What we collect
- Contact — name, email, phone, and the property address, when you ask for a quote.
- Property details — the answers you give (property type, stories, build-up) and public property records for the address (lot and building size, use, year built) from the Los Angeles County Assessor.
- Photos — the images you attach to a quote. See below: they are kept privately with your quote so we can prepare the job.
- Notes — anything you type in the notes box.
- Prices you look at — the quote tool shows a price before asking for any contact details. For each one we keep what was priced (the services, the ZIP code, your answers, the number) with the visit id described below, and not the street address or anything about you. If you then have the quote sent to you, that record is joined to your quote.
- Calls and texts — when you call or text our business number: your phone number, the time, the keypad answers you give for an estimate, the estimate, any voice message you leave, and the texts you send us and we send you. See below.
- Booking + payment — the slot you pick, the agreement version you accepted (with time, IP address and browser identifier as proof of acceptance), and payment status. Card details go straight to Stripe; we never see or store them.
- How the site is used — our own, first-party usage measurement: which pages a visit reaches, what happens on the quote and booking forms, and scans of our printed QR codes. Each visit gets a random id that lives in your browser tab and disappears when the tab closes; there is no cookie, no cross-site identifier and no IP address stored. Location is kept at city level, page addresses are recorded without their query string (only the source tag of a printed QR code or link survives), the site you came from is kept as that site's address only — never the full link, and never one of our own pages, and we note when you leave a page so we can tell how long it held your attention. We look at this in real time to see how the site is doing, and we throw it away after 13 months. Each visit is also labelled by what it is — a person in California, a person elsewhere, an automated visitor (crawlers, link previews), or one of our own founders (a device that has signed into our console carries a marker cookie, and our founders' own home networks are recognised by comparing a visit's network address against theirs in the moment, without storing it) — and only the first kind counts in our numbers; the rest are tallied as filtered, never inspected further. If your browser sends Do Not Track or Global Privacy Control, none of this is collected at all.
- Google Analytics — alongside our own measurement, the public pages load Google Analytics 4 so we can see how people find us (search, referrals, returning visits). It sets Google's analytics cookies, which is how it recognises a returning browser. We have turned off Google Signals and ad personalisation: no advertising features, no cross-site profiling, and page addresses are sent without their query string. Google processes this data under its own terms as our service provider. Do Not Track or Global Privacy Control switches Google Analytics off entirely, the same as our own measurement.
- Technical — Cloudflare, which serves this site, logs requests (IP, user agent) for security and performance in the ordinary way.
Why
To compute your quote, hold and confirm your booking, take payment, send you the emails about it (quote copy, confirmation, changes, receipt), schedule the crew, and handle any question or dispute afterwards. We also use it to improve the accuracy of the quote engine — comparing what we predicted with what the job actually took.
We do not sell personal information, and we do not share it with anyone for their marketing. We do not send marketing email or marketing texts; the only emails and texts you get are about your quote, your booking, or a message you sent us.
Photos
Photos you attach are used to measure the job — window and panel counts, approximate area, how much build-up there is — and those measurements are saved with your quote. The images themselves are kept in our private business storage, filed with your quote, so the people preparing your job can see what they are walking into. Only Glint and Sparkle can see them; they are never published or shared. A fingerprint (a hash) is also kept so the same photo is not re-processed. Ask us and we will delete them.
On the day, the crew photographs the work area before and after for quality records. We may use before/after photos that do not identify you or your property in marketing; tell us in writing and we will not.
Calls and text messages
Calls. Our business number is run through Twilio. When you call, we record your number, when you called, the keypad choices you make for an instant estimate, and the result, so a person on our team can follow up. If you leave a voice message, it is recorded and transcribed into text (the call tells you before the tone) so we can call you back. The transcription runs on our own computer; the recording is not sent to any other transcription service. The phone menu itself speaks in computer-generated voices, which are also produced on our own computer. Our AI assistant: when it answers, it tells you first that it is an AI assistant and that the call is transcribed. Your speech is turned into text on our own computer so the assistant can answer and our team can see what you asked for; the words go to our own AI model on that computer, not to an outside AI service. You can press 1 at any time to use the keypad instead, or 0 to leave a message. When a person on our team picks up your call, that conversation is not recorded.
Texts. We text you only when you ask for it — for example by pressing 1 during a call to get your estimate and a link to add photos and book — or to reply to a text you sent us. Messages are about your estimate, your booking, or your question; we never send marketing texts. How many texts you get depends on what you ask for, usually one or two. Message and data rates may apply. The exact opt-in wording and every message we send are on the text messages page. Reply STOP to stop all texts from us, START to allow them again, and HELP for help; you can also email [email protected]. Carriers are not liable for delayed or undelivered messages.
Your mobile number is never shared or sold. We do not share mobile phone numbers or text-messaging opt-in information with third parties or affiliates for their marketing or promotional purposes. The only outside company that handles your number and texts is Twilio, which delivers them for us as our service provider.
Who touches it
Only the services the site actually uses:
| Service | What for | What they see |
|---|---|---|
| Supabase | Database | Everything above, stored in the US |
| Stripe | Payments, invoices, refunds | Name, email, amounts, card (Stripe only) |
| Resend | Sending our emails | Your email address and the email content |
| Twilio | Our business phone number: calls, voice messages (stored, then transcribed on our own computer), texts | Your phone number, call details, voice messages, and text content |
| Cloudflare | Hosting this site | Ordinary request logs |
| Geocodio | Turning your address into a map location | The address |
| LA County Assessor | Public property records | The address (public API) |
| Google Calendar | Crew scheduling (when connected) | Booking time, address, name |
| Google Analytics | Site usage reporting | Pages visited, analytics cookie id, approximate location, device |
Each of these processes data under its own terms as our service provider. We do not use advertising networks, and Google Analytics runs with its advertising features disabled.
Cookies and tracking
The public site sets one kind of tracking cookie: Google Analytics' (_ga, _ga_*), used only to count visits and tell a returning browser from a new one — never for advertising. You can decline it by turning on Do Not Track or Global Privacy Control in your browser, or by blocking cookies from googletagmanager.com; the site works identically either way. Your browser's session storage holds two things for the life of the tab: your quote, so the booking page can pick it up, and a random visit id for our own usage measurement (see above). Our own founder console uses one login cookie. Stripe's checkout page sets its own cookies under Stripe's policy.
How long we keep it
Quotes and leads: as long as we operate, so a returning customer's history is available and the engine can be calibrated. Booking, agreement and payment records: at least as long as California law requires for business and tax records. Quote photos: kept with your quote on the same terms, and deleted when you ask. If you ask us to delete your information we will, except where we are required to keep a record (for example, a payment).
Your rights
Wherever you live, you can ask us what we hold about you, ask us to correct it, or ask us to delete it. California residents have these rights under the CCPA/CPRA; we honour them for everyone. We do not sell or share personal information for cross-context advertising, so there is nothing to opt out of on that front. Email [email protected] and we will respond within the time the law allows, usually much sooner. We will never treat you differently for asking.
Security
Data is encrypted in transit; the database is locked to our server-side code (no public read access); card data never touches our systems; the links in our emails that let you manage or pay for a booking are signed and personal to that booking. No system is perfect — if something goes wrong that affects you, we will tell you.
Contact
Glint and Sparkle LLC, Rosemead, CA · [email protected] · (626) 997-4463.
See also: policies, terms of use, service agreement.