Publication draft — business and legal review required
Privacy Policy
This page records the website data flows verified in the repository. It is not an approved or effective privacy notice until Rob Plus LLC and qualified counsel confirm the marked items.
01
Status, identity and effective date
The public website identifies the business as Rob Plus LLC, doing business as Rob Carpentry, serving Ocean County, New Jersey. Its published contact methods are info@robcarpentry.com and (732) 604-6230. A mailing address, privacy officer, and approved effective date must still be confirmed before publication.
02
Information submitted through the website
The existing estimate form sends the values a visitor enters: name, email address, phone number, selected project type and project description. Its hidden honeypot field is used to reduce automated submissions and is not sent as an inquiry value.
The website assistant accepts the messages a visitor chooses to send. When a visitor selects the assistant’s follow-up flow, it asks for name, email address, phone number, preferred contact method, project type, town or ZIP/service-area detail, project description, and permission to contact the visitor. It does not ask for a full address, financial information, account credentials, government ID, or children’s information.
- Respond to a request for an estimate or project conversation
- Confirm whether a project may fit the stated service area
- Understand the work a visitor is considering
- Send the visitor’s follow-up details to the configured business recipient after the visitor gives contact permission
03
Services that process website information
The checked implementation uses Supabase for the existing estimate-form submission. It deploys the website and assistant endpoints through Vercel. Assistant messages are sent server-side to OpenRouter using the configured GPT-5.6 Luna model. The follow-up endpoint is written to send a plain-text email through Resend only when a Resend account, verified sender and exact recipient are configured.
The Ocean County map is not loaded until the visitor selects the map control. At that point the browser connects directly to OpenStreetMap. The client code also writes non-content interaction labels, such as page views and phone-link clicks, to an in-browser data layer. The reviewed code does not load a third-party analytics tag by default.
- Supabase — existing contact-form data
- Vercel — hosting and server-side assistant endpoints
- OpenRouter — assistant messages
- Resend — chatbot lead email when configured
- OpenStreetMap — optional map after visitor action
04
Cookies, logs and security
No first-party cookie-setting code or cookie-consent tool was found in the reviewed client source. Hosting, form, AI and email providers may process connection, delivery, abuse-prevention or service logs under their own configurations and policies; the repository does not document the specific fields, locations, retention periods or security controls for those providers.
The assistant endpoint applies request-size validation, basic per-instance rate limits and a honeypot on the lead flow. These implementation measures are not a complete security or compliance statement. Business confirmation is required for any security claim in a final notice.
05
Retention, sharing, sales and international transfers
The repository does not contain an approved retention schedule, data-sharing list, sale/share determination, CRM configuration, advertising-platform configuration, or international-transfer policy. This page therefore does not make a claim about retention, sale, targeted advertising, or cross-border processing. Rob Plus LLC must confirm those practices with its providers and counsel before this notice becomes effective.
06
Privacy choices, children and legal rights
Visitors can currently contact Rob Carpentry at info@robcarpentry.com or (732) 604-6230 about a website inquiry. The business must establish and publish a verified process for access, correction, deletion, opt-out, identity verification, authorized-agent, children’s-data and jurisdiction-specific requests before making any legal-rights promise. The repository does not establish whether the site is directed to children or which privacy laws apply.
07
Required approval checklist
Before publication, confirm the mailing address; effective date; privacy-request contact and verification process; all providers and subprocessors; exact retention periods; security practices; cookie and advertising technologies; sale/share and communications-consent practices; children’s-data position; international data-transfer position; and the exact email recipient and sender used for chatbot leads. A qualified attorney should review the completed notice.
