising storage remains denied. Before a visitor allows optional analytics cookies, or after the visitor chooses Not now, the site keeps analytics storage denied and uses only the providers' limited cookieless or no-consent measurement modes.

With analytics storage denied, Google Analytics may receive cookieless measurement pings that do not use Analytics cookies and may use those signals for privacy-preserving measurement and modeling. Microsoft Clarity may operate in no-consent mode without Clarity cookies, collecting limited page-view and interaction information; without consent, Clarity cannot preserve the same continuous cross-page or cross-visit session history available when analytics cookies are allowed.

If the visitor chooses Allow analytics, analytics storage is granted for these measurement tools while advertising storage remains denied. Google Analytics may then use analytics cookies for fuller website measurement. Microsoft Clarity may use its analytics cookies and fuller session-continuity features. The visitor can reopen Privacy choices from the footer and turn analytics cookies off again.

Microsoft Clarity may be used to understand page interaction patterns through features such as heatmaps, scroll and engagement signals, and session recordings when those features are available under the visitor's consent state. PERFECT HOME PHILOSOPHY does not intentionally send estimate, Contact, or Reviews field contents, uploaded files, names, email addresses, phone numbers, private messages, or project notes into its general analytics reporting layer.

Public Contact, Request an Estimate, and Reviews forms are explicitly marked for Clarity masking in addition to Clarity's built-in masking of input fields. Declining optional analytics cookies does not prevent use of the public website or its forms.

PERFECT HOME PHILOSOPHY includes private, owner-operated administrative integrations that can connect Google services through Google's OAuth 2.0 consent flow. These integrations are separate from the public website analytics described above. A public website visitor does not grant these permissions merely by visiting the site or submitting a form.

For Google Analytics 4, the application requests https://www.googleapis.com/auth/analytics.readonly. This read-only scope is used to discover the authorized GRANDELION LLC / PERFECT HOME PHILOSOPHY Analytics account, property, and web stream and to retrieve aggregated reporting data such as page paths, traffic source or channel, sessions, users, engagement, events, and key-event counts for the private PFP Growth reporting interface. This permission cannot create, modify, or delete Google Analytics data.

For Google Search Console, the application requests https://www.googleapis.com/auth/webmasters. It is used only for PERFECT HOME PHILOSOPHY properties that the authorizing account is permitted to manage: to identify the verified property, read search-performance and URL-inspection information, and submit or refresh PFP-owned sitemap/discovery feeds from the protected admin interface. The application does not use this permission to alter unrelated Search Console properties or automate Google Request Indexing.

For Google Business Profile, the application may request https://www.googleapis.com/auth/business.manage when the owner explicitly connects that integration and Google has granted the required Business Profile API access. The current PFP use is limited to identifying the authorized business/location, reading review or profile metadata needed for the private reputation workflow, and discovering official Maps/review destinations. The application does not make automatic profile-content changes merely because the scope has been granted.

The application does not collect a Google account password. Google authorization is performed on Google's consent screen, and the connected account can revoke access through Google Account permissions.

Google user data obtained through the OAuth-connected integrations is used only to provide the private, user-facing PFP administrative features that the business owner or authorized administrator requested: analytics reporting, search-performance and indexing diagnostics, PFP sitemap submission, and approved reputation/profile workflows for the business's own Google properties.

PERFECT HOME PHILOSOPHY does not sell Google user data, transfer it to data brokers or information resellers, use it for targeted, personalized, interest-based, or retargeted advertising, use it to determine creditworthiness or lending eligibility, or use it to create, train, or improve generalized artificial-intelligence or machine-learning models.

Authorized PFP administrators may view Google-derived reporting or reputation information because that viewing is part of the requested private application functionality. Infrastructure providers such as Vercel and Supabase may process or store limited Google-derived data only as necessary to host, secure, and operate the PFP application. Google user data is not disclosed to other third parties except where necessary for security, to comply with applicable law, or as otherwise expressly permitted by the Google API Services User Data Policy.

PERFECT HOME PHILOSOPHY's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google OAuth credentials and Google-derived data are handled on the server side. OAuth client secrets, refresh credentials, and access credentials are not exposed in public browser code or public database roles. Access to the connected integrations is restricted to protected PFP administrative routes, and API traffic uses HTTPS. Short-lived access tokens are refreshed server-side when needed rather than being exposed to public users.

Google-derived reporting is stored only in private application data stores used for the authorized PFP reporting and monitoring features. Normalized Google Analytics and Search Console reporting history may be retained while it remains necessary for the business's internal trend and performance reporting. Google Business Profile review content, when imported through the approved integration, is treated as short-lived external source content under the application's current cache controls rather than as a permanent independent copy.

OAuth connection credentials are retained only while they are needed to maintain the authorized connection. Revoking the PFP application's access in the Google Account permissions stops future authorized API access. A valid request to delete Google-connected data can be submitted through the Contact page; the business will remove stored OAuth credentials and Google-derived application data that are no longer required for the connected feature, subject to applicable legal, security, fraud-prevention, and recordkeeping obligations.

When Google-derived data is no longer needed for the purposes described in this policy, or when a valid deletion request requires its removal, it is deleted or de-identified from the active PFP application systems as appropriate. PERFECT HOME PHILOSOPHY does not retain Google user data for unrelated future uses.

Submitted estimate requests, contact messages, attachment metadata, and reviews are stored in private server-side database or storage areas used for lead review, review moderation, verification, and attribution. Public browser roles are not permitted to read those private records directly; the website uses validated server-side endpoints and short-lived secure upload authorization for supported client files.

The site is hosted on Vercel and uses Supabase for database and private file-storage infrastructure. Google Workspace is used for customer acknowledgement email, and private operational notifications may be delivered through Telegram. Google Cloud Translation may process the client message text when the internal Russian-language translation feature is available. Microsoft Clarity may process limited site-usage data in no-consent mode and fuller analytics data when the visitor allows optional analytics cookies. These providers process information only as part of the services used by the business.

Records and uploaded files may be retained as needed to review an inquiry, maintain business records, prevent duplicate or abusive submissions, support project follow-up, and meet legitimate operational or legal needs. Abandoned temporary uploads are eligible for cleanup when they are not attached to a submitted lead.

Submitted project details, uploaded files, and contact messages are used to understand the requested work or question, determine whether the inquiry appears to fit the current service scope, prepare for follow-up, and maintain a record of the conversation.

Client contact information and uploaded inquiry files are not published or sold. Photos or documents submitted with an inquiry are not treated as permission to use them publicly as portfolio or marketing material.

Review submissions are used to understand client experience, verify or follow up on feedback when necessary, and—only when permission has been granted—moderate and publish an approved review on the website.

Referral and campaign information may be used in aggregate to understand which pages, services, locations, or referral sources are generating useful project inquiries or feedback. Personally identifying form fields are kept separate from general analytics events.

If you have a question about information or files submitted through the website, use the Contact page. Requests to correct or delete information, including a published review or Google-connected data, can be reviewed against applicable business, legal, moderation, security, and recordkeeping requirements.