Privacy Policy

Last updated: March 29, 2026

Hammer Sites ("Company," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website at hammersites.com ("Site"), use our services, or interact with us in any way. Please read this policy carefully. By using our Site or services, you consent to the practices described in this Privacy Policy.

1. Company Information and Affiliations

Hammer Sites is a U.S. based company. Hammer Sites is also the parent company of ToolboxID (toolboxid.com), an independent trust verification platform for home service professionals. Because these entities share common ownership, certain data may be shared between Hammer Sites and ToolboxID as described below. Each entity maintains its own data handling practices and ToolboxID has its own separate privacy policy governing data collected directly through its platform.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with us, we may collect the following types of information:

• Account and onboarding information. Your name, email address, phone number, business name, business address, service areas, and any other information you provide during onboarding or account setup.
• Payment information. Credit card numbers, billing addresses, and other financial information necessary to process payments. Payment processing is handled by third party payment processors and we do not store your full credit card number on our servers.
• Content and media. Photographs, logos, text, branding materials, and other content you provide for use on your website.
• Communications. Emails, messages, support requests, and any other communications you send to us.

2.2 Information Collected Automatically

When you visit our Site, we automatically collect certain information about your device and your interaction with our Site, including:

• Device and browser information. IP address, browser type and version, operating system, device type, screen resolution, and language preferences.
• Usage data. Pages viewed, time spent on pages, click patterns, referring URLs, and navigation paths through our Site.
• Location data. Approximate geographic location based on your IP address.

2.3 Information Collected Through Tracking Technologies

We use cookies, pixel tags, and similar tracking technologies to collect information about your activity on our Site. These technologies are described in further detail in the "Advertising and Tracking" section below.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our services.
• To design, develop, and host your website.
• To process payments and manage your account.
• To communicate with you about your account, services, and support requests.
• To send you marketing communications, promotional offers, and updates about our services (you may opt out at any time).
• To deliver and optimize advertising campaigns on third party platforms.
• To analyze usage patterns and improve the performance of our Site.
• To detect, prevent, and address fraud, security issues, and technical problems.
• To comply with legal obligations and enforce our Terms of Service.

4. Advertising and Tracking

We use third party advertising and analytics platforms to measure the effectiveness of our marketing campaigns and to deliver targeted advertising to potential customers. These platforms place tracking technologies (such as cookies and pixel tags) on our Site that collect information about your browsing behavior.

4.1 Meta (Facebook/Instagram) Pixel

We use the Meta Pixel (formerly Facebook Pixel) on our Site. This technology allows us to measure the effectiveness of our advertising on Facebook and Instagram, create custom audiences for targeted advertising, and track conversions (such as form submissions and purchases) that result from our ads. The Meta Pixel collects information including pages visited, actions taken on our Site, browser and device information, and IP address. This information is transmitted to Meta Platforms, Inc. and is subject to Meta's Data Policy. You can manage your Meta ad preferences at facebook.com/adpreferences.

4.2 Google Ads and Google Analytics

We use Google Ads conversion tracking and Google Analytics on our Site. These tools allow us to measure the effectiveness of our Google advertising campaigns, understand how visitors interact with our Site, and optimize our services. Google may collect information including pages visited, time on site, device information, IP address, and demographic data. This information is subject to Google's Privacy Policy. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on. You can manage your Google ad settings at adssettings.google.com.

4.3 Cookies

Cookies are small text files stored on your device when you visit our Site. We use both first party cookies (set by us) and third party cookies (set by our advertising and analytics partners). You can control cookie settings through your browser preferences. Please note that disabling cookies may affect the functionality of our Site.

5. How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• With ToolboxID. If you are enrolled in our service plan that includes ToolboxID verification, we may share your business name, contact information, and licensing details with ToolboxID for the purpose of processing your trust verification application. ToolboxID will handle this information in accordance with its own privacy policy.
• With service providers. We share information with third party vendors who help us operate our business, including payment processors, hosting providers, email service providers, CRM platforms, and analytics tools. These providers are contractually obligated to use your information only as necessary to provide services to us.
• With advertising platforms. As described in the "Advertising and Tracking" section, we share certain browsing and conversion data with Meta and Google for the purpose of advertising measurement and optimization.
• For legal compliance. We may disclose your information if required to do so by law, court order, or government regulation, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• In connection with a business transfer. If Hammer Sites is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction.

6. Data Collected on Client Websites

Websites we build for our clients may collect personal information from end users (such as homeowners requesting quotes). The collection and use of that information is governed by the respective client's own privacy policy. Hammer Sites acts as a service provider with respect to data collected through client websites and processes such data only as directed by the client and as necessary to provide our services.

If you are an end user who submitted information through a website built by Hammer Sites, please contact the business that owns that website directly regarding any privacy inquiries.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. We may also retain certain information after account closure as necessary to comply with legal obligations, resolve disputes, enforce our agreements, or for legitimate business purposes such as maintaining financial records.

8. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information, including:

• The right to access the personal information we hold about you.
• The right to request correction of inaccurate information.
• The right to request deletion of your personal information, subject to certain exceptions.
• The right to opt out of the sale of your personal information (we do not sell personal information).
• The right to opt out of targeted advertising.
• The right to non discrimination for exercising your privacy rights.

To exercise any of these rights, please contact us at hello@hammersites.com. We will respond to your request within the timeframe required by applicable law.

9.1 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sharing of your information for cross context behavioral advertising. To exercise these rights, contact us at the email address listed above.

10. Children's Privacy

Our Site and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.

11. Third Party Links

Our Site may contain links to third party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third party sites you visit.

12. Do Not Track Signals

Some browsers offer a "Do Not Track" feature that sends a signal to websites requesting that they not track the user. Our Site does not currently respond to Do Not Track signals. However, you can manage tracking preferences through your browser settings and through the opt out mechanisms described in the "Advertising and Tracking" section above.

13. International Users

Our Site and services are operated from the United States. If you are accessing our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our Site, you consent to the transfer of your information to the United States.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our Site with the "Last updated" date at the top. Your continued use of our Site or services after any changes constitutes your acceptance of the revised Privacy Policy.

15. Data Processing and Sub-Processors

When you use our platform, we process data on your behalf using third-party service providers ("sub-processors"). These sub-processors are contractually obligated to process data only as necessary for their designated function and to maintain appropriate security measures. Our current sub-processors include:

• Convex (Convex, Inc.) — Database hosting, real-time backend infrastructure, and file storage for all platform data.
• Stripe (Stripe, Inc.) — Payment processing, subscription management, and contractor payout facilitation via Stripe Connect. Stripe processes payment card data directly and is PCI-DSS compliant.
• Twilio (Twilio Inc.) — Phone number provisioning, call forwarding, voice services, and SMS messaging including marketing campaigns, review requests, and notifications.
• Resend (Resend Inc.) — Transactional email delivery for quotes, invoices, review requests, team invitations, lead notifications, and marketing campaigns.
• Vercel (Vercel Inc.) — Frontend application hosting and content delivery.
• OpenRouter / AI Providers — Processing limited data for AI-powered features such as domain name suggestions and AI receptionist voice services. Data sent to AI providers is limited to what is strictly necessary for the feature in question.

We will update this list when we add or change sub-processors and will notify active subscribers of material changes.

16. AI and Automated Processing

Our platform uses artificial intelligence and automated processing in the following ways:

• AI Receptionist:If enabled by the business subscriber, incoming phone calls may be answered by an AI-powered voice agent. These calls may be transcribed, and transcripts are stored in the subscriber's account. Call audio may be processed by third-party AI providers to generate responses and transcriptions.
• AI Domain Suggestions: Business information (name, services, location) may be sent to AI providers to generate domain name recommendations during onboarding.
• Speech-to-Text:Voice input within the dashboard uses your device's built-in browser speech recognition API. Audio is processed locally by your browser and is not transmitted to our servers.

We do not use your personal data or business data to train third-party AI models. Data sent to AI providers is used solely for the purpose of generating a response to the specific request and is subject to those providers' data handling policies.

17. SMS and Telecommunications Data

Our platform collects and processes telecommunications data when subscribers use our phone and SMS features. This includes:

• SMS message content (sent and received), sender and recipient phone numbers, timestamps, and delivery status.
• Call logs including caller/recipient phone numbers, call duration, call status, and optional recordings and transcripts.
• TCPA consent records including the timestamp of consent, the IP address of the consenting party, the URL of the consent page, and the exact disclosure text displayed at the time of consent.

SMS and call data is retained for as long as the subscriber's account is active. TCPA consent records are retained for a minimum of five (5) years after the last communication with the consenting party, as they serve as legal compliance records.

Our platform automatically processes SMS opt-out keywords (STOP, UNSUBSCRIBE, QUIT, CANCEL) and opt-in keywords (START, SUBSCRIBE, YES) to update recipient preferences. Opt-out status is maintained per-lead and respected across all SMS features including campaigns, review requests, and individual messages.

18. Data Retention Schedule

We retain different categories of data for different periods depending on their purpose:

• Active account data (leads, quotes, invoices, jobs, attachments, activity logs): Retained for the lifetime of the active account.
• Post-termination data: Retained for thirty (30) days after account termination to allow for data export, then deleted.
• Financial transaction records (payment records, billing history): Retained for seven (7) years in accordance with tax and financial record-keeping requirements.
• TCPA consent records: Retained for a minimum of five (5) years after the last communication.
• Analytics events: Raw analytics events are aggregated daily and may be purged after ninety (90) days. Aggregate daily analytics are retained for the lifetime of the account.
• File attachments (stored in Convex storage): Deleted when the associated record is deleted or thirty (30) days after account termination.
• Rate limiting records: Automatically purged on a rolling basis (within minutes to hours).

19. Data Export Rights

You have the right to export your data at any time while your account is active. Our platform provides built-in CSV export functionality for leads and customer records. You may also request a full data export by contacting us at hello@hammersites.com.

Upon account termination, you have thirty (30) days to export your data. After this period, your data will be deleted in accordance with our data retention schedule above.

20. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Hammer Sites
Email: hello@hammersites.com