Privacy Policy

Who we are

Earthcore Group LLC is a licensed design-build and general contracting firm headquartered in Atlanta, Georgia. ECG+ is the digital workspace where homeowners (clients), Earthcore staff, and contracted subcontractors coordinate projects.

Information we collect

We collect the following categories of information directly from you:

• Account details: name, email address, and (for staff and subcontractors) role tier.
• Project content: the things you share inside the app — property addresses you type in, photos you upload, conversations you have with Earthcore staff or AI assistants, design briefs, estimates, and invoices.
• Payment context:when you pay a deposit or invoice through ECG+, the transaction is processed by Stripe. Stripe collects your payment-method details directly; ECG+ stores only the resulting payment status, amount, and Stripe reference IDs — never card numbers.
• Sign-in credentials: you create an account with an email address and a password. Your password is hashed by our authentication provider and is never stored or visible to us in plain text.
• App usage signals:timestamps for when you last viewed a project or message thread, used to drive in-app attention indicators (badge dots, unseen pills). We do not collect device fingerprinting or precise location. Google Analytics links your visit across earthcoregroup.com and earthcore.app so that one person who visits both is counted once; how that works, and how to turn it off, is under “Measurement and cookies” below.

How we use information

We use the information we collect to:

• operate the App and the project workflows that run inside it;
• route conversations and assignments to the right Earthcore staff or subcontractor;
• generate AI responses inside the in-app chat surfaces (see “AI features” below);
• process payments you authorize and reconcile invoices;
• send transactional email related to your projects (estimate ready, payment received, assignment update);
• comply with legal obligations including tax record-keeping and the prime-contract documentation required by Georgia law for licensed general contractors.

We do not sell your personal information, and we do not use your project content for advertising.

AI features

ECG+ uses Anthropic’s Claude API to power the in-app chat assistants (the homeowner Dream chat, the operator copilot, the admin financial chat, and the subcontractor site assistant). When you send a message in one of these chats, the message text and any attached photos or documents are transmitted to Anthropic for processing under their terms. Anthropic does not train models on data sent through the API. Chat history is stored in our own database so you can return to it later.

You can avoid sending content to the AI by simply not using the AI chat surfaces — the rest of the app (project pages, billing, file dossier) does not route content through Anthropic.

Third-party processors

We use the following processors to run the App. Each processes data on our behalf, subject to their own data-protection commitments:

• Supabase— database, authentication, file storage. Hosted in US-East.
• Vercel— application hosting and content delivery.
• Anthropic— AI chat features (Claude API).
• Stripe— payment processing for deposits and invoices.
• Google— calendar scheduling and Drive file access for Earthcore staff. Earthcore staff connect their own Google account so booked consultations land on the company calendar and project files shared from Google Drive appear in your project. This integration is staff-side; homeowners and subcontractors do not connect a Google account.
• Resend— transactional email delivery (e.g., account confirmations, payment receipts).
• Google Analytics— usage measurement, described under “Measurement and cookies” below, and switched off entirely for anyone who opts out.

We don’t share your information with third parties for their own marketing purposes.

Measurement and cookies

When you send us an enquiry through earthcoregroup.com, we also record how you reached us — the campaign or link that brought you, the page you first landed on, and the site that referred you. That is taken once, on your first visit, and it isn’t changed afterwards. If measurement is on in your browser, we also record the identifier Google Analytics uses to recognise that browser, so an enquiry can be matched to the visit that produced it. If measurement is off, there is no identifier to send and none is stored. We keep that record beside your enquiry rather than inside it, so you can ask us to delete the identifier and keep the enquiry itself.

We use Google Analytics in ECG+, which uses cookies, so that we can tell which parts of the app help people and which adverts actually brought someone here rather than guessing. Traffic from Earthcore staff and subcontractors is measured in a separate property from client and visitor traffic, so the two never mix; the link between the website and the app described below applies to client and visitor traffic only.

Earthcore Group owns both this app and earthcoregroup.com, and we link the two so that one person who visits both is counted once instead of twice. We also let Google recognise returning visitors across devices, which is how we can tell whether an advert led to a booking — and how we may show you our own adverts again later. We don’t sell your information, and nothing you type into a project or a chat is used for advertising.

In Google’s terms these are the Google Analytics advertising features: Google signals, which recognises visitors who are signed in to Google across their devices; remarketing audiences, which is how we may show you our own adverts again; and reports about the age, gender and interests of visitors as a group. They apply to client and visitor traffic only, never to staff — and never inside the ECG+ app on iPhone or iPad, which measures itself and never advertises. You can turn all of it off for yourself with the switch below or with the Global Privacy Control signal, and you can turn off personalised advertising across everything Google does in Google’s Ads Settings, or install Google’s opt-out add-on for Google Analytics.

We don’t interrupt you with a cookie pop-up. This is the notice instead, and the choice is here rather than in a box over the page. If your browser sends a Do Not Sell or Share signal (Global Privacy Control), we treat that as a no without you having to do anything. When you are signed in, your choice is kept on your account and follows you to every device.

And “no” means off, not quieter: on a browser that has opted out, or that sends that signal, Google Analytics is switched off entirely— not merely stripped of cookies.

Data retention

We keep your account and project content for as long as your account is active. When you delete your account (see “Your choices” below), we anonymize your profile and remove your authentication record.

Earthcore is the prime contractor on every project booked through ECG+ and is required by Georgia construction law to retain project records — contracts, payment history, change orders, project communications — for the statutory record-keeping period even after an account is deleted. Those records are accessible only to Earthcore staff for legal and tax purposes; the deleted user’s identifying information is removed from them where possible.

Your choices

You can delete your accountat any time from the You tab inside the app — scroll to the bottom and tap Delete account. For homeowners and subcontractors, deletion is immediate and anonymizes your profile (name, email, phone, and avatar are wiped). For Earthcore staff, an account removal request is sent to an administrator for processing (so a project can’t be left without an owner mid-build).

You can update your profile information from the same You tab. You can opt out of email notifications by contacting us at the address below; in-app notifications cannot be disabled without losing access to project updates.

Children’s privacy

ECG+ is intended for adults age 18 and over. We do not knowingly collect information from children under 13. If we learn that we have collected information from a child under 13, we will delete it.

Security

We use industry-standard practices to protect your information: HTTPS for all network traffic, row-level security in our database to ensure you can only access your own data, and signed URLs for file storage. No system is perfectly secure, but we work to minimize the impact of any incident.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or an in-app message before the changes take effect. The most current version is always available at this URL.

Contact

Earthcore Group LLC · Atlanta, GA · help@earthcore.app