Privacy Policy
Effective Date: 2026-04-29
Last Updated: 2026-04-30
This Privacy Policy describes how Bullseye Interviews Inc. (the "Company," "we," "us," or "our"), the operator of the website MoldRemovalCheck.com (the "Site"), collects, uses, discloses, and protects information about you when you visit the Site, complete the mold assessment, submit a contact form, or otherwise interact with our services (collectively, the "Services").
By using the Services, you agree to the collection, use, and sharing of your information as described in this Policy. If you do not agree, do not use the Services.
1. About us and our role
MoldRemovalCheck.com is a diagnostic-and-matching service, not a mold remediation contractor. We help homeowners and renters understand their mold situation and connect them, where appropriate, with vetted mold inspection and remediation professionals through the Service Direct pay-per-call marketplace (operated by Sagax Media, LLC d/b/a Service Direct1) and, in some cases, with directly-contracted mold service providers. We are not the contractor, and we do not perform mold assessments, inspections, or remediation work ourselves.
2. Information we collect
We collect the following categories of personal information:
2.1 Information you provide directly
- Contact information at form submission: first name and email address. We do not collect your telephone number through the assessment form.
- ZIP code at the click-to-call surface: when you choose to be matched with a local mold pro from your results page, you enter your ZIP into our click-to-call modal. The ZIP is used to route your call to a participating provider in your area.
- Telephone number (caller ID) at user-initiated call only: when you dial the matched provider's tracked number from the results page, your phone's caller ID becomes visible to the receiving provider through the call-routing infrastructure described in Section 4. We do not collect, store, or initiate contact with your phone number; we never call or text you.
- Mold-assessment responses: answers to the questions in our online assessment, including descriptions of suspected mold location, size, materials affected, moisture history, decision-maker status, and timeline.
- Communications: content of emails, chat messages, or other communications you send to us. Calls you place from the results page may be recorded by the receiving provider and the call-routing platform; recording disclosure is made at the start of the call.
2.2 Information collected automatically
- Device and connection data: IP address, browser type, operating system, device identifier, referral URL, time and date of access, pages viewed, links clicked, and approximate geographic location derived from IP address.
- Cookies and similar technologies: see Section 6.
- Trusted Form / lead-certification data: when you submit a form, TrustedForm (operated by ActiveProspect, Inc.) generates a tamper-proof certificate documenting your consent. This certificate captures the page you saw, the technical details of your device, mouse and keyboard interaction patterns proving you are a human, and the exact text of the consent disclosure as rendered to you. We retain this certificate for evidentiary purposes (see Section 7 on data retention)2.
2.3 Information from third parties
- Service Direct and other partners may share information with us (e.g., call outcomes, contractor matching results) to support service delivery and quality measurement.
- Advertising platforms (Meta, Google, etc.) may share aggregate or hashed information with us regarding ad-driven traffic.
2.4 What we do NOT collect
- We do not knowingly collect medical or health information, biometric data, government identifiers (Social Security numbers, driver's license numbers), or financial account numbers through the Services.
- We do not knowingly collect personal information from children under 16. See Section 9.
3. How we use your information
We use the information we collect to:
- Operate and maintain the Site and the Services;
- Provide the mold-assessment output (the "Resolution Path") personalized to your responses;
- Match you with vetted mold inspection or remediation professionals via Service Direct or directly-contracted providers when warranted by your assessment results;
- Send you the Resolution Path and follow-up educational emails by email only, with your consent collected at form submission. We do not call or text you. If you choose to call a matched provider from the click-to-call surface on your results page, that call is initiated by you, not by us;
- Respond to your questions, requests, and feedback;
- Send you informational and educational email communications (you can unsubscribe at any time);
- Measure and improve the Services, including analytics and content optimization;
- Detect, investigate, and prevent fraud, abuse, security incidents, or violations of our Terms of Service;
- Comply with legal obligations and enforce our agreements.
4. How we share your information
We share your information with the following categories of third parties:
4.1 Service Direct and its participating providers
When your assessment indicates that professional mold inspection or remediation may be appropriate and you choose to call a matched provider from the click-to-call surface on your results page, Service Direct facilitates routing of that user-initiated call through its participating mold inspection or remediation providers in your area. Bullseye Interviews Inc. and Service Direct facilitate the routing; neither initiates outbound contact with you. Your phone number (caller ID) becomes visible to the receiving provider through the routing infrastructure when the call connects. Service Direct's privacy practices are governed by its own Privacy Policy1.
4.2 Directly-contracted mold service providers
In some cases, we may share your information directly with mold inspection or remediation contractors who have signed agreements with us, are licensed in their service area where applicable, and meet our vetting criteria.
4.3 Service providers acting on our behalf
We share information with vendors that help us operate the Services, including:
- Cloud infrastructure (Cloudflare, Supabase, hosting providers);
- Email delivery (Mailgun);
- Call routing and recording on user-initiated calls only (Ringba);
- Lead certification on user-initiated call events (TrustedForm / ActiveProspect);
- Analytics (PostHog, Google Analytics if used);
- AI-assisted content generation (Anthropic, for personalized Resolution Path output — your data is processed within Anthropic's API but, per Anthropic's published policy, is not used to train their models).
These vendors are contractually limited to processing your information solely to provide services to us, and may not use your information for their own marketing.
4.4 Advertising and analytics partners
- Meta Pixel and Conversions API: we use the Meta Pixel and Meta Conversions API to measure ad performance and to optimize ad delivery on Meta-owned platforms (Facebook, Instagram). Data shared with Meta is hashed (email, phone) where possible to limit PII exposure3.
- Google Analytics or similar (if deployed) to understand site usage in aggregate.
- See Section 6 for cookie and tracking detail.
4.5 Legal and protective disclosures
We may disclose information when required by law, subpoena, or other legal process; to enforce our Terms of Service; to protect the rights, safety, or property of the Company, our users, or others; or in connection with an investigation of suspected fraud or other wrongdoing.
4.6 Business transfers
In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred to a successor or affiliate as part of the transaction. We will notify you of any such transfer and any choices you may have.
4.7 What we do NOT do
- We do not sell your information for monetary consideration in the everyday sense of "selling data."
- We do not share your information with third parties for those parties' independent direct-marketing purposes other than the routing described in Sections 4.1–4.2 (which is the core of the Service you requested).
- However, certain disclosures we make for advertising measurement (Section 4.4) and to providers (Sections 4.1–4.2) may qualify as a "sale" or "sharing" under California or other state privacy laws because of how those laws define the terms. See Section 5 for state-specific opt-out rights.
5. Your privacy rights
Depending on the state you live in, you may have specific rights regarding your personal information. We honor these rights regardless of where you reside, but the legal basis differs.
5.1 California (CCPA / CPRA)4
California residents have the right to:
- Know what personal information we collect, the sources, the purposes, and the categories of recipients;
- Access specific pieces of personal information we have collected about them;
- Delete personal information we have collected (subject to legal exceptions);
- Correct inaccurate personal information;
- Opt out of "sale" or "sharing" of personal information, including for cross-context behavioral advertising;
- Limit use of sensitive personal information (we do not collect sensitive personal information as defined under CPRA, but the right is preserved);
- Non-discrimination for exercising privacy rights;
- Opt out of automated decision-making that produces legal or similarly significant effects (effective January 1, 2026 under updated CPPA regulations5). We do use automated processing to score your assessment and route you to providers; this is not a "decision producing legal effects" but you may opt out of automated processing by contacting us as described below.
To exercise these rights, see Section 11. California-specific link: Do Not Sell or Share My Personal Information. This is the legally-required exact phrasing4.
5.2 Other state privacy laws active in 2026
The following states have comprehensive consumer privacy laws active as of the Effective Date of this Policy. Residents of these states have rights generally similar to California's — to know, access, correct, delete, opt out of sale/sharing/targeted advertising, and opt out of profiling that produces legal effects6:
- Colorado (CPA)
- Connecticut (CTDPA, with amendments effective mid-2026)
- Delaware (DPDPA)
- Florida (FDBR — applies to certain large businesses)
- Indiana (ICDPA, effective Jan 1, 2026)
- Iowa (ICDPA)
- Kentucky (KCDPA, effective Jan 1, 2026)
- Maryland (MODPA)
- Minnesota (MCDPA)
- Montana (MCDPA)
- Nebraska (NDPA)
- New Hampshire
- New Jersey (NJDPA)
- Oregon (OCPA)
- Rhode Island (RIDPA, effective Jan 1, 2026)
- Tennessee (TIPA)
- Texas (TDPSA)
- Utah (UCPA)
- Virginia (VCDPA, with amendments effective Jan 1, 2026)
Residents of states not listed above may not have specific statutory privacy rights, but we will honor reasonable requests from any user where practical.
5.3 Universal opt-out signals
We honor universal opt-out preference signals such as the Global Privacy Control (GPC) for users in states that recognize them (California, Colorado, Connecticut, and others). Enabling GPC in your browser will be treated as an opt-out of the sale or sharing of your personal information.
5.4 Authorized agents
You may use an authorized agent to submit a request on your behalf. We will require verification of the agent's authority and may require you to verify your identity directly.
6. Cookies and tracking technologies
The Site uses the following categories of cookies and similar technologies:
| Category | Examples | Purpose |
|---|---|---|
| Strictly necessary | Session, CSRF, load balancing | Required to operate the Site; not opt-outable |
| Functional | Form-state preservation, language | Enable features you request |
| Analytics | PostHog, Google Analytics (if used) | Aggregate usage measurement |
| Advertising / Targeting | Meta Pixel, Google Ads tags (if used) | Measure ad performance, retargeting |
| Lead certification | TrustedForm / ActiveProspect | Document consent at the user-initiated call event on the results page |
You can control cookies through your browser settings. Blocking strictly-necessary cookies will impair the Site. We honor Global Privacy Control signals to opt out of advertising/targeting cookies where required by law.
7. Data retention
We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention practices:
- Lead and contact data: retained for at least 5 years from the date of submission to satisfy general consent recordkeeping standards (5 years provides buffer over typical 4-year statutes of limitations)2.
- TrustedForm consent certificates: retained for 5 years consistent with industry standard for consent evidentiary purposes7. Under our user-initiated-calls-only architecture, certificates are generated at the click-to-call event on the results page, not at form submission.
- Email and marketing-list data: retained until the user unsubscribes, plus a reasonable period thereafter to honor the opt-out and prevent re-subscription errors.
- Call recordings on user-initiated calls: retained for 5 years by the call-routing platform and the receiving provider; recording disclosure is made at the start of the call.
- Aggregate analytics: indefinitely in non-identifiable form.
When personal information is no longer needed, we delete or de-identify it.
8. Security
We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, and destruction. No system is 100% secure, and we cannot guarantee absolute security.
9. Children
The Services are not directed to, and we do not knowingly collect personal information from, children under 16. If you believe a child has provided us with personal information, contact us at felipe@pipenomics.com and we will delete the information.
10. International users
The Services are operated from the United States and intended for users located in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection laws than your country of residence.
11. How to contact us / exercise your rights
To submit a privacy request, ask a question, or revoke consent:
- Email: felipe@pipenomics.com
- Mail: Bullseye Interviews Inc., 3170 Coral Way, Apt 1715, Miami, FL 33145
- Web: submit via [PRIVACY REQUEST URL — if a form is provided]
We will respond within 45 days of a verifiable request (extendable by an additional 45 days where reasonably necessary, with notice). We will not charge you a fee for verifiable consumer requests except where permitted by law for excessive or repetitive requests.
12. Changes to this Policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this Policy reflects the most recent revision. Material changes will be communicated by reasonable means (e.g., a notice on the Site or, where we have your email, an email).
13. State-specific addenda
13.1 California "Shine the Light" (Cal. Civ. Code § 1798.83)
California residents may request information about disclosures of personal information to third parties for the third parties' direct-marketing purposes. To make such a request, contact us as described in Section 11.
13.2 Nevada (NRS Chapter 603A)
Nevada residents may opt out of the sale of certain personal information. To opt out, contact us at felipe@pipenomics.com.
Citations
- Service Direct (Sagax Media, LLC) — Privacy Policy: https://servicedirect.com/privacy/
- ActiveProspect TrustedForm — certificate functionality and 5-year retention: https://activeprospect.com/trustedform/retain/ and https://activeprospect.com/blog/tcpa-consent/
- Meta Conversions API documentation on PII hashing: https://developers.facebook.com/docs/marketing-api/conversions-api/
- California Consumer Privacy Act / California Privacy Rights Act — California Attorney General CCPA resource page: https://oag.ca.gov/privacy/ccpa. Required "Do Not Sell or Share My Personal Information" link phrasing: California Civil Code § 1798.135.
- California Privacy Protection Agency (CPPA) finalized regulations effective January 1, 2026, including automated decision-making opt-out rights: https://www.jacksonlewis.com/insights/navigating-california-consumer-privacy-act-30-essential-faqs-covered-businesses-including-clarifying-regulations-effective-1126
- Comparative summary of state privacy laws (VCDPA, CPA, CTDPA, UCPA, CDPA, OCPA, TDPSA, FDBR, ICDPA, NJDPA, MCDPA, NDPA, KCDPA, RIDPA, MODPA, NHDPA, DPDPA, TIPA, ICDPA-Indiana): https://secureprivacy.ai/blog/us-state-privacy-law-tracker-2026 and https://www.reinhartlaw.com/news-insights/preparing-for-new-and-amended-comprehensive-state-data-privacy-laws-in-2026
- Industry standard for consent-evidentiary retention (5 years to cover 4-year statute of limitations + buffer); reference background from ActiveProspect: https://activeprospect.com/blog/tcpa-consent/