What We Collect, And What We Do Not

1. What We Collect, And When

If You Ask A Professional For Work

The public request form collects your name, an email address or phone number, your city, state and ZIP code, and what you wrote about the work you need. You may also give a preferred date and time window. We collect this because it is what the professional needs in order to answer you.

If You Leave Your Email To Hear From Us

The interest form collects your email address, optionally your state and ZIP code, optionally a short note about what you do or need, which page you were on, and the date. That is all it collects. It is not an application and it holds no place in any queue.

If You Apply As A Professional

The application collects your name, business name, public display name, email, phone, city, state and ZIP code, optional website and social links, years in business, the services you offer, your service area, profile headline and description, optional credential type, jurisdiction and number, a required photograph of your face, and an optional business logo. A headshot is a photograph of an identifiable person, and it is handled accordingly — see section 4.

If A Professional Adds You As Their Customer

A professional using ProByName to run their business may enter your name, contact details, property address, and notes about the work. Those facts become part of the professional's operational record, but that does not make the person or their privacy, consent, communication, account, or export rights the professional's property. We do not contact you for our own purposes, do not market to you, do not introduce you to another professional, and do not use you to seed a directory. If you want your record removed, tell the professional or email us.

What We Never Collect

We do not collect payment card numbers, bank details, government identification, or Social Security numbers anywhere in this product. There is no payment processing on this site today.

2. Cookies, And What We Do Not Use Them For

We use cookies for one purpose: keeping you signed in and returning you to the right place after you act on a link. They are set with HttpOnly and SameSite, and over HTTPS in production, so they cannot be read by scripts on the page.

We do not use cookies for advertising, cross-site tracking, profiling, or measuring which pages you looked at. There is no consent banner on this site because there is nothing to consent to — we are not doing the thing those banners exist to ask about.

3. Who Else Processes Your Information

These are the only third parties involved, and each does one job:

• Supabase (United States) — the database holding records.
• Amazon Web Services (United States) — hosting, private file storage for images and documents, and sending operational email.
• OpenAI — only if a professional applying to list chooses the optional writing helper. The server sends only the named business/display names, city, state, selected services, and the free-text business facts entered in that helper. Applicants should not put customer information in those facts. Response storage is disabled, and use is never automatic.
• U.S. Census Bureau — the scheduled property-maintenance pass sends a customer property's typed street address to the public Census geocoder to derive routing coordinates. The result is labelled as derived, not verified.

We do not share your information with anyone else. We do not sell it. We do not trade it for advertising. If we are ever legally compelled to disclose something, we will tell you unless we are prohibited from doing so.

4. Photographs

A professional's headshot is a photograph of an identifiable person and is stored in private storage, not on a public bucket. It appears publicly only on a listing the professional authorized for publication. Photographs of completed work are visible to the professional who took them and are not published without authorization.

5. How Long We Keep Things

• Live business and customer records — while the professional uses the service. Automated professional offboarding and its deletion clock are not built; requests are assessed and handled manually under the applicable record obligations.
• Interest requests — kept until the sender asks for deletion. An unverified email request is not treated as confirmed permission to contact that address.
• Unapproved professional applications — kept until the applicant withdraws or asks for deletion; the operator has a manual deletion path before approval. Approved or provisioned professionals require the broader offboarding process, which is not yet automated.
• Support-access records — 2 years, then deleted.
• Records of what someone agreed to, and payment history — 7 years.

That last one is a deliberate exception and it is worth explaining. Records of consent are immutable — the database itself refuses to change or delete them, including for us. That is what makes “you agreed to this on this date” answerable if there is ever a disagreement, and it protects the professional as much as the customer. A deletion request removes the personal information attached to a record; it does not erase that an agreement existed.

Backups are held by our infrastructure providers and expire on their own schedules.

6. Your Rights

Depending on where you live you may have the right to know what we hold, get a copy, correct it, have eligible information deleted, or object to a use. We accept these requests from everyone. Some immutable consent, payment, audit, or accepted-service records and approved professional records may need to be retained or handled through a broader offboarding process; we will state the applicable boundary in our response.

Email dane@probyname.com and we will answer within 30 days. We will not charge you, and we will not treat you differently for asking. We have no advertising programme, so there is nothing to opt out of.

A professional using ProByName can export an allow-listed operational-record snapshot at any time, regardless of plan status. It includes the documented business datasets and provenance, but excludes authentication credentials, notification and operator internals, raw storage keys, and binary media files.

7. Children

This is a product for hiring and running a service business. It is not directed at children and we do not knowingly collect information from anyone under 18. If you believe a child's information reached us, email us and we will delete it.

8. Changes

If we change this policy we will change the date at the top. If a change is significant we will say so plainly rather than quietly editing the page.