Privacy Policy

Effective date: May 17, 2026

1. Who we are

BEDRHome is a kitchen and bathroom remodeling design and matching service operated by VisionXLab. We help homeowners visualize their remodel with AI-generated previews and then introduce them to a vetted, independent local contractor who quotes and builds the project.

BEDRHome is not a contractor. We do not perform construction, demolition, installation, or any on-site remodeling work. The actual work is performed by independent third-party contractors we match you with.

This Privacy Policy explains what information we collect when you use bedrhome.com and our related landing pages, what we do with it, and the choices you have.

2. Information we collect

Contact information

• First and last name
• Email address
• Phone number
• ZIP code, city, and U.S. state

Project information

• Type of project (kitchen, bathroom, scope)
• Budget band and timeline
• Whether you are interested in financing
• Style preferences (e.g. modern, classic, transitional, cabinet finish, countertop preference)
• Photos of your current kitchen or bathroom that you upload

AI-generated previews

• The AI-rendered preview image we generate from your inputs
• The prompt parameters used to generate it
• We retain these renderings so we can share them with your matched contractor as a design brief and to improve the quality of the AI service over time

Automatically collected technical data

• IP address, browser type, device, operating system
• Referring URL, pages visited, time on page, clicks
• UTM parameters and click identifiers (utm_*, fbclid, gclid)
• Meta browser ID (_fbp) and Meta click ID (_fbc) for ad attribution
• Session replay data via Microsoft Clarity and PostHog (clicks, scrolls, form interactions — input contents are masked for password fields)
• Basic traffic and performance metrics via Vercel Analytics

Phone verification

• A one-time SMS verification code is sent to your phone via Twilio Verify when you submit a form. The code itself is not stored by us and is not used for marketing.
• If you later opt in to marketing, that consent is captured as a separate event documented by TrustedForm.

We do not collect Social Security numbers, bank account numbers, government IDs, biometric data, precise GPS location, or health information through BEDRHome.

3. How we use your information

• Match you with a vetted, independent local remodeling contractor whose service area, specialty, and capacity fit your project.
• Send your AI preview as a design brief to your matched builder so they can quote against a real visual, not a guess.
• Communicate with you about your project — confirmations, scheduling, follow-up questions, and (only with separate TCPA consent) marketing follow-up.
• Analytics and product improvement — understand how people use BEDRHome, which features work, where users get stuck, and how to improve the AI preview quality.
• Fraud prevention, security, and abuse detection — block bots, spam submissions, scrapers, and obvious fraud.
• Legal compliance — respond to lawful requests, enforce our Terms, and keep records required by law.

4. Who we share it with

Your matched contractor

We share your contact info, project details, and AI preview with one matched contractor partner per project (exclusive match — we don't sell the same lead to multiple builders). That contractor becomes an independent controller of your information and will contact you under their own privacy policy.

Service providers (under data processing agreements)

• Twilio — SMS verification and messaging
• Supabase — database, edge functions, and backend hosting
• Vercel — frontend hosting and analytics
• Google (Gemini API) — AI inference for the kitchen and bathroom preview renderings
• Meta — Meta Pixel and Conversions API for ad measurement
• PostHog — product analytics
• Microsoft (Clarity) — session replay and heatmaps
• ActiveProspect (TrustedForm) — independent capture of your consent for compliance

Each of these providers processes data on our behalf under a written contract that limits their use of your information to the services they provide to us.

What we do NOT do

• We do not sell your information to data brokers.
• We do not share your information with parties unrelated to your remodel inquiry.
• We do not rent or trade your contact details.

We are transparent that introducing you to a matched contractor is a "sale" or "sharing" of personal information under California and similar state laws. You have the right to opt out — see Section 9.

5. AI-generated images — important notice

When you upload a photo of your kitchen or bathroom and submit your style preferences, the image and prompt are sent to Google's Gemini API for AI inference. We use the paid API tier of Gemini, under which Google contractually commits that your inputs and outputs are not used to train future Google models. You can review Google's API terms at ai.google.dev/gemini-api/terms.

We retain the AI-generated rendering so we can share it with your matched contractor as a design brief. We may also use the rendering, in anonymized form (without your contact information), to improve our prompts, evaluate output quality, and train internal style-selection logic.

If you do not want your input photo or generated preview retained, email privacy@bedrhome.com and we will delete it.

6. TCPA, SMS, and phone calls

If you submit a form with the phone consent checkbox checked, you provide your prior express written consent for BEDRHome and your matched contractor to contact you by phone call, SMS, MMS, and email about your remodeling project, including calls and texts placed using an automatic telephone dialing system, artificial or prerecorded voice, or AI-dialed technology, even if your number is on a federal or state Do Not Call list.

Your consent is not a condition of receiving any service from BEDRHome. Message and data rates may apply. Message frequency varies.

Opting out

• Text messages: reply STOP to any SMS to unsubscribe. Reply HELP for help.
• Phone calls from BEDRHome: ask the caller to remove you, or email privacy@bedrhome.com with the subject "Do Not Call."
• Phone calls from your matched contractor: ask the contractor directly. They are independent and control their own outreach. On request, we will notify them of your opt-out.
• Email: click the unsubscribe link in any marketing email, or email privacy@bedrhome.com.

7. CCPA / CPRA — California residents

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know what personal information we collect, use, disclose, and share.
• Right to access the specific pieces of personal information we have about you.
• Right to delete personal information we have collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of your personal information — including the introduction to a matched contractor.
• Right to limit the use of sensitive personal information.
• Right to non-discrimination — we will not deny you services, charge a different price, or provide a different quality of service because you exercised these rights.

To exercise any of these rights, email privacy@bedrhome.com with the subject "California Privacy Request." We will respond within 45 days, with a possible 45-day extension where reasonably necessary. You may also use an authorized agent — we will require reasonable proof of authorization.

We honor Global Privacy Control (GPC) browser signals as a valid request to opt out of the sale and sharing of personal information.

8. GDPR — EU, UK, and Swiss residents

BEDRHome is a U.S. service intended for U.S. homeowners. We do not market in the EU, UK, or Switzerland. If you nonetheless access our site from those regions and we collect your information, you have the following rights under the GDPR / UK GDPR:

• The right to access, rectify, erase, and restrict processing of your personal data
• The right to data portability
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time, where processing is based on consent
• The right to lodge a complaint with your local supervisory authority

Our lawful bases for processing are consent (marketing, ad measurement), contract (fulfilling your project inquiry and the contractor match), legitimate interests (security, fraud prevention, analytics, improving the AI service), and legal obligation (record-keeping required by law). To exercise your rights, email privacy@bedrhome.com.

9. Your choices

• Opt out of marketing — reply STOP to texts, click unsubscribe in emails, or email privacy@bedrhome.com.
• Request deletion of your information by emailing privacy@bedrhome.com. We will delete or anonymize your data, subject to legal retention requirements (for example, records of consent must be kept for compliance).
• Request correction of inaccurate information at the same email.
• Opt out of sale / sharing by emailing privacy@bedrhome.com or by enabling Global Privacy Control in your browser.
• Ask us not to share your data with a matched contractor — note that if you do, we cannot complete the matching service, since that introduction is the core of what BEDRHome does.

10. Children

BEDRHome is intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18, and the service is not designed or marketed to children. If you believe a child has submitted information, email privacy@bedrhome.com and we will delete it.

11. Cookies and tracking

We use cookies, pixels, and similar technologies to operate the site, measure ad performance, and improve the user experience. The main tracking technologies on BEDRHome are:

• Meta Pixel — measures ad performance and attributes conversions (sets _fbp, reads _fbc when present)
• Microsoft Clarity — session replay and heatmaps; skipped for visitors from EU countries based on IP-derived country code
• PostHog — product analytics, hosted in the EU region
• Vercel Analytics + Speed Insights — basic traffic and performance metrics
• First-party UTM cookie — stores your campaign attribution for 30 days so we can credit the right source

You can manage cookies through your browser settings, including blocking or deleting them, although some features may not work without them. We honor Global Privacy Control (GPC) signals as an opt-out of sale and sharing where required by law. We do not currently honor "Do Not Track" headers because there is no industry-standard interpretation of that signal.

12. Data retention

• Lead data (contact info, project details, consent records) — retained for up to 7 years after submission, to meet legal record-keeping and dispute-defense obligations.
• AI-generated previews and uploaded photos — retained for up to 24 months, unless you request earlier deletion.
• Session replay and analytics — retained for up to 12 months.
• Consent records (TrustedForm certificates, opt-in proofs) — retained for at least 5 years after the last contact, to evidence TCPA compliance.
• Records in active disputes or legal matters — retained until the matter is resolved, plus the applicable statute of limitations.

After the retention period, we delete, de-identify, or anonymize the data.

13. Data security

We maintain administrative, technical, and physical safeguards intended to protect your information against unauthorized access, disclosure, alteration, and destruction. These include encryption in transit (TLS 1.2+), encryption at rest for hosted databases, role-based access controls, multi-factor authentication for administrative accounts, vendor due diligence, and incident-response procedures. No system is perfectly secure, and we cannot guarantee that your information will never be subject to unauthorized access. If a breach affects your data, we will notify you and applicable regulators as required by law.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service, or the law. The "Effective date" at the top indicates the current version. If we make material changes, we will post the revised policy here and, where required, notify you by email. Your continued use of BEDRHome after the effective date of an updated policy constitutes acceptance of the changes.

15. Contact

Questions, rights requests, or complaints about this Privacy Policy:

Email: privacy@bedrhome.com

For California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Tennessee, Indiana, New Jersey, Delaware, New Hampshire, Minnesota, Maryland, Rhode Island and other state privacy requests: include the relevant state in the subject line.