Last Updated: August 4, 2026
1. Information We Collect
We collect information you provide directly to us, including:
• Account information (name, email, phone number)
• Profile details (bio, business information, photos)
• Listing information (product/service details, pricing, images)
• Service provider information (licensing, certifications, insurance certificates)
• Transaction details (orders, payments, delivery addresses)
• Communications (messages, reviews, support inquiries)
• Payment information (processed securely by Stripe)
• Legal acceptance records (agreement timestamps, IP addresses, user agents)
• Provider liability acknowledgments and safety certifications
• Photographs you submit (trees, property areas, firewood) for estimates, listings, jobs, and deliveries
• Guest submissions (an email address and job details provided without an account — see "Guest Use" in our Terms)
• Chat content you send to our AI assistant
2. Automatically Collected Information
We automatically collect certain information when you use our Platform:
• Device information (type, operating system, unique identifiers)
• Usage data (pages viewed, features used, time spent)
• Location data (if you grant permission)
• Log data (IP address, browser type, access times)
• Analytics data (app performance, error reports)
2A. AI Processing
Several features are powered by artificial intelligence. When you use them, the content involved is processed by our AI infrastructure providers (currently Anthropic) to generate the result:
• Photos you submit for an instant estimate are analyzed to read the tree's size, condition, and surroundings
• Messages to Woody (our assistant) are processed to generate responses
• Listing images and content may be automatically reviewed for policy compliance
We send only what the feature needs, our providers process it on our behalf, and we do not permit them to use your content to train their models under our agreements with them.
3. How We Use Your Information
We use collected information to:
• Provide and improve our Platform services
• Process transactions and send related notifications
• Facilitate communication between buyers and sellers
• Track legal compliance and agreement acceptance
• Maintain audit trails for liability protection
• Verify service provider qualifications (when applicable)
• Personalize your experience and provide recommendations
• Detect and prevent fraud, abuse, and security issues
• Send important updates and marketing communications (with your consent)
• Comply with legal obligations and enforce our terms
• Defend against legal claims or disputes
• Analyze usage patterns and improve Platform functionality
4. Information Sharing
We share your information only in these circumstances:
• With other users: Buyers and sellers see relevant transaction information
• With the provider you choose: if you send an estimate or request directly to a specific company, that company receives your request details first
• With widget hosts: leads you submit through a business's embedded instant-quote widget on THEIR website are delivered to that business
• With AI providers: content processed as described in Section 2A
• With Stripe: Payment processing requires sharing transaction details
• With service providers: Analytics, hosting, and support services
• For legal compliance: When required by law or to protect rights
• In legal proceedings: Legal acceptance records and compliance data may be shared in disputes, litigation, or regulatory investigations
• With insurance companies: In case of claims or incidents involving services
• Business transfers: In connection with mergers or acquisitions
• With your consent: When you explicitly authorize sharing
We never sell your personal information to third parties.
5. Payment Information
Payment processing is handled by Stripe. We do not store your complete credit card numbers or bank account details on our servers. Stripe's privacy policy governs how they handle your payment information.
For sellers, we store your Stripe Connected Account ID to facilitate payouts but do not have access to your complete banking details.
6. Data Security
We implement industry-standard security measures to protect your information:
• Encryption in transit (HTTPS/TLS)
• Encrypted storage for sensitive data
• Regular security audits and penetration testing
• Access controls and authentication requirements
• Monitoring for suspicious activity
However, no security system is impenetrable. You are responsible for maintaining the confidentiality of your account credentials.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide services. Even after account deletion, we may retain certain information to:
• Comply with legal obligations and tax requirements
• Resolve disputes and enforce agreements
• Defend against legal claims (liability protection)
• Prevent fraud and abuse
• Maintain transaction records (typically 7 years)
• Preserve legal acceptance records and audit trails (7+ years for liability protection)
8. Your Privacy Rights
You have the right to:
• Access your personal information
• Correct inaccurate data
• Request deletion of your account and data
• Object to certain data processing
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent for optional data collection
To exercise these rights, contact us at privacy@timber.bid or use the privacy settings in your account. Account and data deletion is available in-app and described at timber.bid/public/legal/delete-account.
9. Location Data
We collect location data to show nearby listings and calculate delivery distances. You can control location permissions through your device settings. Some features may be limited if location access is denied.
Live delivery tracking: during an active delivery, a driver's real-time GPS location is shared with the buyer of that delivery (and with us) so the delivery can be followed on a map. Drivers consent to this when they accept a tracked delivery; tracking ends when the delivery completes.
Public content shows general location only. Posted jobs, requests, and estimates display city/state — never your street address, which is shared only with the provider you transact with.
10. Cookies, Analytics, and Tracking
We use cookies and similar technologies to enhance your experience and analyze usage patterns. You can control cookie preferences through your browser settings. Specifically:
• A first-party analytics identifier (a random ID stored on your device) links your visits so we can understand how the Platform is used and which campaigns bring visitors (via UTM parameters)
• Google Analytics for aggregate usage statistics
• Sentry for crash and error reporting (technical diagnostics, not browsing profiles)
• Our first-party pixel may also run on our own affiliated sites (such as wood.delivery); it reports to us, not to advertising networks
We do not use third-party advertising trackers on the Platform, and we do not sell or share your personal information for cross-context behavioral advertising.
10A. Business Directory and Outreach Data
To build our directory of tree-service, firewood, and related businesses, we collect PUBLICLY AVAILABLE business information — business name, address, phone number, website, publicly listed business email addresses, and ratings — from public sources such as public map listings and the businesses' own websites. We use this information to:
• Display business listings in our public directory with a free claim option
• Send business-to-business email about the Platform, always with a working unsubscribe link that we honor permanently
• Notify nearby businesses about relevant customer requests
This is business contact information, not consumer data. If your business appears in our directory and you want it removed, use the removal link on your claim page or email privacy@timber.bid — we remove entries promptly and suppress them from future collection. We do not send marketing email to consumers without consent.
10B. Communications and SMS
Transactional messages (order confirmations, bid alerts on your own jobs, delivery updates, security emails) are part of the service. Marketing email is sent only with consent or as permitted business outreach (Section 10A), always with unsubscribe. If you opt in to SMS updates, message and data rates may apply, frequency varies with your activity, and you can opt out any time by replying STOP. SMS consent is never a condition of purchase.
10C. Service Providers We Use
We rely on these processors to run the Platform: Supabase (database and authentication), Stripe (payments), Netlify (web hosting), Resend (email delivery), Anthropic (AI features), Google (analytics, maps data, and Sign in with Google), Apple (Sign in with Apple), Mapbox (maps), Sentry (error reporting), and Expo (mobile app services and push notifications). Each receives only the data needed for its function.
11. Children's Privacy
Our Platform is not intended for users under 18. We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it promptly.
12. California Privacy Rights
California residents have additional rights under CCPA, including the right to know what personal information is collected, to request deletion, and to opt out of sale (though we do not sell personal information).
13. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or Platform notification. Your continued use after changes indicates acceptance of the updated policy.
14. Contact Us
For privacy-related questions or to exercise your rights:
Email: privacy@timber.bid
Data Protection Officer: dpo@timber.bid