Privacy policy

Overview

This policy describes what information we may collect when you use prefabricated.co (the “Site”), including forms, downloads, quizzes, and checkout-related flows. We use it to respond to you, deliver resources you request, improve our guides and tools, and understand aggregate Site usage. We do not sell your personal information.

What we collect

• Contact and inquiry data you submit (for example name, email, phone, ZIP or address where we ask for it, and message content) on lead forms, the qualify flow, home interest, Escape purchase intent, build inquiries, starter kit downloads, homestead zone PDF requests, and similar features.
• Technical metadata such as browser user-agent string and IP address, stored with submissions where our API routes record them, to reduce abuse and diagnose delivery issues.
• Tool and quiz context you provide (county, goals, zone results, structured answers) so we can personalize PDFs, emails, or follow-up.
• Analytics: we use Google Analytics 4 (via Google Tag Manager scripts loaded on the Site) to measure traffic, referral sources, and on-site behavior using cookies or similar technologies. You can use browser controls or GA opt-out tools to limit this category.
• UTM and campaign parameters may be present in URLs you arrive with; if we persist them with a submission, it is to attribute interest to a campaign, not for third-party advertising profiles on this Site.

Where data is stored

Database (Neon PostgreSQL). Many submissions are written to tables in a Postgres database hosted by Neon, using a server-side connection string from our hosting environment. Rows typically include the fields needed for that product (see our internal schema definitions in the repo’s db/schema.sql for engineers).

Email (Resend). When you request confirmations or we notify our team, messages are sent through Resend, which processes recipient addresses and message content as a subprocesser.

Payments (Stripe). If you use “buy now” or similar flows, payment is handled on Stripe-hosted checkout. We do not store full card numbers on our database; Stripe’s privacy policy govern card data.

Hosting and logs. Our hosting provider (e.g. Vercel) may retain HTTP logs, including IP and path, for security and operations—consistent with their documentation.

Retention

We retain submissions as long as needed to operate the Site, follow up on inquiries, and meet legal obligations. We do not promise indefinite storage; specific retention windows can be tightened as we mature our data practices. You may request deletion of contact records tied to your email (see below), subject to legitimate business and legal holds.

Security

Secrets (database URL, email API key, Stripe secret) live only in server environment variables—not in browser-exposed NEXT_PUBLIC_* bundles. We apply HTTP security headers (including a Content-Security-Policy) and optional rate limiting on write-heavy API routes. No security practice is perfect; if you discover a vulnerability, email us at the address above.

Your choices

• Access / correction / deletion: email prefabflorida@gmail.com with the address you used on a form. We will verify reasonableness and respond within a practical timeframe.
• Marketing: we aim to send only relevant follow-up tied to your request. You can ask us to stop non-transactional messages.

Children

The Site is not directed at children under 13. We do not knowingly collect their personal information.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the Site after updates constitutes acceptance of the revised policy to the extent permitted by law.

Related

Affiliate disclosure · Contact