Privacy Policy

This Policy applies to getmeasureiq.com, the MeasureIQ web application (including the customer-facing document viewers, estimate/invoice/proposal pages, and the customer portal), MeasureIQ mobile and desktop clients, and any MeasureIQ APIs, emails, SMS messages, and integrations that link to this Policy (collectively, the “Services”).

MeasureIQ is designed for use by contracting businesses (“Contractors”) and the individuals who work for them (“Team Members”). Contractors may also use the Services to interact with their own end customers (“Contractor Customers”). When a Contractor uses MeasureIQ to process information about a Contractor Customer, the Contractor is the “controller” of that information and MeasureIQ acts as their “processor” or service provider.

We collect the following categories of information:

• Account information. Name, email address, phone number, password hash, profile photo, organization name, role, and time zone.
• Business information. Company details, business address, tax and license identifiers, insurance and compliance documents, service areas, price books, branding assets, and organization settings.
• Customer and property data. Records that Contractors create or import about their own customers and properties, including names, addresses, emails, phone numbers, notes, photos, measurements, parcel/GIS data, estimates, proposals, work orders, invoices, payments, appointments, and communication logs.
• Workforce, fleet, and equipment data. Employee records, roles, certifications, time-clock entries, vehicles, equipment, maintenance history, and related compliance documents that a Contractor chooses to store in MeasureIQ.
• Content you upload. Photos, PDFs, drone imagery, LiDAR scans, aerial captures, sketches, signatures, and any other files uploaded to a property or job record.
• Payment information. When you pay for a MeasureIQ subscription or when a Contractor Customer pays an invoice, payment card details are collected directly by our payment processor (Stripe) and are not stored on MeasureIQ servers. We retain limited metadata such as the last four digits, brand, amount, currency, status, and processor reference.
• Communications. Emails and SMS/MMS messages sent or received through MeasureIQ, message status events, and support requests you send us.
• Usage and device data. IP address, browser and device information, operating system, referring pages, actions taken in the Services, log timestamps, approximate location derived from IP, and crash/diagnostic data.
• Cookies and similar technologies. Session cookies for authentication, and limited first-party analytics used to measure product usage, reliability, and performance.

We use the information we collect to:

• Provide, maintain, secure, and improve the Services;
• Authenticate users, provision organizations, enforce role- and feature-based permissions, and prevent fraud or abuse;
• Generate estimates, invoices, work orders, and other documents from the data a Contractor enters or imports;
• Enrich property records using publicly available parcel, GIS, imagery, and building data from authoritative providers;
• Deliver customer communications (email, SMS, in-app notifications, and document share links) that a Contractor initiates;
• Provide AI-assisted features (see Section 6) such as the MeasureIQ AI Business Assistant, drafting, summarization, recommendations, and proactive briefings;
• Produce analytics and benchmarks that are private to each Contractor’s organization and, where explicitly enabled, anonymous, k-anonymous industry benchmarks;
• Comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.

MeasureIQ relies on trusted subprocessors to operate the Services. These providers only receive the information they need to perform their function and are bound by confidentiality and data-protection obligations.

• Hosting, database, storage, and authentication: Lovable Cloud (powered by Supabase) and Cloudflare, which host the application, store data at rest, and route traffic. Authentication supports email/password plus Google and Apple sign-in.
• Payments: Stripe processes subscription and invoice payments. Card data is submitted directly to Stripe under its own privacy policy.
• Mapping and property intelligence: Apple MapKit, Google Maps Platform, OpenStreetMap, Microsoft Buildings, and county/municipal GIS services are used for geocoding, aerial imagery, and parcel data. Optional providers include Regrid, ATTOM, and Estated when the corresponding integrations are enabled.
• Communications: Twilio (SMS/MMS and phone), Resend and other email infrastructure providers, and inbound webhook processors are used to send and receive Contractor communications with their customers.
• AI providers: OpenAI and other model providers accessible through the Lovable AI Gateway power the MeasureIQ AI Business Assistant, drafting, and recommendation features. Prompts and the specific business context needed to answer a request are sent to the model provider; MeasureIQ does not permit its providers to use Contractor data to train their public foundation models.
• Social and marketing integrations: When a Contractor connects Facebook Pages, Instagram Business, LinkedIn, TikTok, X, YouTube, or Google Business Profile, MeasureIQ receives OAuth tokens and account metadata from Meta and the other platforms in order to publish content and read engagement metrics on the Contractor’s behalf. These integrations are governed by each platform’s own terms and privacy policies.
• Weather and operational data: Forecast providers are used to warn about weather risk on scheduled jobs.
• Analytics, error reporting, and observability: Product analytics and error reporting tools used to keep the Services reliable.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Where the GDPR, UK GDPR, or similar laws apply, we process personal information under one or more of the following legal bases: performance of a contract with you or your organization; our legitimate interests in operating and securing the Services; compliance with a legal obligation; and, where required, your consent (for example, for optional marketing communications).

The MeasureIQ AI Business Assistant helps Contractors run their business by answering questions and executing approved actions against their own MeasureIQ data. To answer a request, the assistant may load a narrow, permission-scoped slice of the Contractor’s business context (for example, overdue invoices, dormant customers, or today’s schedule) and send it, along with your prompt, to an AI provider through the Lovable AI Gateway.

The assistant will not execute a sensitive action (such as sending a customer message, drafting a follow-up, or creating a record) without the user’s approval, and every tool call is written to an internal action log. Contractor data used in AI features is not made available to model providers for training their public foundation models.

MeasureIQ organizes publicly available and user-generated information about properties so that contractors can estimate, plan, schedule, report, and manage projects. This property intelligence may include measurements, property characteristics, parcel information, contractor-created data, project history, and publicly available mapping information.

MeasureIQ is not a surveillance platform. We do not monitor properties in real time, access private security cameras, record audio or video from private property, collect information from inside homes or buildings, track homeowners, perform government surveillance, or sell homeowner information.

Property information may be derived from one or more of the following sources:

• Publicly available aerial imagery;
• Public parcel records;
• GIS information;
• Government property records;
• Satellite imagery;
• Contractor-created measurements;
• User-entered project information;
• Third-party mapping providers;
• Customer-provided information.

Measurements generated inside MeasureIQ are estimates unless verified by the user, and should be confirmed before construction, engineering, permitting, surveying, or legal use. Contractors own the customer information they enter, and MeasureIQ does not claim ownership of customer lists, estimates, invoices, photographs, notes, or contractor-created measurements. See Property Intelligence & Data Usage for a plain-language overview and FAQ.

We use industry-standard safeguards to protect the data you entrust to us, including:

• Encryption in transit (TLS) for all traffic between clients and our servers;
• Encryption at rest for our primary database and object storage;
• Encryption of sensitive integration secrets (such as OAuth access and refresh tokens) using a dedicated key before they are stored;
• Row-Level Security policies that isolate every organization’s data from other organizations at the database layer;
• Role- and feature-based access controls, so Team Members only see what their role permits;
• Audit logging of security-relevant actions and administrative changes;
• Continuous monitoring, dependency scanning, and periodic security review.

No system can be guaranteed to be perfectly secure. If you believe your account has been compromised, contact us immediately at security@getmeasureiq.com.

We retain personal information for as long as your MeasureIQ account and organization remain active, and for a limited period afterward as needed to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Business records that a Contractor is legally required to retain (such as tax and financial records) may be retained for the period required by applicable law even after account closure.

When you delete a record inside the Services, it is typically soft-deleted first so that authorized administrators can restore it, and then permanently purged on a rolling schedule. See Data Deletion for how to request a full account deletion.

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal information, and to object to certain uses of it. California residents have additional rights under the CCPA/CPRA, including the right to know what personal information we collect and to whom we disclose it, and the right to non-discrimination for exercising those rights.

If you are a Team Member of a Contractor, requests about business records inside a Contractor’s organization should generally be directed to that Contractor, who controls the data. MeasureIQ will support the Contractor in fulfilling those requests.

To exercise your rights, use the Data Deletion page or email us at privacy@getmeasureiq.com.

MeasureIQ is operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our subprocessors operate. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses for cross-border transfers.

MeasureIQ is a business-to-business platform and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can remove it.

We may update this Policy from time to time. When we do, we will change the “Last updated” date at the top and, for material changes, provide additional notice (for example, an in-app banner or an email to account administrators).

For privacy questions or requests, contact privacy@getmeasureiq.com. For general support, contact admin@getmeasureiq.com.