Privacy Policy

Information you give us

We collect what you type or upload into our forms. Each form asks only for what it needs.

• Project inquiries. Name, email, project type, budget range, timeline, whether you own a lot, how you heard about us, and your message.
• Configurator. Name, email, phone (optional), project address (optional), and the home you configured: size, bedrooms, bathrooms, finish levels, site details and the budget range we calculated.
• Guide downloads and newsletter. Name and email, or email alone for the newsletter.
• Job applications. See Job applicants.
• Client feedback. Your name, rating and comments. If you refer someone, the name and contact details you give us for them. Refer only people who would welcome hearing from us; we use their details only to contact them about Riley.
• Calls and texts. Your phone number, your opt-in and opt-out choices, the texts and photos you exchange with us, and a log of each call: the numbers, the time and the length. A voicemail you leave is stored with its transcript. We do not record calls. See SMS and text messages.
• Email. What you send when you write to us, including attachments.

Job applicants

When you apply on rileyprojects.com/join we collect your name, phone and email, the role, your note to us, a portfolio link if you give one, and any resume or photos of licenses and certifications you upload. A photo of a driver's license or other government license can show an ID number; upload only what shows your qualifications.

We use your application to consider you for the role you applied for and for later roles that fit, and to contact you about them. An AI service helps our team read and summarize applications. A person on our team makes every hiring decision.

Applications and files sit in our recruiting database, open only to the people who hire. We keep them for four years from receipt, as California employment record rules require.

Information collected automatically

When you browse the site, our services record:

• Usage. Pages visited, the page that sent you here, time on site, and clicks on key buttons.
• Device. Browser, operating system, screen size and page load speed.
• Approximate location. City or region, derived from your IP address. We do not collect precise location.
• Campaign tags. If a link brings you here with campaign tags (utm_source and similar), we hold them, with the site that referred you, in your browser's session storage until you close the tab, and attach them to any form you submit so we know which channel reached you.
• Bot checks. Cloudflare Turnstile reads browser and interaction signals on each form to tell people from automated spam.

How we use information

• Answer your inquiry, prepare a budget range, and follow up about your project.
• Send what you asked for: guides, budget reports, newsletters and project updates.
• Text with you about your project: replies to your texts, and the updates, reminders and feedback requests you opted in to.
• Coordinate the work with our subcontractors and vendors by phone and text.
• Review job applications and contact applicants.
• Keep records of our work with you, including your contract and your home's warranty.
• Measure which pages and channels work, and fix what does not.
• Block spam and abuse, keep the site secure, and meet legal obligations.

An AI service helps our team sort and summarize incoming inquiries, applications and messages. It works for us, under our instructions; a person decides what we do next.

Services we use

These companies process information for us as service providers. Each receives only what its job requires and may not use it for its own purposes.

• Vercel hosts the site and runs Speed Insights, which measures page speed without cookies. Vercel privacy policy.
• Google Analytics measures how visitors use the site, using cookies such as _ga. It is not linked to Google Ads, and Google Signals is off. It does not load when your browser sends Global Privacy Control or Do Not Track. You can also install the Google Analytics opt-out add-on. How Google uses this information.
• Cloudflare runs Turnstile, the bot check on our forms. Cloudflare privacy policy.
• Supabase hosts our database and file storage, including form submissions, job application files, and our records of calls and texts. Supabase privacy policy.
• Resend delivers our email (confirmations, guides, newsletters) and holds our newsletter list. Resend privacy policy.
• Microsoft 365 hosts our email and calendars, so messages you send us are stored there. Microsoft privacy statement.
• Anthropic provides the AI service that helps our team read and summarize inquiries, job applications and messages. Anthropic privacy policy.
• Quo carries our business calls and texts. It delivers texts, connects calls, and stores call logs, voicemails and their transcripts. Quo privacy policy.
• Sanity stores this site's content. It holds no information about visitors.

How we share information

We share personal information only:

• With the service providers listed above, to run the site and our business.
• With the architects, engineers, consultants and trades on your project, as the project requires, once you are a client.
• When law, a court order or a government request requires it, or to protect the rights and safety of Riley, our clients or others.
• With a buyer or successor if Riley merges, sells assets or reorganizes, under the terms of this policy.

We do not sell personal information or share it for cross-context behavioral advertising, as California law defines those terms, and have not in the past 12 months. We do not give personal information to third parties for their own direct marketing.

SMS and text messages

We will never share your mobile phone number, SMS opt-in or opt-out consent data, or text message content with any third party for marketing, advertising, or promotional purposes. Notwithstanding any other provision of this Privacy Policy, your SMS data will not be shared with or disclosed to any third party except: (a) the service providers that handle our messages for us, solely as necessary to deliver, store and help us answer them: Quo, our SMS messaging platform provider, Supabase and Anthropic; (b) the architects, engineers and trades on your project, who receive the content of a text, never your number or consent data, when it reports work they need to do; and (c) as required by law, regulation, or legal process.

Each active project has its own Riley number. A text you send to it appears in your project's portal Messages, where your project team and the other members of your project's portal can read it. Texts with subcontractors and vendors stay with our team and never appear in a client's portal.

We keep a record of each opt-in and opt-out: the number, how you opted in, the wording you agreed to, and when.

You may opt out of SMS messages at any time by replying STOP to any message from Riley Projects. We confirm, and no Riley number texts you again unless you opt back in by replying START. Reply HELP for assistance at any time. See our SMS Terms.

Cookies, Do Not Track and Global Privacy Control

Cookies are small files a site stores in your browser. We use:

• Essential storage the site needs to work, such as the bot check on forms and the session storage that holds campaign tags.
• Analytics cookies from Google Analytics.

We do not use advertising cookies, retargeting pixels or ad networks. You can block or delete cookies in your browser settings; the site works without them, though a form may ask you to complete a bot check.

Do Not Track and Global Privacy Control. When your browser sends either signal, Google Analytics does not load. We do not sell or share personal information, so the signal leaves nothing else to opt out of.

How long we keep information

• Inquiries, configurator submissions and guide requests: up to 24 months after our last contact with you, unless you become a client.
• Newsletter: until you unsubscribe. We then keep your address on a suppression list so we do not email you again.
• Job applications: four years from receipt, as California employment record rules require.
• Clients: for your project and its warranty period, and longer where tax, licensing or other law requires.
• SMS consent records: while we text you, and afterward for as long as carrier and consumer protection rules require.
• Texts, call logs and voicemails: with the project or contact they concern, for as long as we keep those records.

We may keep information longer when we need it to resolve a dispute or meet a legal obligation.

Security

Every page of the site uses HTTPS. Our database opens each record only to the people whose work requires it; job applications, for example, are visible only to the people who hire. Every form runs a bot check. No system is perfectly secure, so we cannot guarantee the security of what you send us. If a breach affects your information, we will notify you as the law requires.

Children

This site is for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information, email hello@rileyprojects.com and we will delete it.

Your California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the right to:

• Know what personal information we collect, use and disclose, and get a copy in a portable format.
• Delete personal information we collected from you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do neither.
• Limit the use of sensitive personal information. We use it only for purposes the law allows without a request, such as reviewing a job application.
• Equal treatment. We will not deny you service, charge you more or treat you differently for using these rights.

How to make a request

Email hello@rileyprojects.com or call 310-935-1516. We confirm receipt within 10 business days and respond within 45 days. If we need more time, up to another 45 days, we will tell you why.

We verify each request by matching details you give us against what we hold, and may ask you to confirm from the email address or phone number on file. An authorized agent may make a request for you; we will ask for your signed permission and may confirm your identity with you directly.

What we collected in the past 12 months

• Identifiers: name, email, phone, postal or project address, IP address.
• Professional and employment information: resumes, licenses, certifications, portfolio links and work history from job applicants.
• Commercial information: the home you configured, budget range, timeline and project details.
• Internet activity: pages visited, referring site, campaign tags and interactions with the site.
• Approximate location: city or region from your IP address.
• Audio and visual information: voicemails you leave us, with their transcripts, and photos you text us.
• Sensitive personal information: a government ID number, if one appears in a license photo you upload.

We collect these from you, from your browser, and from people who refer you to us. We use them for the purposes in How we use information, disclose them only as described in How we share information, and keep them for the periods in How long we keep information.

Shine the Light

California Civil Code section 1798.83 lets California residents ask which personal information a business disclosed to third parties for their direct marketing. We make no such disclosures.

Links to other sites

The site links to Instagram, LinkedIn, Google reviews and other sites we do not control. Their privacy policies apply when you visit them. A review you leave on Google is public.

Changes to this policy

When we change this policy we post the new version here and update the date at the top. If a change materially affects how we use information we already hold, we will also tell you by email or with a notice on this site before it takes effect.

Contact us

Questions, requests or complaints about privacy: email hello@rileyprojects.com, call 310-935-1516, or write to Riley Projects, 8800 Venice Blvd, Ste 302, Los Angeles, CA 90034.

If we cannot resolve a complaint, California residents can contact the California Privacy Protection Agency at cppa.ca.gov.