Privacy Policy

Bob Van ("Bob Van," "we," "us," or "our") operates the website at bobvan.com, the Bob Van customer dashboard, and a suite of embeddable lead-generation tools and widgets, including QuickQuote (collectively, the "Services"). Bob Van is operated by Bryan Wheeler. This Privacy Policy explains how we handle information in connection with the Services.

Our privacy responsibilities depend on how the Services are used:

As a controller. When you visit bobvan.com, create a Bob Van account, or communicate with us, we determine how your information is handled and act as the data controller for that information.

As a processor. When a business customer embeds a Bob Van widget on its own website, the leads and quote requests submitted through that widget belong to and are controlled by that business. For this data, the business is the controller and Bob Van acts as a service provider or processor that handles the data on the business's behalf and under its instructions. If you submitted information to a widget, please contact the business that operates that website to exercise your rights regarding that data.

Account information. When you sign up, we collect your name, email address, business name, and authentication details. Sign-in is provided through our authentication provider, and you may choose to sign in with Google, in which case we receive your basic Google profile (name and email).

Widget and integration configuration. Settings you choose for your widgets, and credentials you provide to connect third-party services. Integration credentials are encrypted and are never displayed back to you or shared.

Lead and quote data. Information submitted by visitors through embedded widgets, which may include name, phone number, email address, service address, the answers selected, and the resulting estimate. As noted above, for embedded widgets this data is controlled by the business that operates the widget.

Usage and device data. Pages viewed, events, referring pages, approximate location derived from a truncated IP address, and browser and device information. We use this to operate, secure, and improve the Services.

Cookies and similar technologies. We use cookies and local storage for authentication sessions and for analytics. See Section 7.

We use information to: provide and operate the Services; capture, store, and route leads to the destinations a customer configures; calculate estimates through configured pricing integrations; send notifications such as new-lead alerts and account emails; protect the Services from abuse, fraud, and bots; process payments if and when paid plans are enabled; analyze and improve the Services; and communicate with you about your account.

We share information with vendors that help us run the Services, under agreements that limit their use of the information. These include, as applicable: our database, authentication, and hosting providers (Supabase and Vercel); our transactional email provider (Resend); bot-protection (Cloudflare Turnstile); product analytics (Google Analytics and Microsoft Clarity); identity sign-in (Google); and our payment processor when paid plans are enabled (Stripe).

Customer-configured integrations. When a customer connects a third-party destination to a widget (for example a field-service platform such as Sweep & Go, or a generic webhook, spreadsheet, or CRM), lead data is sent to that destination at the customer's direction. Those third parties handle the data under their own terms and privacy policies.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We may also disclose information to comply with law, enforce our terms, or protect the rights, property, and safety of Bob Van, our customers, or others, and in connection with a merger, acquisition, or sale of assets.

Each account's data is logically isolated so that one account cannot access another account's leads or configuration. Data is encrypted in transit, integration credentials are encrypted at rest, and access controls are enforced at the database level. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We use strictly necessary cookies to keep you signed in, and analytics tools (Google Analytics and Microsoft Clarity) to understand usage. You can control cookies through your browser settings, and you can opt out of Google Analytics using the tools Google provides. Disabling some cookies may affect how the Services function.

We retain account information for as long as your account is active and as needed to provide the Services. Lead data is retained according to the controlling business's needs and instructions. We may retain certain information as required by law or for legitimate business purposes such as security, accounting, and dispute resolution. You may request deletion as described below.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing. To exercise these rights for information we control, contact us using the details in Section 12. For information submitted through a business's embedded widget, please contact that business directly, as it controls that data; we will assist that business as its processor.

California residents have rights under the CCPA and CPRA, and residents of the EEA and UK have rights under the GDPR. We will not discriminate against you for exercising these rights.

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us information, contact us and we will delete it.

Bob Van is operated from the United States, and information may be processed in the United States and other countries where our providers operate. By using the Services, you understand that your information may be transferred to and processed in the United States.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and material changes will be communicated where appropriate. Your continued use of the Services after an update means you accept the revised policy.

Questions or requests: privacy@bobvan.com.