Privacy Policy
Cedar & Nails — this website, the Cedar & Nails app for homeowners, and the Cedar & Nails app for contractors (together, "the service") — is provided by Saltzman Consulting LLC, doing business as Cedar & Nails ("we", "us"). This policy explains what the service collects, why, and your choices. Questions? Send us a message.
What we collect
- Email address. Used solely to sign you in (passwordless email code) and to identify your account. We do not email you marketing.
- Account identifier. A user ID assigned by our authentication provider, used to associate your data with your account.
- Business data contractors enter. Company profile (name, phone, email, address, license number, logo), client names and contact details, the price book, estimates, invoices, line items, and payment records. This content is yours; we store it so the app works and so your team can share one company's data.
- Project data homeowners enter. Your name and contact details, visit requests, and the estimates and invoices your contractor shares with you.
- Website contact form. If you send a message through this site, we collect what you enter — name, email or phone, ZIP code, project type, and your message — and use it only to respond to your inquiry. Submissions are screened for bots by Cloudflare Turnstile and delivered to our inbox by Resend, our email provider.
- App usage analytics. The apps use PostHog to record how the product is used — screens opened, actions taken, device model, and app version — associated with your account identifier. We use this only to understand and improve the product.
We do not collect location, contacts from your device, health or fitness data, browsing or search history, or advertising identifiers. The apps contain no advertising SDKs and do not track you across other apps or websites; the analytics described above cover activity inside the apps only. This website loads no third-party fonts or advertising trackers and sets no analytics or advertising cookies; the only measurement is Cloudflare's cookieless Web Analytics (aggregate page views — no cookies, no cross-site tracking, no individual profiles).
Text messages and calls
A contractor can link their California contractor license to their company account. To prove the license is theirs, we send a six-digit code to the business telephone number the Contractors State License Board publishes for that license, either as a text message or as an automated call, whichever they choose. Nothing is sent unless they ask for it, and we show them the number first.
This is the only thing we use text messages and automated calls for. We send no marketing messages of any kind.
How you opt in
Opt-in happens inside the Cedar & Nails contractor app, not on this website and not by text message. A contractor signs in, begins a claim on a specific California contractor license, and is shown the business telephone number that the Contractors State License Board publishes for that license. They then tap Text me or Call me to have the code sent. That tap is both the request and the consent, and it covers that one code.
No phone number is collected from you on this website. The only number we contact is the one the state register already publishes for the license being claimed, which is why the number is shown on screen before anything is sent.
How often
Once per request. A contractor verifying one license normally receives exactly one message. If a code does not arrive they can ask again, up to five times a day for a given license, and the same limit applies to the phone number across every Cedar & Nails account.
Cost
Message and data rates may apply. We do not charge you for the message; your mobile carrier may.
HELP and STOP
Reply HELP to any message and you will get a reply telling you who we are and how to reach us. Reply STOP and we will not text that number again; your carrier will confirm it. Because these codes are the only thing we send, replying STOP means you will need to verify by another route — contact us and a person will help you. Replying START or UNSTOP lets us text that number again. You can also stop receiving codes simply by not asking for another one. Mobile carriers are not liable for delayed or undelivered messages.
What the message says
This is the message, word for word:
Cedar & Nails: your license verification code is 123456. Expires in 10 minutes. Reply HELP for help, STOP to opt out.
The automated call says the same thing in speech, and reads the six digits twice.
If we called or texted a number that is not yours
The Contractors State License Board publishes a business telephone number for every license, and those records go out of date. If you received a code and you are not expecting one, somebody has entered a license that lists your number.
Nothing about your business has been shared with them, and the code alone gives them nothing — it only works when typed back into an account we can already identify. Tell us and we will stop contacting that number and look into the claim.
Mobile information and messaging consent
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of data sharing described in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
We do not share, sell, rent or provide your mobile phone number or your messaging consent data to third parties or affiliates for marketing or promotional purposes. We do not sell your mobile information to anyone, and we do not pass it to lead generators.
The one thing we do share it with is the provider that carries the message. Twilio transmits the verification text or automated call on our behalf and may use the number only to deliver it. That is a service provider acting on our instructions, and it is neither a sale nor a marketing disclosure — it is named here so this page does not contradict the list of processors further down.
Payments
Card and bank payments are processed by Stripe, our payment processor. Card details are entered into and handled by Stripe directly — we never see or store full card numbers. Stripe's handling of your data is described in Stripe's privacy policy. We store records of payments (amount, status, which invoice they belong to) so both sides can see what's been paid.
How we use it
Only to provide the service's features: authentication, storing and syncing your data, generating invoice PDFs, letting you email or share those PDFs, and processing the payments you initiate. We do not sell your data or share it with third parties for their own purposes.
Where it's stored & who processes it
Your data is stored with Supabase (our hosting/database/storage provider), which processes it on our behalf. Access is restricted by per-account authorization (row-level security) so each company only sees its own data. Some data is cached on your device to allow offline reading. When you email an invoice, the PDF is handed to your device's mail app; delivery is handled by your email provider, not by us.
App usage analytics are processed by PostHog on our behalf. This website is served by Cloudflare, which processes visitor requests to deliver and protect the site (including the Turnstile bot check on the contact form); contact-form messages are delivered by Resend. Verification text messages and automated calls are carried by Twilio. Each of these providers processes data only to provide its service to us.
Data retention & deletion
We keep your data while your account or company exists. A contractor deleting their company in the app (Settings → Danger zone, owner only) removes that company and all of its data from our systems. You can delete your individual account in the app as well, or contact us through the website and we'll take care of it. Deleted data is removed from our systems; residual copies may persist in our providers' encrypted backups until those backups expire.
Children
The service is intended for business and household-project use and is not directed at children under 13.
Changes
If this policy changes materially, we'll update this page and the "last updated" date above.
Contact
Saltzman Consulting LLC dba Cedar & Nails · contact form