Privacy Policy

1. Introduction

DuloCore ("we," "our," or "us") is a California-based home energy rebate and contractor matching platform operating at dulocore.com. We help California homeowners identify energy efficiency rebates, connect with licensed contractors, and manage home improvement projects. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services.

By using DuloCore, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with our practices, please do not use our services.

2. Categories of Personal Information Collected

Pursuant to Cal. Civ. Code § 1798.100, we collect the following categories of personal information:

A. Identifiers

• Full name
• Email address
• Phone number
• Mailing and property address
• IP address
• Account username and user ID

B. Personal Information Under Cal. Civ. Code § 1798.80(e)

• Name and address (as above)
• Utility account information (utility provider, account number for rebate verification)
• Financial information (payment method details processed through Stripe)

C. Professional or Employment-Related Information

• Contractor license numbers (CSLB verification)
• Business name, type, and service areas
• Insurance and bonding information
• Certifications and credentials

D. Property and Energy Information

• Home address, size, year built, and type
• HVAC system details (type, age, efficiency ratings)
• Solar installation details
• Insulation and weatherization data
• Energy usage history and utility bill data
• Climate zone and local utility service territory

E. Internet or Electronic Network Activity

• Browser type and version
• Device information and operating system
• Pages visited and interaction data (clicks, scrolls, time on page)
• Referring URLs and search terms
• Cookies and similar tracking technologies

F. Geolocation Data

• Approximate location derived from IP address
• Property address (precise location for rebate and contractor matching)

3. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you: When you create an account, complete your profile, submit property details, request contractor quotes, or contact us
• Automatically: When you browse our website through cookies, log files, and similar technologies
• Third-party sources: Clerk (authentication provider), public records (CSLB license verification), and utility program databases

4. Purposes for Collection and Use

Pursuant to Cal. Civ. Code § 1798.100(b), we collect and use personal information for the following business purposes:

5. Categories of Third Parties with Whom We Share Personal Information

Pursuant to Cal. Civ. Code § 1798.115, we disclose personal information to the following categories of third parties for business purposes:

6. Sale or Sharing of Personal Information

We do not sell your personal information. As defined under Cal. Civ. Code § 1798.140(ad), DuloCore does not sell personal information to third parties for monetary or other valuable consideration.

We do not share your personal information for cross-context behavioral advertising. As defined under Cal. Civ. Code § 1798.140(ah), DuloCore does not share personal information with third parties for targeted advertising purposes.

7. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Active accounts: Data retained for the duration of your account
• Closed accounts: Data deleted within 90 days of account closure, except as required for legal compliance
• Contractor records: License verification data retained for 3 years after last activity per California business records requirements
• Transaction records: Financial records retained for 7 years per tax and accounting obligations
• Analytics data: Aggregated and anonymized within 26 months

8. Cookies and Tracking Technologies

We use the following types of cookies:

• Strictly necessary cookies: Required for authentication and site functionality (Clerk session tokens)
• Analytics cookies: Help us understand site usage patterns
• Preference cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling cookies may affect site functionality, including the ability to sign in.

9. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under Cal. Civ. Code § 1798.100–199:

A. Right to Know (Cal. Civ. Code § 1798.100, 1798.110)

You have the right to request that we disclose:

• The categories of personal information we have collected about you
• The categories of sources from which we collected the information
• The business or commercial purpose for collecting the information
• The categories of third parties with whom we share the information
• The specific pieces of personal information we have collected about you

B. Right to Delete (Cal. Civ. Code § 1798.105)

You have the right to request that we delete the personal information we have collected from you. We will comply with your request and direct our service providers to delete your information, subject to certain exceptions permitted by law (such as completing a transaction, detecting security incidents, complying with legal obligations, or exercising free speech).

See our Data Deletion page for detailed instructions.

C. Right to Correct (Cal. Civ. Code § 1798.106)

You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the information and the purposes of processing.

D. Right to Opt-Out of Sale or Sharing (Cal. Civ. Code § 1798.120)

You have the right to opt out of the sale or sharing of your personal information. DuloCore does not sell or share your personal information, so this right is automatically satisfied. If our practices change in the future, we will provide a clear "Do Not Sell or Share My Personal Information" link on our website.

E. Right to Limit Use of Sensitive Personal Information (Cal. Civ. Code § 1798.121)

You have the right to limit the use and disclosure of sensitive personal information to purposes necessary to perform the services you request. We only use sensitive personal information (such as financial data) for the service purposes described in Section 4.

F. Right to Non-Discrimination (Cal. Civ. Code § 1798.125)

We will not discriminate against you for exercising any of your CCPA rights. Specifically, we will not:

• Deny you goods or services
• Charge you different prices or rates
• Provide you a different level or quality of service
• Suggest that you will receive a different price, rate, level, or quality of goods or services

10. How to Submit CCPA Requests

You may submit a verifiable consumer request to exercise your rights by:

• Email: [email protected] with subject line "CCPA Request"
• Data Deletion Page: dulocore.com/data-deletion

To verify your identity, we may ask you to confirm the email address associated with your DuloCore account and provide additional identifying information. We will respond to verifiable requests within 45 days. If we need additional time (up to 90 days total), we will notify you of the extension and the reason.

You may designate an authorized agent to submit a request on your behalf. Authorized agents must provide written proof of authorization and we may still require you to verify your identity directly.

11. Metrics (Cal. Civ. Code § 1798.185(a)(7))

As required by the CCPA, we will compile and disclose annually the following metrics regarding consumer requests received in the prior calendar year:

• Number of requests to know, delete, and opt-out received
• Number of requests complied with and denied
• Median number of days to respond

Metrics will be published on this page when available.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure authentication via Clerk with multi-factor authentication
• Role-based access controls
• Regular security assessments
• PCI-DSS compliant payment processing via Stripe (we never store card numbers)

However, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

13. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will promptly delete that information. If you believe we have collected information from a child, please contact us at [email protected].

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending an email notification to registered users for material changes

We encourage you to review this policy periodically.

15. Contact Information

If you have questions about this Privacy Policy, your personal data, or wish to exercise your CCPA rights, contact us at:

• Company: DuloCore
• Email: [email protected]
• Website: dulocore.com
• State: California, United States

This privacy policy is provided pursuant to the California Consumer Privacy Act of 2018 (Cal. Civ. Code § 1798.100–199), as amended by the California Privacy Rights Act of 2020.