This Privacy Policy describes how castructuralengineer.com ("the Site," "we," or "us") collects, uses, and handles your information when you use our directory service.
1. What We Collect
We collect the following categories of information:
- Account information: Name, email address, and PE license number when you create an account or claim a listing.
- Profile information: Phone number, website URL, and professional bio (optional, added by engineers to their listing).
- Payment information: Billing is processed by Stripe. We do not store card numbers or full payment details locally.
- Contact form submissions: Name, email, phone, project type, zip code, timeline, and message submitted by seekers through a listing's contact form.
- Review data: Reviews submitted by clients at an engineer's request, including reviewer name, rating, and written feedback.
- Usage data: IP addresses, pages visited, and referral sources collected via Vercel Analytics and Microsoft Clarity.
- Public license data: Engineer profile data (name, license number, city, license status, expiration date) sourced from the BPELSG public database.
2. How We Use Your Information
- Display engineer profiles on the directory
- Route contact form submissions to the relevant engineer
- Process subscription billing and send receipts
- Verify PE license claims and moderate reviews
- Send transactional emails (billing, claim confirmation, review requests)
- Detect and prevent fraud and abuse
- Analyze aggregate site usage to improve the product
We do not sell or rent your information to third parties. We do not use your data for advertising.
3. Legal Basis for Processing
- Contract: Processing necessary to deliver your subscription.
- Consent: Contact form submissions (you consent at the time of submission).
- Legitimate interest: Fraud prevention, abuse detection, and aggregate analytics.
4. Data Retention
- Engineer profiles: retained for 30 days after subscription cancellation, then deleted on request.
- Contact form submissions: retained for 12 months.
- Admin audit logs: retained for 24 months.
- Payment records: retained for 7 years as required by law.
5. Third-Party Processors
We share data with the following processors only as necessary to operate the service:
- Stripe (payments) — PCI DSS compliant. Stripe Privacy Policy
- Supabase (database) — hosted in US West (Oregon).
- Resend (email delivery).
- Vercel (hosting and analytics).
- Upstash (rate limiting).
- Sentry (error monitoring).
- Microsoft Clarity (session recording and heatmaps).
6. Contact Form Notice
Submitting a contact form on an engineer's listing shares your name, email address, phone number (if provided), and project message directly with that engineer. We do not sell this data or share it with any other party. By submitting a contact form, you agree to our Privacy Policy and Terms of Service.
7. Your Rights
You may request to access, correct, or delete your personal data at any time by emailing hello@castructuralengineer.com with the subject line "Data Request." We will respond within 10 business days.
If you are a licensed engineer whose public profile data (sourced from BPELSG) contains inaccuracies, you may contact us to request a correction, or update your record directly with BPELSG.
8. Marketing & Opt-Out
Marketing emails include an unsubscribe link. You may opt out at any time. Transactional emails — including billing receipts, claim confirmations, and review request notifications — cannot be unsubscribed as they are necessary to deliver the service.
9. Children
This Site is not directed at individuals under 18. We do not knowingly collect information from minors.
10. Changes to This Policy
We will notify registered users by email of material changes to this policy at least 30 days before the changes take effect.
Contact
Questions about this policy: hello@castructuralengineer.com