Privacy Policy

Last updated: April 28, 2026

This Privacy Policy describes how Woogoro LLC, a South Carolina limited liability company ("Woogoro," "we," "us," or "our"), with its principal place of business at 17064 Laurelmont Court, Fort Mill, SC 29707, collects, uses, discloses, and protects personal information in connection with the Service at woogoro.com. It also describes your rights under US state privacy laws. By using the Service, you agree to this Privacy Policy.

1. What Woogoro Covers

Woogoro analyzes contractor quotes (16 home services), auto repair invoices, medical bills and EOBs, legal fee agreements, and moving company estimates. This policy covers all verticals.

2. How Your Documents Are Processed

When you upload a document (quote, bill, invoice, agreement, or receipt), it is processed in two stages:

• Client-side processing: Text extraction from PDFs and basic parsing happens in your browser. The original file is never uploaded to our servers.
• AI analysis: Extracted text (not the original file) is sent to our secure API, which uses Anthropic's Claude AI to analyze pricing, detect errors, and generate verdicts. This data is processed in transit and is not stored by Woogoro or Anthropic after analysis is complete.

For image uploads (photos of quotes or bills), the image is sent to our API for AI-powered text extraction and analysis, then discarded.

3. What Data We Extract

Depending on the document type, Woogoro may extract: pricing data, line items, scope items, CPT codes (medical), hourly rates (legal/moving), labor rates (auto repair), crew size and weight estimates (moving), contractor/provider names, service dates, and location information. This data is used solely to generate your analysis and is not retained in identifiable form after your session.

4. Categories of Personal Information We Collect

For transparency under California and other state privacy laws, the categories of personal information we may collect are:

• Identifiers: IP address, session ID, browser fingerprint (for rate limiting and abuse prevention); email address only when you voluntarily opt in to price-alert notifications (see Section 5.1) or create a Woogoro account for receipt rewards (see Section 5.2); short-lived sign-in session tokens for account holders
• Internet or network activity: pages visited, referring URLs, general browsing data
• Geolocation data: approximate location derived from address entry or IP, used to provide regional pricing
• Commercial information: extracted pricing and quote data from uploaded documents (anonymized after analysis)
• Professional information: contractor business information for users who sign up through the contractor directory
• Sensitive personal information: medical billing codes (CPT codes) and legal matter types may be present in documents users upload for analysis. We treat this data with additional care (see Section 6)

We do NOT collect: Social Security numbers, precise geolocation beyond address-level, biometric identifiers, genetic information, racial or ethnic origin, religious beliefs, union membership, sexual orientation data, immigration status, financial account numbers, or passwords.

5. Purposes for Which We Use Personal Information

• To provide the analysis and tools you requested
• To improve our pricing benchmarks through anonymized aggregation
• To prevent abuse, fraud, and unauthorized use
• To comply with legal obligations
• To communicate with you about the Service (only when you've contacted us)

We do NOT use your personal information for targeted advertising, profiling, or any form of automated decision-making that produces legal or similarly significant effects. Our analysis tools are informational only and require human action by you to have any effect.

5.1 Saved-watch account notifications (opt-in)

Woogoro offers an optional account feature called “saved watches.” A saved watch is an account-level record of a city/state and service you want to monitor. When pricing for a watched (city, vertical) pair changes meaningfully, we email you an administrative notification about the state of your saved watch. Participation is strictly opt-in: we collect your email address only if you affirmatively enter it and click “Notify me” (or a similarly labeled action that creates a saved watch) on a result page or in your account.

• Nature of these messages: saved-watch notifications are transactional account-state notifications (15 U.S.C. § 7702(17)(C)). They report on the state of an ongoing relationship you established by creating a watch. They are not marketing, newsletters, or promotional emails.
• What we store: your email address, each saved watch (city/state and service), the timestamp and IP address of each opt-in (as a consent record), and your unsubscribe / preferences status.
• What we send: only updates about the watches you created. We do not send newsletters, marketing blasts, third-party offers, or promotional content not tied to a specific watch you saved. Each notification identifies the specific watch it relates to.
• Frequency: at most a few messages per year per saved watch, only when pricing in the watched area moves enough to be actionable.
• Manage or remove watches: every email includes a one-click link that takes you to your account preferences, where you can remove individual watches or remove all of them. You may also email privacy@woogoro.com at any time and we will remove you within 10 business days.
• No sale or sharing: your email is never sold, shared, rented, or disclosed to contractors, advertisers, or any third party. See Section 13.

If you never create a saved watch, we never collect or store your email address from the result pages.

5.2 Woogoro account (optional, for receipt rewards)

The pricing tools, estimators, and analyzers on woogoro.com are usable without any account. A Woogoro account is required only if you want to participate in the Woogoros Rewards Program (submitting receipts for verification, viewing your collection in the burrow, or redeeming rewards). See the Woogoros Rewards Program section of our Terms of Service for the full program description.

• How sign-in works: Woogoro uses passwordless email authentication ("magic link"). When you sign in, we email you a one-time link that grants a session. We do not collect or store passwords for the Service.
• What we store for an account: your email address, an account identifier, the date the account was created, the date of your most recent sign-in, your participation status in the rewards program, your collection of digital Woogoros, your in-application Woo Cash balance, and a log of receipts you have submitted (anonymized line-item data per Section 8 — your email is associated with the submission only for fraud-prevention and rewards-attribution purposes).
• Session tokens: after sign-in, a short-lived session cookie or local-storage token is set on your device so you do not have to sign in on every page load. Tokens expire automatically and may be cleared by signing out or clearing your browser data.
• Communications: account emails are limited to: sign-in magic links, transactional confirmations of receipt submissions or redemptions, balance and tier change notifications, and program updates required by these policies. We do not send marketing emails to account holders without separate opt-in to a newsletter (see Section 5.1).
• Account deletion: you may delete your Woogoro account at any time by emailing privacy@woogoro.com from the account email or by using the in-application delete control where available. Account deletion removes your email, account identifier, sign-in history, balance, and Woogoro collection from our systems within 30 days. Anonymized aggregate pricing data derived from receipts you submitted (Section 8) may be retained because it cannot be tied back to you. Deletion is final — uncashed Receipt Woogoros and unredeemed Woo Cash are forfeited as part of deletion (consistent with Section 32 of the Terms of Service).
• No account = no problem: the rest of the Service (estimators, analyzers, comparisons, cost guides, city pages) does not require an account and never will. You can use Woogoro forever without ever creating one.

6. Medical and Legal Documents

Medical bills and legal fee agreements may contain sensitive personal information. Woogoro treats these documents with the same privacy protections as all other uploads: client-side processing where possible, secure transit for AI analysis, no retention of original files, anonymization of any aggregated data.

Important: Woogoro is not a HIPAA-covered entity and is not a business associate of any covered entity. If you are concerned about transmitting protected health information, you may use the manual entry features instead of uploading documents, or redact sensitive personal identifiers before upload. California residents: please also see our disclosures related to California's Confidentiality of Medical Information Act (CMIA) in Section 18.1.

7. Address and Geocoding

When you enter a property address, it is sent to Mapbox for geocoding purposes (converting an address into geographic coordinates). This allows us to provide location-specific pricing data. Mapbox's use of this data is governed by their own privacy policy.

8. Anonymized Pricing Data

After each analysis, Woogoro automatically stores anonymized, aggregate pricing data to improve our benchmarks and pricing models. This includes: total cost, service type, region (city and state), procedure codes (CPT codes for medical), labor rates, fee structures, and scope item counts. This data does not include: names, addresses, phone numbers, document content, contractor or provider names attached to prices, dates of birth, insurance policy numbers, or any other personally identifiable information. This data cannot be traced back to any individual user or uploaded document.

If you choose to share what you actually paid through the optional post-result form ("Got a real quote? Share it anonymously"), the price you enter is treated the same way as the data above: anonymized, aggregated, and used only to improve regional benchmarks. Submission is voluntary; nothing is sent unless you click the share button. The optional contractor name field, if filled, is retained on the raw submission record for up to one year so we can assess submission quality (real-looking contractor names are weighted slightly higher). Contractor names are never displayed publicly, never attached to the published aggregate prices, and never used to contact the contractor.

9. Contractor Recommendations

When you submit a contractor recommendation, we store: the contractor or company name, trade category, city, state, your comment, your first name (if provided, otherwise "Anonymous"), a partial hash of your IP address (for rate limiting), and a timestamp. This data is displayed publicly on the recommendations page. We do not collect your email address, full name, or precise location through the recommendations feature. You may request removal of a recommendation you submitted by emailing privacy@woogoro.com.

10. Contractor Signup Data (Directory)

Contractors who sign up for the Woogoro directory provide business information (name, contact, services, license, insurance) which is stored securely. This data is used to verify qualifications and, upon contractor opt-in, to display directory listings. Contractor data is not shared with third parties for marketing purposes. See our Terms of Service for the contractor relationship structure.

11. Local Storage and Cookies

We use your browser's localStorage to maintain session tracking information, such as a session ID and analysis history. This data stays on your device and is not transmitted to any server except as required to operate the Service. You can clear it at any time through your browser settings.

Woogoro does not use cookies for advertising, cross-site tracking, or third-party analytics. All analytics are self-hosted and aggregate-only.

12. Third-Party Services

Woogoro uses the following third-party services:

• Anthropic (Claude AI): Document analysis. Data is processed in transit and, per Anthropic's policy for API users, is not retained beyond processing windows and is not used to train their models.
• Upstash (Redis): Rate limiting and contractor application storage. No document content is stored.
• Vercel: Hosting and serverless functions.
• Mapbox: Address geocoding.
• Resend: Transactional and account-state email delivery (welcome emails, magic-link sign-in, monthly saved-watch updates). We send your email address and the rendered email body.
• Stripe: Payment processing for optional Pro Report purchases. When you choose to buy a Pro Report, Stripe handles your card or bank details directly under its own terms and privacy policy (stripe.com/privacy). We do not see, store, or transmit your full payment card number, CVV, or bank account number. Stripe sends us only the payment-success confirmation and a receipt identifier we use for refunds. Disclosed as a sub-processor under CCPA § 1798.140(ag)(1).
• Printful: Print-on-demand fulfillment for merchandise redemptions. We send your shipping name and address only when you redeem a physical item.
• Amazon Associates: Affiliate referral attribution for outbound product links. When you click an affiliate product link, we append our Associates tag to the destination URL so Amazon can credit any qualifying purchase to us. Woogoro does not set advertising or tracking cookies; any cookies are set by Amazon on its own site after you arrive there. We do not receive your purchase details from Amazon, only aggregate referral and earnings reports.
• Woogoro Analytics: Self-hosted aggregate traffic data. No third-party tracking.

13. Third-Party Sharing and Sale of Personal Information

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes, and we do not engage in "sharing" as defined under the California Consumer Privacy Act (CCPA/CPRA) or similar state laws. We do not sell leads to contractors, repair shops, healthcare providers, or attorneys. Ever.

We may disclose personal information to service providers (listed in Section 11) who process data on our behalf under contractual obligations consistent with this Privacy Policy. We may also disclose information when required by law, subpoena, court order, or to protect the safety, rights, or property of any person.

14. Data Retention

• Uploaded documents: not retained
• Analysis results: not stored on our servers
• Anonymized pricing data: retained indefinitely to improve benchmarks (cannot be tied back to individuals)
• Contractor recommendations: displayed publicly and retained until the submitter requests removal via privacy@woogoro.com
• Contractor applications: retained until the contractor requests deletion
• Analytics data: retained in aggregate form only
• Email correspondence: retained as needed to respond to you and for reasonable business records
• Price-alert email opt-ins: retained until you unsubscribe. After unsubscribe, your email is marked inactive and is never used for sends; a minimal suppression record is kept to honor your unsubscribe in perpetuity.
• Woogoro account data: retained for as long as your account is active. Sign-in tokens expire automatically. Account deletion (see Section 5.2) removes account data within 30 days of request, except minimal records required for fraud prevention, financial / tax reporting, or legal obligations, which are kept only as long as required by applicable law.
• Shipping addresses for merchandise redemptions: retained for up to 24 months to support warranty, lost-shipment, and re-ship claims, then anonymized.

15. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including: TLS encryption in transit for all data flows, least-privilege access to backend systems, environment-isolated secrets, anonymization by default for aggregated data, and rate limiting to deter abuse. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

16. Data Breach Notification

In the event of a data breach affecting personal information, we will notify affected individuals and relevant authorities as required by applicable law, including within the timeframes mandated by South Carolina (generally within 14 days after discovery per SC Code Ann. § 39-1-90), California (expedient time and without unreasonable delay), and any other state with notification laws that applies to you.

17. Children's Privacy

The Service is not directed to anyone under 18. Specifically, we do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact privacy@woogoro.com immediately and we will delete it. We comply with the Children's Online Privacy Protection Act (COPPA) and do not market or design features toward children. Account use by anyone under 18 is prohibited under our Terms.

18. Your Rights – United States Residents

Depending on where you live, you may have specific rights under applicable US state privacy laws. Below is a summary. To exercise any of these rights, email privacy@woogoro.com with your request and the state you reside in. We will respond within the timeframe required by your state's law (typically 45 days, with one extension of up to 45 additional days permitted if necessary).

18.1 California residents (CCPA / CPRA)

You have the right to:

• Know what personal information we have collected about you, including categories and specific pieces
• Delete personal information we have collected about you, subject to certain exceptions
• Correct inaccurate personal information we maintain about you
• Data portability — receive a copy of your personal information in a portable, machine-readable format
• Limit the use of sensitive personal information — though we do not use sensitive personal information for purposes other than providing the Service
• Opt out of sale or sharing — though we do not sell or share personal information as defined by law
• Non-discrimination — we will not discriminate against you for exercising your privacy rights
• Authorized agent — you may designate someone to exercise these rights on your behalf with appropriate proof of authorization

Under California's Confidentiality of Medical Information Act (CMIA), medical information in documents you upload is handled with the protections described in Section 6.

"Do Not Sell or Share My Personal Information" / Global Privacy Control (GPC): Although we do not sell or share personal information, we honor Global Privacy Control signals sent by your browser as a valid opt-out preference signal as required by the California Privacy Rights Act.

18.2 Virginia residents (VCDPA)

You have the right to: know whether we process your personal data and to access it; correct inaccuracies; delete your data; obtain a portable copy; and opt out of targeted advertising, sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not engage in targeted advertising, sell data, or conduct such profiling, so the opt-out is effectively automatic. To appeal a denial of a request, email privacy@woogoro.com with "VCDPA Appeal" in the subject.

18.3 Colorado residents (CPA)

You have the right to: access, correct, delete, and obtain a portable copy of your personal data; and to opt out of targeted advertising, sale, and profiling. The same disclosures apply as for Virginia. You may also submit an opt-out via a universal opt-out mechanism we recognize (Global Privacy Control).

18.4 Connecticut residents (CTDPA)

You have the same rights as Virginia and Colorado residents above: access, correction, deletion, portability, and opt-outs from targeted advertising, sale, and profiling.

18.5 Utah residents (UCPA)

You have the right to access, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising and sale of personal data.

18.6 Texas residents (Texas Data Privacy and Security Act)

You have the right to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of targeted advertising, sale, and profiling that produces legal or similarly significant effects.

18.7 Florida residents (FDBR)

Florida's Digital Bill of Rights provides access, correction, deletion, portability, and opt-out rights similar to the above for residents of Florida.

18.8 Other state residents

If your state has enacted a comprehensive privacy law that provides rights not listed above, we will honor those rights to the extent required by law. Email privacy@woogoro.com with your request and state of residence.

19. Automated Decision-Making

Woogoro uses automated tools (algorithms and AI) to analyze documents and generate estimates. These estimates are informational only. They do not produce legal or similarly significant effects about you unless and until you choose to act on them. You may opt out of having our automated analysis applied to a specific document by simply not uploading it; for any profiling you believe has occurred and want to object to, email privacy@woogoro.com.

20. International Users

The Service is intended for US residents. We do not target users in the European Union, United Kingdom, or other jurisdictions with comprehensive data protection regimes (GDPR, UK GDPR, LGPD, etc.). If you access the Service from outside the US, you do so on your own initiative and at your own risk, and you are responsible for compliance with local laws. Personal information you provide may be transferred to and processed in the United States.

21. How to Contact Us About Privacy

For any privacy-related request, question, or concern:

• Email: privacy@woogoro.com

Please include your state of residence (for state privacy law requests), a clear description of your request, and any information needed to verify your identity. We will not require you to create an account to exercise privacy rights.

22. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the most recent changes. For material changes, we will provide reasonable notice through the Service or by email (if you have provided one) at least 30 days before the changes take effect. If you disagree with a change, you must stop using the Service before the change takes effect.

23. General Contact

For questions about this Privacy Policy, email privacy@woogoro.com. For other matters, see our Terms of Service.