TODAY Compliant LLC
Effective Date: September 28, 2026 · Last Updated: September 28, 2026
Privacy at a glance
- We do not sell or rent your personal information. We do not sell leads, contact lists, or project data.
- We do not run background checks. We review licensing and insurance documents only. See our Compliance Standards.
- We may call the phone number you give us about our business, but we never send text messages or make autodialed or prerecorded calls.
- We do not collect biometric information and do not use facial recognition.
- We use cookies only to keep you signed in and keep the Platform secure. No advertising cookies.
- Project street addresses are never shown on the Platform. Visitors who are not signed in see only limited project examples.
- You can ask to see, correct, download, or delete your information at any time by emailing legal@todaycompliant.com.
Contents
- Who We Are and What This Policy Covers
- How the Platform Works
- Information We Collect
- How We Use Information
- What We Do Not Do
- How Information Is Shared
- Third-Party Reviews and Public Business Information
- Cookies and Similar Technologies
- Emails and Phone Contact
- How Long We Keep Information
- How We Protect Information
- Your Choices and Rights
- Children
- Where Information Is Stored
- Third-Party Sites and Services
- Changes to This Policy
- Governing Law and Disputes
- Contact Us
1. Who We Are and What This Policy Covers
1.1 TODAY Compliant LLC, an Illinois limited liability company ("TODAY Compliant," "we," "us," or "our"), operates the website at todaycompliant.com and its related pages, dashboards, and emails (together, the "Platform").
1.2 This Privacy Policy explains what information we collect, how we use and share it, how long we keep it, and the choices you have. It applies to everyone who uses the Platform, including:
- Clients: property owners, property managers, businesses, staffing companies, and others who post projects;
- Contractors: independent businesses that create a profile, submit compliance documents, and hold a membership; and
- Visitors: anyone who browses the Platform without an account.
1.3 This Privacy Policy is part of, and should be read with, our Terms of Service, Compliance Standards, Contractor Membership Agreement, and Project Posting Terms. Capitalized terms not defined here have the meanings given in the Terms of Service.
1.4 This Privacy Policy does not cover information that Clients and Contractors exchange directly with each other outside the Platform, such as by phone, in person, or by personal email. Once you share information directly with another user, that user's own practices apply.
2. How the Platform Works
Knowing how the Platform works makes it easier to see what information is involved:
- A Client posts a project.
- The project appears on the Leadboard™.
- Contractors with an active membership browse the Leadboard and decide for themselves which projects to pursue.
- A Contractor contacts the Client directly.
From that point, the Client and Contractor deal with each other directly. TODAY Compliant does not bid, match, recommend, schedule, supervise, or handle payment between users.
Separately, Contractors submit licensing and insurance documents, which we review against our published Compliance Standards. We track expiration dates, send reminders, and place a Contractor's account on Hold Status when documents or billing lapse.
TODAY Compliant does not hire, employ, recruit, or place any worker. Staffing companies may post projects as Clients, but TODAY Compliant is not a staffing or labor service agency.
3. Information We Collect
3.1 Information you give us
| Category | Examples | From |
|---|---|---|
| Account information | Name, email address, phone number, password (stored in hashed form), account type | All account holders |
| Business profile | Business name, business address, trades and specialties, states served, business description, logo, profile photos | Contractors; Clients that are businesses |
| Compliance documents | Contractor licenses, certificates of insurance, endorsements, certifications, and the details printed on them (such as license numbers, policy numbers, carrier and agent names, coverage limits, and effective and expiration dates) | Contractors |
| Project information | Project title and description, trades needed, project category, budget range, timeline, labor preferences, project location (street address and ZIP code), photos, and the phone number and email address Contractors should use to reach you | Clients |
| Billing information | Billing name, billing ZIP code, and payment card details, which you enter directly into our payment processor's secure form. We receive only limited card details, such as card brand, last four digits, and expiration date. We never receive or store your full card number. | Contractors; Clients placing a card hold |
| Communications | Emails you send us, support requests, and notes of phone calls with our staff | All users |
| Preferences and activity you choose | Saved or favorited projects, notification settings, membership changes (including pausing a membership) | Account holders |
Please do not upload information we do not need. Before uploading documents or photos, remove or cover Social Security numbers, dates of birth, driver's license numbers, bank or card numbers, and health information. Do not include people's faces, vehicle license plates, house numbers, or other people's personal information in project photos. Staffing companies should not include personal information about individual workers in project posts.
3.2 Information collected automatically
- Device and log information: IP address, browser type and version, operating system, referring page, pages requested, date and time of requests, and error information. Our servers record this automatically.
- Session information: a cookie that keeps you signed in and protects your session (see Section 8).
- Approximate location: the general area inferred from your IP address, used for security. We do not collect precise GPS location from your device.
3.3 Information from other sources
- Issuing agencies, insurance carriers, and agents. When we review a Contractor's documents, we may confirm the information with the licensing agency, insurance carrier, or insurance agent named on them, including through public license look-up databases.
- Our payment processor. We receive payment status, limited card details, and fraud-screening results.
- Public business information. We may use publicly available business information, such as a business name, trade, and published business phone number, to invite a contractor business to learn about the Platform.
- Third-party review sources. If we add the review feature described in Section 7, we will receive publicly posted reviews of Contractor businesses from those sources.
- Other users. For example, a Client may report a problem with a Contractor, or a Contractor may report a problem with a project post.
4. How We Use Information
We use information only for the purposes below:
- Operate the Platform: create and manage accounts, host profiles and project posts, run the Leadboard, show project locations on a map, and let users contact one another.
- Review compliance documents: review Contractor documents against our Compliance Standards, record the review date, display Verified status, track expiration dates, send expiration reminders, and apply or lift Hold Status.
- Process payments: charge membership fees, place and release card holds, send receipts, and handle billing problems.
- Communicate with you: send account, security, compliance, billing, and project notices; respond to your requests; and, if you have not opted out, send newsletters and project digests (see Section 9).
- Keep the Platform safe: detect and prevent fraud, spam, abuse, and security incidents; enforce our Terms and content rules; and investigate reports.
- Improve the Platform: fix errors and understand, in aggregate, how the Platform is used.
- Meet legal obligations: keep records required for tax, accounting, and legal purposes; respond to lawful requests; and establish, exercise, or defend legal claims.
If we want to use personal information for a purpose that is materially different from those listed above, we will update this Privacy Policy and, where required, ask for your consent first.
5. What We Do Not Do
- We do not sell, rent, or trade personal information, and we do not share it for cross-context behavioral advertising.
- We do not sell leads. Project information is shown on the Leadboard to Contractors with an active membership. We do not package or sell it to outside companies.
- We do not run background checks or criminal, credit, identity, or driving-record checks on anyone. A Verified status reflects only a document review. It is not a background check and is not an endorsement of any person. See our Compliance Standards.
- We do not send text messages, and we do not make autodialed or prerecorded calls.
- We do not record or monitor phone calls between users.
- We do not collect biometric identifiers or information (such as face geometry, fingerprints, or voiceprints) and do not use facial recognition on any photo.
- We do not match, rank, or recommend Contractors to Clients, and we do not make automated decisions that produce legal or similarly significant effects about you. Hold Status is applied according to the published rules on document and billing status. You can ask us to review any Hold Status decision.
- We do not track you across other websites.
6. How Information Is Shared
6.1 With other users, as the Platform is designed to work
| Information | Who can see it |
|---|---|
| Project post details (title, description, trades, category, budget range, timeline, labor preferences, photos, and ZIP code) | Contractors with an active membership |
| Project examples | Visitors who are not signed in may see examples of real projects in a limited form, such as trade, category, and general area. Examples never include contact details or a street address. |
| Project street address | Not displayed on the Platform. You decide whether and when to share it with a Contractor. |
| Client phone number and email address for the project | Contractors with an active membership who view the project. By posting a project, you agree that these Contractors may see your phone number and email address and use them to contact you about that project. |
| Client name | Not displayed to Contractors. You decide whether and when to share it. |
| Contractor business profile (business name, trades, specialties, states served, description, photos, "member since" and "verified since" dates, contact options) | Anyone visiting the Platform, while the Contractor's membership is active and not on Hold Status or paused |
| Contractor Verified status and the date of our most recent review | Anyone visiting the Contractor's profile |
| Compliance documents themselves (license and insurance files) | Never shown to Clients or Visitors. Only TODAY Compliant staff and the service providers described in 6.2 have access. We encourage Clients to ask the Contractor directly for current licenses and certificates of insurance before any work begins, to confirm the coverage is appropriate for the project. |
| Hold Status or paused membership | Profile is hidden from the directory. Clients who have saved or engaged with that Contractor may be told the Contractor is not currently active. |
Once another user has your contact information, what they do with it is governed by their own practices and by our Terms of Service, which prohibit using it for anything other than the project.
6.2 With service providers
We use outside companies to host, operate, and support the Platform. They receive only the information they need to do their job for us. By contract, they may use it only to provide services to us and may not sell it or use it for their own marketing. Our current service providers are:
| Function | Provider | Information involved |
|---|---|---|
| Hosting, database, and file storage (including uploaded documents and photos) | DigitalOcean, LLC | All information stored on the Platform |
| Platform email delivery (account, compliance, billing, and project emails, newsletters, and digests) | Resend | Email addresses, names, and email content |
| Business email and document handling by our staff | Google LLC (Google Workspace) | Emails and attachments you send to us |
| Maps and location display | Google LLC (Google Maps Platform) | ZIP code or area shown on the map, and your IP address and browser information when the map loads |
| Payment processing and fraud prevention | Stripe, Inc. | Billing and payment information, and device information used to prevent fraud |
We may add or replace providers that perform the same kinds of functions, or that support the Platform in related ways such as security, error monitoring, customer support, or website analytics (see Section 8). Any new provider is bound by the same restrictions. Before a new provider begins receiving personal information for a new category of function, we will update this list and the Last Updated date. You can also ask us for the current list at any time.
Stripe also processes some information under its own privacy policy, for example to meet its legal obligations and prevent fraud across its network. Google's handling of information collected when a map loads is described in Google's privacy policy.
6.3 For legal and safety reasons
We may disclose information if we believe in good faith that it is necessary to: comply with law, a subpoena, a court order, or other legal process; respond to a lawful request from a government authority; enforce our Terms; protect the rights, property, or safety of TODAY Compliant, our users, or the public; or detect and address fraud or security issues. Where the law allows and it is practical, we will notify affected users before disclosing their information in response to a legal demand.
6.4 In a business transfer
If TODAY Compliant is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, information may be transferred as part of that transaction. The recipient will be required to honor this Privacy Policy for information collected under it, or to give you notice and a choice before any materially different use.
6.5 With your direction or consent
We share information when you tell us to, or with your consent for any other purpose we describe when we ask.
6.6 Aggregated information
We may share aggregated or de-identified information that cannot reasonably be used to identify you, such as the number of projects posted in a region. We will not try to re-identify it.
7. Third-Party Reviews and Public Business Information
7.1 We may display reviews of Contractor businesses that are publicly posted on third-party services such as Google. If we do:
- each review will be shown with attribution to its source and will link to or identify that source;
- we will show reviews as posted by the source, and we do not verify them;
- third-party reviews will be labeled as such and kept separate from any ratings or feedback given on the Platform;
- we will display them only as permitted by the source's terms, and will stop displaying them if the source requires it; and
- a Contractor, or the person who wrote a review, may ask us to stop displaying a review on the Platform by emailing legal@todaycompliant.com. Removing a review from the Platform does not remove it from the original source.
7.2 Third-party reviews may include the reviewer's public display name. We do not contact reviewers, and we do not combine their information with any other information we hold.
8. Cookies and Similar Technologies
8.1 What we use today. We use only cookies that are strictly necessary to operate the Platform:
| Type | Purpose | Duration |
|---|---|---|
| Session and authentication | Keep you signed in and remember your session as you move between pages | Until you sign out, or for the sign-in period you choose |
| Security | Protect forms and sign-in against forgery and abuse | Session |
8.2 What we do not use. We do not use advertising, retargeting, or social-media tracking cookies or pixels. We do not currently use analytics cookies.
8.3 Embedded maps. When a page includes a Google map, your browser connects directly to Google to load it. Google receives your IP address and browser information and may set or read its own cookies under Google's privacy policy.
8.4 If we add analytics. We may later use a website analytics service, such as Google Analytics, to understand in aggregate how the Platform is used. Before we do, we will update this Section and Section 6.2 to name the service, describe what it collects, and explain how to opt out. We will configure any analytics service so that it is not used for advertising.
8.5 Your controls. You can block or delete cookies in your browser settings. If you block strictly necessary cookies, you will not be able to sign in.
8.6 Do Not Track and Global Privacy Control. Because we do not sell personal information or track you across websites, these browser signals do not change how we treat your information. We treat a Global Privacy Control signal as a valid request to opt out of any sale or sharing for advertising, which we do not do anyway.
9. Emails and Phone Contact
9.1 Service emails. We send emails needed to run your account, such as sign-in and security notices, document expiration reminders, Hold Status notices, billing receipts and card notices, project renewal and archive notices, and responses to your requests. You cannot opt out of these while your account is open, because they relate to your use of the Platform.
9.2 Newsletters and digests. We may send newsletters, project digests, and Platform news. Each one includes an unsubscribe link, and you can also change your preferences in your account. Unsubscribing does not stop service emails.
9.3 Calls from us. By giving us your phone number, whether in your account, a project post, or otherwise, you agree that TODAY Compliant may call you from time to time about our business. That includes calls about your account, projects, membership, or compliance documents, and calls about our services and offers. Our staff place these calls individually.
- We do not use autodialers or prerecorded or artificial voices.
- We do not send text messages.
- We do not sell your phone number or give it to anyone else for their marketing.
You can ask us to stop sales calls at any time by telling the caller or emailing legal@todaycompliant.com. We will add you to our internal do-not-call list. We may still call you about your account, a project, or a compliance document.
9.4 Calls to businesses. We may call contractor businesses at publicly listed business phone numbers to invite them to learn about the Platform. The same rules apply: individual calls only, no autodialers, no texts, and we honor requests to stop.
9.5 Contact between users. Contractors contact Clients directly by phone or email, using the contact details shown on the project. Those conversations happen outside the Platform. We do not see, record, or keep them.
10. How Long We Keep Information
We keep personal information only as long as needed for the purposes in this Policy. When the periods below end, we delete the information or de-identify it. Deleted information may remain in encrypted backups for up to 60 days, until those backups are overwritten.
| Information | How long we keep it | Why |
|---|---|---|
| Account and profile information | While your account is open, then 24 months after closure | Handling returning users, disputes, and fraud prevention |
| Compliance documents and review records | 7 years after the document's expiration date or account closure, whichever is later | Records of what was reviewed and when, for insurance, legal, and dispute purposes |
| Project posts and photos | While the project is active, then 24 months after it is archived or deleted | Disputes and responses to reports |
| Billing and transaction records | 7 years | Tax and accounting requirements |
| Support emails and call notes | 24 months after the request is resolved or the call is made | Support history and disputes |
| Do-not-call and unsubscribe requests | At least 5 years | So we keep honoring your request |
| Server and security logs | 12 months | Security and troubleshooting |
We may keep information longer if the law requires it, if it is needed to resolve a pending dispute or investigation, or if it is subject to a legal hold.
11. How We Protect Information
11.1 We use reasonable administrative, technical, and physical safeguards appropriate to the information we hold. These include encryption of data in transit (HTTPS), encryption of stored data by our hosting provider, hashed passwords, access limited to personnel who need it, and processing of payment card data by a PCI-compliant payment processor.
11.2 No system is perfectly secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed without authorization. Please use a strong, unique password and tell us right away if you think your account has been compromised.
11.3 If a security breach affects your personal information, we will notify you and any required authorities as required by applicable law, including the Illinois Personal Information Protection Act.
12. Your Choices and Rights
12.1 Regardless of where you live, you may ask us to:
- Access: confirm whether we hold personal information about you and give you a copy;
- Correct: fix inaccurate or incomplete information;
- Delete: delete your personal information, subject to 12.3;
- Download: provide your information in a commonly used electronic format;
- Opt out: stop newsletters, digests, and sales calls; and
- Appeal: reconsider a decision we made about any of these requests.
12.2 How to ask. Email legal@todaycompliant.com from the email address on your account, or write to the address in Section 18. We will verify your identity before acting, usually by confirming your control of the account email. You may use an authorized agent if you give them signed permission and we can verify your identity. We will respond within 45 days, and will tell you if we need up to 45 more days. We will not charge you for a request or treat you differently for making one.
12.3 Limits on deletion. We may keep information we are required to keep by law, need for tax or accounting records, need to resolve a dispute or enforce our agreements, or need to keep the record of a compliance review (Section 10). We will tell you what we kept and why. Deleting your account removes your public profile and project posts from the Platform, but it does not recall information another user already received directly from you.
12.4 Account settings. You can update most profile and project information, notification preferences, and membership status yourself from your dashboard.
12.5 Additional rights under state law. Some state laws give residents specific privacy rights. We offer the rights above to everyone. If a law gives you additional rights, we will honor them.
13. Children
The Platform is for businesses and adults. You must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a child has provided us information, contact legal@todaycompliant.com.
14. Where Information Is Stored
TODAY Compliant is based in the United States and offers the Platform for projects in the United States. We store and process information in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.
15. Third-Party Sites and Services
The Platform may link to or embed third-party websites and services, such as maps, payment forms, license look-up sites, insurance carrier sites, and review sources. We do not control those services, and this Privacy Policy does not apply to them. Please review their privacy policies.
16. Changes to This Policy
We may update this Privacy Policy as the Platform or the law changes. We will post the updated version on this page and change the Last Updated date. If we make a material change, especially one that affects how we share personal information, we will notify account holders by email or by a notice on the Platform before the change takes effect. We will not apply a materially less protective practice to information collected before the change without your consent.
17. Governing Law and Disputes
This Privacy Policy is governed by the laws of the State of Illinois, without regard to its conflict-of-laws rules. Any dispute relating to this Privacy Policy will be resolved as provided in the Dispute Resolution and Arbitration section (Section 20) of our Terms of Service. Please contact us first. Most concerns can be resolved quickly by email.