Privacy Policy

Effective 17 October 2026

This policy explains what information Ja-Lee (“we”, “us”) collects through the Ja-Lee portal at portal.ja-lee.com and the Ja-Lee Mapper iPhone app, which uses your portal account, and what we do with it. Ja-Lee arranges home maintenance and repairs: homeowners ask for work through the portal, and we arrange it with the contractors who carry it out. Our public website, ja-lee.com, has its own privacy policy.

The short version

We collect what we need to look after your home and arrange repairs: your account details, your home’s layout and fixtures, your repair requests, messages and photos.
Contractors see only what they need for the work they’re asked to do, and not your name or street address until they’re assigned to your job.
We strip hidden location and camera details from the photos and videos you upload.
We don’t sell your information, show you ads, or use advertising or analytics trackers.
Email [email protected] to see, correct or delete what we hold about you.

What we collect

Your account

Your name, email address, phone number (if you give one) and whether you’re a homeowner, a contractor or Ja-Lee staff. Homeowner accounts are set up by Ja-Lee; contractors register themselves. Your password is stored only as a one-way scrambled (hashed) value that no one, including us, can turn back into the password. We also record when you last signed in.

Your home (homeowners)

The address and any nickname or notes for your property; its floor plans and room layouts; the items in each room, such as fixtures, appliances, finishes, paint colors and window and door sizes; and photos of your rooms.

Repair requests and messages

What needs fixing and your description of the problem; the photos, videos and PDF files you attach; your messages with Ja-Lee and contractors; the days and times you choose; and the estimates, costs, deposits and payments recorded against each job. The portal doesn’t currently take card payments, so it never collects card or bank details.

Contractors

Your business’s base address and ZIP code, how far you travel, the trades you cover and the description you give; the estimates and availability you send; and records of payments to you.

Photos and files

When you upload a photo, we remove the hidden details phones and cameras add to it, such as its GPS location, the camera model and when it was taken, keeping only which way up it goes. We remove the location from videos too.

The Ja-Lee Mapper app

The app uses your iPhone’s camera to scan rooms and to photograph things like paint labels, windows and doors. It sends us the room shapes and measurements, the 3D room models it makes, the photos you take, and the details you record (paint colors and codes, window and door sizes and the like, and where each came from). Paint labels are read on your phone itself. The app keeps its sign-in in your iPhone’s secure Keychain, and we record the device name it signs in with. It has no analytics or advertising code.

Settings, notifications and feedback

Your appearance choices: theme, color scheme, background image and any custom styles.
If you turn on notifications, your browser gives us an address at its push service (Apple’s, Google’s, Mozilla’s or Microsoft’s, depending on the browser), which we keep with your browser type. Notifications are encrypted so only your device can read them.
If you send us feedback, we receive your message with your name, email address, the portal page you came from and your browser type.

Technical information, cookies and storage

Like every website, the portal receives your IP address, browser and device type, and the pages you request. Our web server keeps these records for 14 days.
To protect accounts, we record sign-in and password-reset attempts by IP address and a scrambled (hashed) form of the email address used, for about two days.
One cookie, PHPSESSID, keeps you signed in. It’s needed for the portal to work and is deleted when you close your browser; your session also ends after a period without activity.
Your browser remembers whether you last viewed a floor plan flat or in 3D, and keeps copies of the portal’s styles, scripts and icons so pages load quickly. Neither is sent to us.
We don’t use advertising or analytics cookies. Cloudflare, which protects the portal (see below), may set its own security cookies.

How we use it

To run your account and the portal, and to arrange, schedule, carry out and keep records of repair work.
To let you, Ja-Lee and contractors message each other about jobs.
To send you account emails (invitations, password resets) and emails and notifications about your requests and messages.
To answer questions and feedback and to improve the portal.
To keep the portal and your account secure and prevent misuse and fraud.
To meet our legal obligations.

We don’t sell or rent your information, share it for advertising, or use it to build marketing profiles.

Who can see what

Ja-Lee staff can see what they need to run the service and support you.
Homeowners see their own homes, requests and messages, and the contractor assigned to their job.
Contractors asked for an estimate see the repair (what needs fixing, the room and item, the description and photos) and the town and ZIP code, but not the homeowner’s name or street address. They see only the messages addressed to them.
The contractor assigned to a job also sees the address and the other details needed to do the work, and the job’s messages.

We share information only with the companies that help us run the portal, and only for that purpose:

Our hosting provider, whose servers in the United States store and run the portal.
Cloudflare, which carries traffic to the portal and protects it from attacks, so it handles your connection and IP address.
Our email provider, which delivers the portal’s emails.
Push services (Apple, Google, Mozilla or Microsoft, depending on your browser), which deliver notifications you’ve turned on.
Google Fonts: your browser downloads the portal’s typeface from Google, which receives your IP address when it does.
Have I Been Pwned: when you choose a password, we check it against passwords exposed in data breaches. Only the first five characters of a scrambled (hashed) form of the password are sent, never the password itself.

“Show map” links open Google Maps with the property’s address; Google receives the address only if you follow the link. We may also share information if the law requires it, to protect people’s safety or our rights, or with a buyer or successor if our business changes hands, in which case this policy would still apply to it.

How long we keep it

Account, home and job information: for as long as your account is open, and afterwards as long as we need it for our records of work done and our legal obligations.
A room’s items, photos and repair history are kept even if the room is later removed from a floor plan, so your home’s service history stays complete.
Web server records: 14 days. Sign-in attempt records: about two days.
Invitation links expire after 14 days, password-reset links after an hour, and the Mapper app’s sign-in after 30 days unless you sign out first.
Our email log records who each email went to, its subject and whether it was delivered, never its contents.

If you ask us to close your account, we’ll delete or anonymize your personal information, except what we need to keep for records of work done or as the law requires.

Your choices and rights

You can update your appearance settings and turn notifications on or off in Settings. Contractors can update their profile.
You can ask us for a copy of your information, or ask us to correct or delete it, by emailing [email protected]. We may need to confirm it’s really you first.
Depending on where you live, you may have other rights under privacy laws; we’ll honor them as those laws require.

Security

The portal runs only over an encrypted (HTTPS) connection. Passwords are stored with a strong one-way hash (Argon2id); repeated failed sign-ins are slowed down, then blocked; each person can see only what their role allows; and uploaded files are kept outside the website and served only after checking who’s asking. No system is perfectly secure, but if a security breach affects your information, we’ll tell you as the law requires.

Children

The portal and the Mapper app are for adults managing their homes and businesses. They aren’t meant for children under 13, and we don’t knowingly collect information from them. If you think a child has given us information, let us know and we’ll delete it.

Where your information is kept

We store and process your information in the United States.

Changes to this policy

If we change this policy, we’ll update it here and change the date at the top. If a change is significant, we’ll tell you in the portal or by email before it takes effect.

Contact us

Questions about privacy? Email [email protected]. See also our Terms of Use.