Legal
Privacy Policy
Effective Date: October 3, 2026 · Version: 2026-10-03-privacy-v1
This version replaces the one effective June 8, 2025.
1. Overview
QuickenPlans, Inc. ("QuickenPlans," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and secure personal information when you visit www.quickenplans.com or any site or app that links to this Policy (collectively, the "Site"), purchase our design and permitting services, or otherwise interact with us (together, the "Services").
2. Scope of This Policy
This Policy applies to personal information we handle in the course of providing the Services. It does not apply to aggregated, de-identified, or anonymized data that cannot reasonably be linked to you. A hashed email address, an advertising ID, or a cookie ID is not de-identified data, and this Policy covers it.
3. Information We Collect and Why
Below is a notice at collection required under the CCPA/CPRA. We retain each category for as long as necessary to fulfill the purposes listed, satisfy legal obligations, resolve disputes, and enforce agreements, after which we securely delete or de-identify the data.
| Category of Personal Information | Examples | Purpose of Collection | Disclosed to Service Providers* | Sold or Shared for Cross-Context Behavioral Advertising |
|---|---|---|---|---|
| Identifiers | Name, postal address, email address, phone number | Account setup, quotes, project communications, marketing with consent, advertising measurement | CRM, email, hosting, payment processors | Yes. Hashed email address, Meta click ID, and Meta cookie IDs go to Meta (Section 7). |
| Commercial Information | Records of services purchased, price, service history | Contract performance, accounting, customer support, advertising measurement | Payment processors, accounting software | Yes. Meta learns that an inquiry reached the first proposal stage (Section 7.2). |
| Internet/Device Information | IP address, device ID, browser type, referral URL, pages viewed, time spent, interactions | Site security, analytics, improving UX, marketing insights, advertising measurement | Analytics providers (e.g., Google Analytics), content delivery networks | Yes. Page views, IP address, browser and device details, and the fact that you submitted an inquiry go to Meta (Section 7.1). |
| Geolocation (coarse) | Approximate location derived from IP | Localized service offerings, fraud prevention | Same as above | Yes, same as above (the IP address Meta receives). |
| Professional Information | Company name, title | B2B communications, tailored proposals | CRM, email platforms | No |
| Sensitive Personal Information** | None intentionally collected | N/A | N/A | N/A |
*"Service Providers" are third-party companies that process data on our behalf under written contracts that restrict their use of the data to the specific services we request.
We mark "Yes" wherever information goes to Meta, because California privacy law may treat that as a "sale" or "sharing."
**We do not intentionally collect Social Security numbers, driver's license numbers, precise geolocation, genetic data, or other data considered "Sensitive Personal Information" under the CPRA. Any such information provided incidentally is handled as Sensitive PI and limited to the allowable operational purposes.
4. How We Use Personal Information
- Provide, operate, and contract for the Services.
- Create and manage your account, process orders, and send transactional messages.
- Respond to inquiries, schedule consultations, and deliver customer support.
- Improve the Site and Services through analytics and research.
- Measure and improve our advertising, including by sending information to Meta (Section 7).
- Detect, investigate, and prevent fraud or security incidents.
- Comply with legal obligations and enforce our agreements.
- Send marketing communications with your consent or as otherwise permitted by law. You can opt out at any time.
5. No Sale or Sharing of Telephone Numbers
We do not sell, rent, or share your phone numbers with third parties for their own marketing. We may store phone numbers in our CRM, SMS, or telephony tools solely to communicate with you or fulfill Services.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
6. When We Disclose Personal Information
We disclose personal information:
- To vetted service providers bound by confidentiality and data-processing agreements that meet CCPA/CPRA “service provider” requirements.
- To professional advisers (lawyers, accountants) bound by professional duties.
- To authorities or third parties when required by law, subpoena, or court order, or to protect rights, property, or safety.
- In connection with a business transaction (merger, acquisition) where the recipient assumes confidentiality obligations.
- To Meta Platforms, Inc., so it can measure our ads and help deliver them, as described in Section 7.
We share personal information with Meta so it can measure our ads and help deliver them (Section 7). California privacy law may treat this as a "sale" or "sharing" of personal information, so we treat it that way. You can opt out of this Meta sharing at any time (Section 7.3). That choice does not cover other tools on this Site (Section 7).
7. Cookies, Pixels, and Advertising
We, our service providers, and advertising partners such as Meta use cookies, pixels, and similar tools to:
- Recognize repeat visitors and keep you logged in.
- Measure Site traffic and performance.
- Understand campaign effectiveness.
- Measure and improve our advertising.
- Remember your preferences.
You can change your browser settings to block or delete cookies. The Site's functionality may be limited if cookies are disabled.
Meta and other third parties whose tools run on this Site may collect information about your online activities over time and across different websites. We do not respond to "Do Not Track" browser signals, but we do honor Global Privacy Control for Meta (Section 7.3). Our Meta choices apply to Meta only. They do not control the other analytics, advertising, and website-performance tools on this Site, such as Google Analytics.
7.1 Meta Pixel on This Site
This Site uses the Meta Pixel, a tool from Meta Platforms, Inc. (the company behind Facebook and Instagram). When you visit a page, the Pixel sends Meta information about the visit, such as the page you viewed, your IP address, your browser and device, and IDs from Meta cookies. Meta may receive this whether or not you have a Facebook or Instagram account. If you have one, Meta may connect the information to it.
When you submit an inquiry through our form, the Pixel also records a "Lead" event with an event ID. Our Site does not send what you typed into the form with that event. We use these events to understand how people find us and request quotes, and to measure and improve our Meta ads. Meta uses information from the Pixel to provide measurement services and to target and deliver ads. Its business terms and privacy policy cover that use. You can turn the Pixel off (Section 7.3).
7.2 What We Send Meta When We Draft a Proposal
When we draft the first proposal for an inquiry, our CRM sends Meta one "qualified lead" event so Meta can measure and improve our ads. Our CRM is Planlyx, the software that runs our inquiry form and manages our inquiries. It processes inquiry information on our behalf. It sends the event through Meta's Conversions API, which lets a business send information to Meta from its own systems instead of from your browser. The only information about you in that event is:
- Your email address, turned into a one-way code (a SHA-256 “hash”) before it leaves our systems. We first remove extra spaces and make it lower case.
- The Meta click ID (a code Meta adds to the link when you click one of its ads), if you reached our Site from a Meta ad.
- The time we drafted the first proposal.
- An opaque event ID (a code that does not contain your name or contact details).
The event does not contain your name, phone number, street address, project details, or the contents or price of any proposal. It also carries technical labels Meta needs to process it, such as the event name. It tells Meta that the person with that email address became a "qualified lead" for us, meaning we drafted a proposal.
A hashed email address is not anonymous. It is still personal information, and Meta uses it to try to match the event to a Meta account.
Under Meta's current business terms, Meta may use the event to measure our ads and help deliver them. Meta may also use it to make ads more relevant, to personalize the content and ads people see on and off Meta products, and for safety, security, and research.
We send this event only for inquiries submitted after we turn it on. We do not send a qualified lead event for earlier inquiries. To stop this, see Section 7.3.
7.3 Your Choices for Meta Advertising
Go to Your Privacy Choices to opt out of Meta advertising sharing at any time, before or after you send an inquiry. Meta advertising sharing means the Meta Pixel (Section 7.1) and the qualified lead event (Section 7.2). These choices are available to everyone, wherever you live. They apply to inquiries sent through the form on this Site.
- Your choice is remembered in your browser. If you opt out, the Meta Pixel stops loading on your later visits from that browser, so it no longer sends Meta page views or “Lead” events.
- If your browser sends a Global Privacy Control (GPC) signal, we honor it as an opt-out automatically. It applies to the browser or device that sends it and does not carry over to your other devices. We do not store it, so if you turn GPC off, the Meta Pixel can load again unless you also opted out on the choices page. The choices page shows when GPC is active.
- If you have already opted out, or your browser sends GPC, when you send an inquiry, we treat that inquiry as withdrawn and do not send its qualified lead event to Meta.
- If you opt out from the same browser you used to send an inquiry, we withdraw your permission for that inquiry and do not send its qualified lead event to Meta. This works only if that browser still remembers the inquiry (Section 7.4). If the request cannot go through, for example because you are offline, your browser tries again on later visits. If you are not sure it worked, email us.
- If you used a different device or cleared your browser data, email us and we will withdraw permission by hand.
- If we have already sent an event to Meta, we have no way to recall it. You can contact Meta about information it holds using the details in its privacy policy (linked in Section 7.1).
- Turning Meta advertising sharing back on affects future activity only.
To withdraw an earlier inquiry by email, write to support@quickenplans.com and include the email address you used for the inquiry. If you sent an inquiry some other way, email us as well.
To turn on GPC, see globalprivacycontrol.org. You can also opt out of interest-based advertising from many companies, including Meta, at optout.aboutads.info.
If you have a Facebook or Instagram account, Meta has its own setting, Activity from other businesses, that controls how Meta uses information businesses send it. Meta says that, whatever you choose, businesses may still send it activity, and it may anonymize that activity or use it to improve its products. That setting does not stop us from sending information to Meta. To stop that, opt out on Your Privacy Choices.
7.4 What Your Browser Stores for These Choices
To remember your choice, we set a cookie named qp_meta_optout. It lasts up to one year from the day you choose, and after that you would need to opt out again. So we can apply an opt-out to an inquiry you already sent, your browser also keeps the IDs of recent inquiries sent from it in local storage. Those IDs contain no name, contact details, or project information.
Opting out does not delete Meta cookies already in your browser. You can remove them in your browser settings. If you clear your browser data, or use a private window or a browser that blocks cookies or local storage, your choice may not be remembered and we cannot link your browser to earlier inquiries. In that case, email us to withdraw earlier inquiries (Section 7.3).
8. Your Privacy Rights
If you are a California resident, you have the right to:
- Know what personal information we have collected about you.
- Access and receive a copy of that information.
- Delete personal information (with exceptions).
- Correct inaccurate personal information.
- Opt Out of the sale or sharing of personal information with Meta (Section 7.3). That choice does not cover other tools on this Site (Section 7).
- Limit Use of sensitive personal information (not applicable as we do not use it for additional purposes).
We do not discriminate if you exercise your rights.
9. How to Exercise Your Rights
To opt out of Meta advertising sharing, go to Your Privacy Choices (Section 7.3). If you used a different device or cleared your browser data, email us at support@quickenplans.com with the email address you used for the inquiry, and we will withdraw permission for that inquiry by hand. We act on opt-out requests as soon as we can, and we do not ask you to create an account or verify your identity to opt out.
For any other request, email us at support@quickenplans.com or write to the mailing address in Section 15. We will verify your identity with reasonable information (e.g., existing account details) and respond within the timeframe required by law (generally 45 days). You may designate an authorized agent to submit a request on your behalf with written permission.
10. Data Security
We employ administrative, technical, and physical safeguards designed to protect personal information against destruction, loss, alteration, unauthorized disclosure, or access. No system is perfectly secure, and we cannot guarantee absolute security.
11. Data Retention
We keep personal information for the shortest time practical to meet the purposes stated above, comply with legal obligations, resolve disputes, or enforce agreements. When we no longer need personal information, we securely delete or de-identify it.
12. International Data Transfers
Our servers are located in the United States. If you access the Services from outside the US, you consent to transferring your information to the US, which may have different data protection laws than your jurisdiction.
13. Children
The Services are not directed to children under 13. We do not knowingly collect personal information from children. If we learn we have done so, we will delete it.
14. Changes to This Policy
We may update this Policy from time to time. We will post the revised Policy with a new "Effective Date." Material changes will be announced by reasonable notice (e.g., a banner or email). Your continued use of the Services after the update constitutes acceptance of the revised Policy.
15. Contact Us
Questions about this Policy or our privacy practices? Email support@quickenplans.com or write to:
QuickenPlans, Inc.
Attn: Privacy Compliance
51 E Campbell Ave, Ste. 100-I
Campbell, CA 95008
United States