Contractor Scorecard

Privacy Policy

Last updated: September 22, 2026

This Privacy Policy explains how Contractor Scorecard (“Contractor Scorecard,” “we,” “us,” or “our”), a product of Search Click Grow, collects, uses, and protects information when you use our application at mycontractorscorecard.com (the “Service”). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

We collect the following categories of information:

  • Account information. Your name, email address, password (stored securely as a hash), company/account association, and assigned role (Super Admin, Admin, or User).
  • Scorecard data. The business performance data you enter or import, including marketing acquisition metrics, job/production details, financial figures, commissions, reviews, campaigns, periods, targets, and related KPIs.
  • Google Sheets data (optional). If you connect a Google account, we access spreadsheet and file metadata and the specific cell or range values you choose to display, using read-only Google OAuth scopes. We never modify your Google files, and we only read the sheets you explicitly select.
  • Technical data. Basic information required to operate the Service, such as session cookies used to keep you logged in.

2. How We Use Your Information

We use your information solely to provide and operate the Service. This includes:

  • Authenticating you and maintaining your session.
  • Storing, calculating, and displaying your scorecards, KPIs, and reports.
  • Generating AI-powered analysis of your metrics when you request it.
  • Refreshing data from connected Google Sheets so your widgets stay current.
  • Sending transactional emails such as account invitations, verification, and password resets.

We do not sell your information, and we do not use it for advertising or for any purpose beyond delivering the Service.

3. Data Storage and Security

Your data is stored in a PostgreSQL database hosted on Supabase. Access is protected by row-level security policies that scope data to your account, along with authentication controls. We take reasonable technical and organizational measures to protect your information, but no method of transmission or storage is completely secure.

4. Third-Party Services

We rely on trusted third-party providers to operate the Service. Each processes only the data necessary for its function:

  • Supabase — database hosting and authentication.
  • Google API — read-only access to Google Sheets and Drive when you connect a Google account.
  • Anthropic — AI analysis of your scorecard metrics when you request insights.
  • Resend — delivery of transactional email.
  • Stripe (planned) — payment and subscription billing, if and when paid plans are introduced.

Use of Google user data adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. Your Rights and Choices

  • Data export. You can export your scorecard data at any time using the built-in CSV and PDF export tools.
  • Account deletion. You may request deletion of your account and associated data by contacting us. Once deleted, your data cannot be recovered.
  • Disconnecting Google. You can revoke our access to your Google account at any time from the Settings page or your Google account permissions.

6. Cookies

We use only essential session cookies required to keep you authenticated while you use the Service. We do not use advertising, analytics, or third-party tracking cookies.

7. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

8. Contact Us

If you have questions about this Privacy Policy or your data, contact us at micha@searchclickgrow.com.