Twohands Privacy Policy

1 Who we are and what this policy covers

Use Two Hands, Inc., doing business as Twohands (we, us or our), operates usetwohands.com and its related discovery, profile, project-posting and messaging features. This policy explains how we handle personal information when you visit the website, create an account, publish information, communicate with other Users or contact us.

The launch Platform connects Homeowners with independent Pros and enables communications. It does not process project payments or provide project agreements. This policy covers Twohands' practices. It does not govern a Pro's independent business, an outside payment provider, another User's separate handling of information or a third-party website.

Contact our privacy team at support@usetwohands.com or Use Two Hands, Inc., 169 Madison Ave Ste 57572, New York, NY 10016.

2 Information you provide

Account and contact information includes your name, email address, authentication information and any telephone number or location you provide. If you register through a third-party sign-in service, we receive the account information you authorize that service to disclose, such as your name, email address and account identifier. We do not receive your password for that outside service.

Pro profile information includes the business name, business contact details, trades, service areas, biography, experience, portfolio images, website links, and license or insurance details you submit. If credential-document uploads are enabled, we receive those documents and the information they contain. Avoid uploading unnecessary identification numbers or other sensitive information.

Project information includes the work description, location information, timing, images and other details submitted in a project post or inquiry. Communications information includes messages, attachments, reviews and correspondence with other Users or with Twohands support. Reports may include information about suspected misconduct and records supplied to substantiate a report.

Twohands does not request a project payment card or bank-account information for this launch offering. Do not send payment credentials, Social Security numbers, identification documents, access codes or other unnecessary sensitive information in project posts or messages. If you choose to disclose information to another User, that User receives it according to the channel you use.

3 Information collected through technology and other sources

When you access the Platform, our systems and infrastructure providers process technical information needed to deliver and secure it, such as IP address, browser and device information, timestamps, access logs, error records and authentication events. An IP address may reveal an approximate location; it is not the same as permission to collect precise device location.

We use only technologies needed to run the Platform. Our sign-in service stores a session token in your browser's local storage so you stay signed in until you sign out. We also use browser local and session storage to keep unsent drafts (for example a project post you are writing) and your last-used account mode; these stay on your device and are cleared when you sign out, close the tab or clear your browser data. We do not use advertising tags, third-party analytics cookies, session replay or cross-site tracking. Our hosting provider records standard technical logs (such as IP address, browser type, pages requested and timestamps) for security, reliability and aggregate traffic counts. We do not collect precise device location; location comes only from the city, ZIP code or service area you enter.

We can receive information about you from another User, including a message, review or report, and from a sign-in provider you choose to use.

4 How we use information

We use information to establish and manage accounts; display content to its intended audience; provide discovery, search and messaging; send account and service communications; respond to support and privacy requests; investigate reports; address fraud and security problems; maintain and improve Platform performance; and meet legal obligations or establish, exercise or defend legal claims.

Authorized personnel and service providers may access nonpublic information, including messages and attachments, when reasonably needed for these purposes. We do not describe Platform messages as end-to-end encrypted or inaccessible to Twohands. Access and any automated processing must be limited to the purposes and practices disclosed here.

We do not use automated tools or artificial-intelligence services to scan, analyze or moderate message content, and we do not use your messages or attachments to train models. Messages are stored so the participants can read them. Authorized Twohands staff may review a conversation only when it is reported, to investigate a safety, fraud or policy concern, or when required by law. Blocking, ending a conversation or account deletion stops new messages but does not recall messages already delivered.

If we send optional marketing email, you can unsubscribe through the email or contact support@usetwohands.com. Necessary account, security and service notices may continue while relevant. Account creation does not provide blanket consent to automated promotional calls or texts. Any such program requires its own applicable disclosures and consent process before use.

5 What other people can see

Public Pro profiles and public reviews can be viewed by their designated audience, copied or shared by viewers, and indexed by search engines if publicly accessible. Do not place information in a public field that you do not intend that audience to receive. Information you send in a message is available to its recipients, including any personnel they lawfully authorize to access their business account. Recipients can retain copies outside Twohands.

Project posts are shown to Pros with a Twohands account. A post shows the service, description, timing, budget range, photos you add and the general location you enter (such as a city or ZIP code); it does not show your name, email address or telephone number. Do not include a street address or contact details in a post. When you message a Pro, or a Pro responds to your post and you reply, that Pro sees your first name and the messages and attachments you send in that conversation. Twohands does not give your email address or telephone number to a Pro; they are disclosed only if you choose to share them in a message. Pro profiles, including business name, services, service area, biography, portfolio images and any license or insurance details the Pro enters, are public once approved. Client references a Pro requests are shown publicly by the reference's first name and project type, without the client's email address. The Platform does not currently accept credential-document uploads; if that changes, documents would be visible only to the Pro and authorized Twohands staff.

Deleting a post or message does not recall information already received, downloaded or copied. Public content may remain in search-engine caches outside our control. The Platform's visibility controls apply to our display and access systems; they do not prevent every recipient from misusing information. Misuse may violate our policies and can be reported through the Report option on a profile, project or conversation, or by email to support@usetwohands.com.

6 When we disclose information

We disclose information to other Users as needed to carry out the communications or publishing actions you take and according to the visibility described above. We disclose information to service providers that support hosting, databases, authentication, message delivery, security, support and any other verified functions identified in this policy. These providers receive access for their services and applicable legal obligations under our arrangements with them; their independent collection through outside sites or sign-in services is governed by their own policies.

We use service providers that process information on our behalf to operate the Platform: Lovable (website hosting, application backend, database, file storage and sign-in, using infrastructure from Supabase and Cloudflare), our email delivery provider for account and notification emails sent from usetwohands.com, and Google and Apple when you choose to sign in with them. Google and Apple receive information under their own privacy policies when you use their sign-in. None of these providers is authorized by us to use your information for its own advertising.

We may disclose information when reasonably necessary to comply with applicable law, valid legal process or a lawful request; protect rights, property or safety; investigate unlawful conduct; or establish, exercise or defend legal claims. We evaluate requests under applicable law and do not treat any informal demand as automatically requiring disclosure. We may disclose information to professional advisers under appropriate confidentiality obligations and in connection with a proposed or completed merger, financing, reorganization or transfer of the business, subject to applicable law and safeguards appropriate to the transaction. We may also disclose information at your direction or with legally sufficient permission.

We do not sell personal information or disclose it for cross-context behavioral advertising or targeted advertising. We do not sell homeowner contact details as leads.

7 Cookies and choices

Essential cookies or similar storage may be necessary for authentication, security and requested functionality. Browser settings can block or clear storage, but doing so may prevent some features from working. Optional technologies and their controls are described in section 3 and any linked cookie disclosure.

Because we do not use optional cookies, advertising or analytics tags, there are no optional technologies to enable or decline and no cookie settings page. The storage described above is necessary for sign-in and the features you use. You can clear it through your browser settings, which will sign you out and remove unsent drafts. If we add optional technologies in the future, we will update this policy and provide any controls applicable law requires, including honoring Global Privacy Control signals where required.

8 Retention and account closure

We retain personal information for the period reasonably needed for the purposes described in this policy, considering account activity, the type of information, security needs, legal obligations and the establishment or defense of claims. We do not retain information indefinitely solely because storage is available.

We keep account, profile, project-post and message information while your account is active. You can close a project post at any time; closed posts remain visible to you and to Pros you already messaged about them. When you delete your account, we delete your profile, Pro listing, service areas, portfolio images, license and insurance details and uploaded files, close your open project posts and remove your public client references. Messages and attachments you already sent remain available to the people who received them, shown under a generic label ("Homeowner") or the Pro's business display name, and those conversations are closed to new messages. Records of your acceptance of these policies (document, version, time and account identifier) are kept with restricted staff access for six years after account deletion as evidence of agreement. Safety reports and related records are kept as long as reasonably necessary to investigate, protect Users and meet legal obligations. Security logs and backups are kept for limited periods by our hosting providers and are overwritten on their regular rotation.

You can request account closure or deletion at Account settings (Delete account) or by email to support@usetwohands.com. We verify requests using information reasonably necessary for the purpose. Closure and deletion have different effects: some records may remain where permitted or required for legal, security or operational reasons described in the retention schedule, and backup copies may remain until their ordinary deletion cycle. Closing an account does not cancel a homeowner-Pro agreement or erase records held independently by another User.

9 Your privacy rights

Depending on applicable law, you may have rights to access or obtain a copy of your personal information, correct inaccuracies, request deletion, withdraw consent where processing relies on consent, or opt out of certain processing. Some laws also provide rights concerning authorized agents and appeals. We will honor rights that apply to you and will not retaliate for exercising them.

Submit a request at support@usetwohands.com. Include enough information to identify the account and request, but do not send unnecessary sensitive documents. We may need proportionate verification or evidence of an agent's authority. We respond within legally applicable periods and explain any lawful denial or limitation, including available appeal rights where required. For a privacy appeal where applicable, contact support@usetwohands.com with Privacy Appeal in the subject line. You may also contact the relevant regulator.

The launch service is intended for New York projects. That project limitation does not remove privacy rights that may apply to a visitor or User based on their residence or the processing involved.

10 Security and information location

We use administrative, technical and physical safeguards reasonably designed to protect personal information, taking account of the nature of the information and applicable law. No service can promise absolute security. This statement does not disclaim our legal obligations to safeguard information or provide legally required breach notices. Protect your account and report suspected compromise to support@usetwohands.com.

Our database and file storage are hosted in the United States. Our hosting and email providers may process information, including through content delivery and support operations, in other countries where they or their subprocessors operate, under their own contractual and security safeguards. The Platform is intended for users in the United States.

11 Children

The Platform is intended for adults aged 18 or older. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has supplied information, contact support@usetwohands.com so we can review and take appropriate action, including deletion where required. An age restriction does not override legal duties when we learn of a child's information.

12 Policy changes

We will update the effective date when this policy changes and provide additional notice of material changes where required. If a new use or disclosure requires consent under applicable law, we will obtain it before that processing. An updated posting does not authorize retroactive use of previously collected information in a manner inconsistent with applicable law or required consent.