Privacy Policy

The H&F Coop (the “Platform”) is an internal business operations platform operated by H&F Exteriors (“H&F,” “we,” “us”) at hfext.com. It is used by H&F employees and by outside partners and vendors we specifically invite. This policy explains what information we collect, how we use it, and the choices you have. Access to the Platform is by invitation and authorization only.

Information we collect

• Account information from Google. You sign in with Google. Through Google’s OAuth sign-in we receive your name, email address, and profile picture. We never receive or store your Google password.
• Business and operational data.The records you and H&F create or view in the Platform in the course of business (for example, project, lead, scheduling, and reporting data), limited to the modules your account has been granted.
• Technical and usage data. Standard log information such as IP address, browser and device type, and pages accessed, used to operate, secure, and troubleshoot the Platform.

How we use information

• To authenticate you and confirm which parts of the Platform you may access.
• To provide, maintain, secure, and improve the Platform and its features.
• To communicate with you about your access and about the service.
• To detect, prevent, and address security incidents, fraud, and abuse.
• To comply with legal obligations.

Google user data

H&F’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use the account information we receive from Google solely to sign you in and identify your account within the Platform. We do not use it for advertising, we do not sell it, and we do not share it with third parties except as described in “How we share information” below.

How we share information

We do not sell personal information. We share information only:

• With service providers that operate the Platform on our behalf — including Supabase (authentication and database), Vercel (hosting), and Resend (email delivery) — under agreements that limit their use of the information to providing those services.
• With invited external partners and vendors, who can see only the specific modules and records H&F grants their account — never the full Platform.
• When required by law, or to protect the rights, safety, and property of H&F and others.

Data security

We protect information with encryption in transit, role- and permission-based access controls, and database-level row security so that each account can reach only the data it is authorized to see. No method of transmission or storage is completely secure, but we work to protect your information and review our safeguards regularly.

Data retention

We retain information for as long as your account is active and as needed to operate the Platform, meet our legal and business obligations, resolve disputes, and enforce our agreements. When access is removed, we deactivate the account and remove its Platform permissions.

Your choices

You may request access to, correction of, or deletion of the personal information associated with your account by contacting us below. You can also revoke the Platform’s access to your Google account at any time from your Google Account permissions page.

Children’s privacy

The Platform is a business tool intended for authorized adults and is not directed to children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be communicated through the Platform.

Contact us

H&F Exteriors
Email: privacy@hfexteriors.com
Phone: (314) 450-8384