1. Entities and Data Roles
Completa LLC d/b/a Completa operates the marketplace and acts as the launch controller for customer, contractor, project, payment, verification, support, dispute, warranty, and platform data used for marketplace operations. Completa, Co. owns or licenses the brand, platform software, estimation engine, formulas, pricing logic, and other intellectual property and may process platform data as an affiliate processor or service provider under intercompany services, license, and data-processing arrangements consistent with this Privacy Policy, unless a later notice identifies a different role for a specific processing activity.
Completa collects account information, project information, property photos, project documents, contractor business data, license and insurance documents, workers' compensation or non-subscriber attestations, payment metadata, messages, support records, dispute and warranty evidence, receipts, invoices, material records, device and log data, and legal acceptance records.
2. Approved AI/OCR Processing
Completa uses approved commercial API providers as limited external AI/OCR/image-processing processors. At launch, Completa uses Anthropic for project image understanding and uses OpenAI for receipt, invoice, material-record, and document OCR/extraction where configured for that processing. Completa sends only the original input and limited project context needed for the specific processing request.
Approved AI/OCR providers return readings and analysis to Completa. Completa stores and uses those returned readings internally. Completa does not send returned readings, extracted fields, summaries, classifications, or internal analysis back to an AI/OCR provider for additional processing, model training, model improvement, evaluation, feedback, secondary analysis, or benchmarking.
Completa does not permit Anthropic, OpenAI, or other external AI/OCR/model providers to train general models on customer or contractor content. Completa does not expose raw AI/OCR readings as standalone customer-facing AI outputs. Completa does not ask AI/OCR providers to perform biometric identification, face recognition, voiceprint recognition, identity recognition, voiceprint analysis, or hand-geometry or face-geometry extraction from project media. Project-photo AI/OCR is configured for project understanding, scope, materials, dimensions, classification, quality, dispute, warranty, and support purposes, not for biometric capture or identification. If Completa later captures or uses biometric identifiers for a commercial purpose, it will provide legally required notice and consent before that use. If this section conflicts with the AI Provider Reconciliation Addendum on active provider configuration, the AI Provider Reconciliation Addendum controls.
3. Incorporated Launch Documents
This Privacy Policy must be read together with the Privacy Rights and Data Governance Supplement, which sets out the operative data-subject-rights mechanics, request channels, sensitive-data treatment, breach-notice procedures, retention/deletion controls, minor-user handling, and Texas-specific privacy rights. This Privacy Policy also incorporates the AI/OCR/Data Use Disclosure, AI Provider Reconciliation Addendum, and Master General Provisions Addendum for launch data governance, approved AI/OCR processing, security controls, notices, dispute forum, and survival. If this Privacy Policy and the Privacy Rights and Data Governance Supplement conflict on personal-data rights, sensitive-data handling, breach notice, or minor-user protections, the more specific privacy supplement controls.
4. Internal Platform Improvement
Completa may use original project data and internally stored AI/OCR readings to operate, analyze, secure, and improve the platform, including Completa Estimates, pricing engine, formula-backed cost rules, project classification, material and labor assumptions, contractor matching, quality controls, dispute and warranty workflows, fraud and safety review, customer support, and contractor performance analytics.
This internal improvement is not permission for external provider model training. Identifiable internal AI/model training beyond the disclosed pricing-engine and platform-improvement purpose requires legal review and, where required, opt-in or reacceptance.
5. Sharing and Processors
Completa shares data with affiliates and service providers needed to operate the platform. The launch provider inventory includes: Completa, Co. as parent entity and affiliate processor/service provider for intercompany IP licensing, brand, platform-asset, and estimation-engine administration; Supabase for authentication, database, storage, row-level-security-backed platform data, and related backend services; Amazon Web Services for backend hosting, private object storage, logs, secrets, queues, event routing, web application firewall, and transactional SMS through AWS SNS where configured; Stripe, Inc. and Stripe Connect for customer payments, payment methods, fraud controls, connected-account onboarding, payouts, refunds, disputes, transfer reversals, payment records, and tax-form/payment-reporting workflows; Checkr, Inc. for contractor owner/principal background-check candidate creation, invitation, screening status, and report workflow; DocuSeal for electronic signing workflow, signed PDFs, signature certificates, signer metadata, and legal evidence; Resend for transactional email delivery, delivery/open/click event data where configured, and related email diagnostics; Expo, APNs, and Firebase Cloud Messaging for mobile push notification delivery tokens and routing; Sentry for crash/error diagnostics, stack traces, runtime context, and operational reliability; PostHog for configured pseudonymized product analytics, screen/event analytics, funnel analytics, and performance/usage diagnostics; Anthropic and OpenAI where configured for approved commercial API AI/OCR/image/document processing; RentCast and Repliers where configured for property/address enrichment, property characteristics, valuation/rental/comparable-property context, parcel or listing signals, and related project-estimation support; support tools; fraud/security vendors; and professional advisers such as legal counsel, accountants, auditors, and similar professional service providers under engagement agreements with confidentiality obligations.
Completa uses processor contracts, intercompany data-processing terms, and access controls appropriate to the processing. Completa does not sell customer or contractor personal data and does not share customer or contractor personal data for targeted advertising or cross-context behavioral advertising. Public marketing use of project photos, before/after galleries, testimonials, or case studies requires separate permission unless otherwise legally permitted and disclosed. If Completa adds or materially changes a service provider in a way that changes user-facing privacy risk, data categories, AI/OCR use, property/address enrichment, screening, payment routing, marketing use, targeted advertising, biometric use, or international transfer posture, Completa must complete privacy review and update applicable disclosures before launch use where required.
6. Website, Tracking, and Launch Geography
Completa may use cookies, analytics, logs, forms, and similar technologies on its website and applications to operate services, secure accounts, remember preferences, measure usage, and improve the platform, as limited by this Privacy Policy and applicable law. Completa does not use these tools to sell personal data or share personal data for targeted advertising at launch.
Public waitlist signups and support form submissions collect the information a visitor chooses to provide, such as name, email, role or audience, optional company, optional postal code, topic, message content, and operational metadata including hashed IP and content fingerprints used for abuse prevention, deduplication, routing, and human support review. The support form is not an emergency channel and does not approve refunds, confirm contractor eligibility, or provide legal advice by automated response. Privacy, legal, appeal, and data-governance requests should be sent to legal@completa.io or through the in-app privacy request flow where available.
At launch, Completa is configured for U.S. operations and Texas launch tax/privacy treatment. If Completa enables material international data transfers or broader state privacy-law coverage, the applicable privacy disclosures, subprocessor records, and user-rights workflows must be updated before that expansion where required.
7. Retention, Rights, and Changes
Completa retains identifiable project data only as long as reasonably necessary for platform operation, project administration, payment and tax records, warranty, disputes, fraud prevention, security, legal compliance, customer support, and internal product improvement. Transactional project, payment, tax, receipt, payout, dispute, warranty, and ledger records are retained for at least seven years unless a longer period is required by tax, accounting, payment-network, legal-hold, audit, dispute, entity, ownership, intercompany, or approved internal retention requirements. When identifiable data is no longer needed, Completa may delete, archive, aggregate, deidentify, or pseudonymize it.
Users may exercise available privacy rights through the contact methods and workflows provided by Completa. Privacy deletion requests do not require immediate deletion of records Completa must retain for tax, accounting, payment, dispute, warranty, fraud prevention, legal compliance, audit, chargeback, contractor-payout, or unresolved-claim obligations. Material privacy or AI/data-use changes require reacceptance before future transactional use, including provider training, sending returned AI/OCR readings back to an AI provider, broader AI provider processing, biometric recognition, targeted advertising/sale/share, materially broader retention, or materially different uses.
8. Texas Privacy and Minor-User Rights
Texas residents may have additional rights under the Texas Data Privacy and Security Act, the Texas Securing Children Online through Parental Empowerment Act, Tex. Bus. & Com. Code Chapter 509, where applicable, and other applicable state laws. The Privacy Rights and Data Governance Supplement controls Texas-specific consumer rights, sensitive-data treatment, breach-notice procedures, and minor-user handling.