What we collect
- Your account. Your email address, whether you’re a homeowner or a builder, and your name if you give it.
- Signing in. We email you a one-time code. We keep only a scrambled (hashed) copy of it, for 10 minutes. For each signed-in session we record the time, your IP address and your browser’s description of itself.
- Your designs. Deck shapes, sizes, materials, furniture and the notes you pin to the plan.
- Requests for quote. A copy of the design, the street address, city, state and ZIP, the contact details you add (name, phone, email) and your notes for builders.
- Projects and properties, if you post a project to the marketplace: the address, budget, photos and your answers to builders’ questions. We remove all hidden data from photos when you upload them, including the GPS location phones add.
- Builders. Your company name and team, the licenses you list (we check them), your price book, and the bids and questions you send.
- Security records. A log of sign-ins, refused requests and other security events, with the IP address involved.
How we use it
To run DeckCrazy: sign you in, save your work, make your requests for quote and their PDFs, show projects to builders, deliver bids and questions, and keep the service safe from abuse. We email you only to sign you in. If we ever want to send you anything else, we’ll ask first.
We don’t sell your information, share it for advertising, or build profiles of you.
Who can see what
- Your designs are private. Turn on sharing and anyone with the link sees the drawings and notes, read-only. They don’t see your name, email or address. Turn sharing off and the link stops working.
- A request for quote is meant to be passed around. Anyone with its link, QR code or PDF sees everything on it, including the address and how to reach you. It isn’t listed anywhere or shown to search engines. Delete it and the link stops working; copies of the PDF you already sent stay with whoever has them.
- Marketplace projects show builders your city and ZIP, not your street address. The builder you hire gets your street address.
- Builders see their own company’s bids and price book, never another company’s.
- DeckCrazy’s staff can see what’s needed to run the service, check builder licenses and handle problems you report.
- The law. We disclose information if the law requires it, and to protect people or the service from harm.
Services we use
A few companies handle information for us, only to provide their service:
- Render hosts the website, the database and the AI connector.
- Resend sends the sign-in emails, so it receives your email address and the code.
- Anthropic runs the scoping assistant, if we turn it on. Only what you type to the assistant, and the project it’s helping with, goes to Anthropic. It’s off today.
AI assistants you connect
If you connect an AI assistant such as Claude or ChatGPT, it gets only what you allow on the permission screen: for homeowners, your designs and requests for quote; for builders, the jobs, bids and questions you choose. What the assistant’s company does with that is covered by its own privacy policy. We keep a log of what each assistant did, and you can see it and disconnect the assistant at any time from AI assistants (homeowners) or Agents (builders). Assistants can never delete anything.
Cookies and browser storage
Only what makes the site work; nothing for ads or tracking, and no cookie banner because there’s nothing to opt out of:
- A sign-in cookie that keeps you signed in. Scripts on the page can’t read it.
- A short-lived cookie that ties a sign-in code to the browser that asked for it (10 minutes).
- A cookie that remembers whether to open your dashboard when you come back.
- In your browser’s own storage: a design you haven’t saved yet (so it survives signing in), which materials you’ve ticked off, and whether a builder has tried the practice bid. This stays on your device.
Keeping and deleting
We keep your information while you have an account. You can delete designs and requests for quote yourself, at any time. To delete your account and everything in it, email privacy@deckcrazy.com from the address you sign in with; we’ll do it within 30 days and confirm. We may keep security records, and what the law requires us to keep, for longer. Expired sign-in codes are cleared out automatically.
Your choices
You can ask for a copy of your information, ask us to correct it, or ask us to delete it, by emailing privacy@deckcrazy.com. We’ll answer within 30 days, and we may need to confirm it’s really you first. You can also correct or delete most things yourself in DeckCrazy.
Security
Everything travels encrypted. There are no passwords to steal. Each account can reach only its own records, enforced in the database itself, not just in the app. We test the service by attacking it ourselves. No system is perfect; if something happens that puts your information at risk, we’ll tell you.
Children and changes
DeckCrazy is for adults, 18 and over. We don’t knowingly collect information from children.
If we change this policy, we’ll update the date at the top, and tell you by email or on the site before a change that affects information we already have.
See also the terms of use.