Legal

Privacy Policy

Effective August 25, 2026  ·  Last updated August 25, 2026
The honest summary

Our business is introducing you to a contractor, so your information goes to a contractor. That is the whole point of the Service, and under California and other state privacy laws it counts as selling your personal information. We tell you that plainly here, and Section 10 explains how to opt out. We send your project to one contractor — not to a pool of buyers — and we do not sell your contact details to unrelated marketers.

What we collectYour name, contact details, property address, and the answers you give about your project — plus device and browsing data from cookies and advertising pixels.
Who gets itThe Blitz marketplace, the one contractor who acquires your appointment, and our service providers. Advertising partners receive device-level data through pixels.
Your controlsOpt out of sale and sharing, request access or deletion, and revoke calls and texts at any time — see Sections 9 through 11.
Global Privacy ControlWe honor GPC browser signals as a valid opt-out of sale and sharing, in every state, for every visitor.

1.Who We Are and What This Covers

This Privacy Policy explains how [REGISTERED LEGAL ENTITY NAME], an Arizona limited liability company doing business as Home Source ("Home Source," "we," "us," or "our"), collects, uses, discloses, sells, and shares personal information.

It applies to theonlyhomesource.com and its subdomains, our estimate and booking flows, our roof-measurement tool, and our emails, calls, and text messages (together, the "Service"). It does not apply to the Blitz marketplace at blitz-live.com, to any contractor, or to any other third party — each has its own privacy practices and its own policy, and you should read theirs.

The Service is intended for users in the United States. We are the controller (or "business," under California law) for the information described here.


2.Information We Collect

2.1 Information you give us

CategoryExamples
Identifiers First and last name, phone number, email address, service address, IP address, and the unique identifiers our systems assign to your request
Property information Street address, home age, number of stories, roof material and pitch, roof or pool measurements, pool size and surface, HVAC system type and age, plumbing fixtures and symptoms, photographs you upload, and shapes you trace on a satellite image
Project information The service you need, urgency, timeline, whether damage is storm- or insurance-related, budget expectations, your approval of an estimate, and the appointment date and arrival window you select
Commercial information Estimates generated for you, appointments requested, and your history of requests with us
Consent records The exact consent language shown to you, the page URL, the date and time down to the second, and the technical details of your submission — we keep these to prove your consent was properly obtained
Communications Emails, texts, and call recordings or notes when you contact us or we contact you

2.2 Information collected automatically

CategoryExamples
Device and connection data IP address, browser type and version, operating system, device type, screen size, language, and referring URL
Usage data Pages viewed, time on page, questions answered, steps completed and abandoned, buttons clicked, and session timestamps
Advertising identifiers Cookie IDs, pixel identifiers, click identifiers passed by ad platforms (such as Meta's fbclid and Google's gclid), and hashed versions of your email or phone used for ad matching
Approximate location Derived from your IP address and from the service address you enter. We do not collect precise GPS location from your device.

2.3 Information from other sources

We obtain property and imagery data from third-party providers, including Google Maps Platform and the Google Solar API, which return aerial and satellite imagery, roof plane geometry, surface area, and pitch for the address you enter. We may also receive information from advertising platforms about how you reached us, and from Blitz or a contractor about the outcome of your appointment.

2.4 What we do not collect

We do not knowingly collect Social Security numbers, driver's license numbers, financial account or payment card numbers, health information, biometric data, precise geolocation, or login credentials. We do not collect sensitive personal information for the purpose of inferring characteristics about you. Please do not send us any of this — if you do, we will delete it. We do not process payments from homeowners at all, so we never handle homeowner payment data.


3.How We Use Your Information

We do not use your personal information to train third-party generative AI models, and we do not permit our service providers to do so.


4.How We Share, Sell, and Disclose Your Information

Say it plainly

Home Source is a lead-generation business. When you approve an estimate and book an appointment, we transfer your name, contact information, property address, and project details to the Blitz marketplace, and from there to the one contractor who acquires your appointment, in exchange for payment. Under California, Colorado, Connecticut, Virginia, Texas, Oregon, and similar state laws, that transfer is a "sale" of personal information. We are telling you before you submit, not after.

4.1 Contractors, through Blitz

What the acquiring contractor receives: your name, phone number, email address, service address, the project details you provided, your estimate range, any photographs you uploaded, the aerial image and measurements of your property, and your selected appointment date and window. The contractor receives this so it can contact you and perform the visit you asked for. Contractors are contractually restricted from reselling, re-brokering, appending, or reusing your information for unrelated marketing — see Section 11 of our Terms of Service — but each contractor is an independent business responsible for its own privacy practices, and we cannot control what a contractor does after it receives your information.

One buyer, not many. We do not distribute a single request to multiple competing contractors, and we do not sell homeowner contact lists to marketers, data brokers, aggregators, or list resellers.

4.2 Service providers

We disclose information to vendors who process it on our behalf and only on our instructions: hosting and content delivery, form and data processing, CRM and email and SMS delivery, telephony and call recording, analytics, mapping and property data, error monitoring, and professional advisors. They are bound by contract to use the information only to provide their service to us.

4.3 Advertising and analytics partners

We use advertising and analytics technologies — including the Meta Pixel and Google's advertising and analytics tags — that let those companies collect device and activity data directly from your browser, and that may involve sending them hashed identifiers such as an email address or phone number for conversion matching. Under California and several other state laws, this constitutes "sharing" for cross-context behavioral advertising and may also constitute a "sale." You can opt out — see Section 10.

4.4 Legal and safety

We may disclose information when we believe in good faith it is necessary to comply with law, subpoena, warrant, or other legal process; to enforce our Terms; to detect or prevent fraud or security issues; to protect the rights, property, or safety of Home Source, our users, or the public; or to establish or defend legal claims. Where lawful and practical, we will try to notify you of a legal demand for your information.

4.5 Business transfers

If Home Source is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of its assets, your information may be transferred as part of that transaction. We will require the recipient to honor this Policy or notify you of any material change.

4.6 Categories disclosed in the last 12 months

In the preceding twelve months we have disclosed, sold, or shared the following categories for the purposes described above: identifiers; property and project information; commercial information; internet and network activity; approximate location inferred from IP or address; audio (call recordings); and inferences drawn from the above. We sold or shared identifiers, property and project information, and internet activity to the recipients named in Sections 4.1 and 4.3. We have not sold or shared the personal information of any consumer we know to be under 16 years of age.


5.Cookies, Pixels, and Tracking Technologies

We and our partners use cookies, pixels, tags, local storage, and similar technologies to run the Service, remember your progress through a form, measure performance, and deliver and measure advertising.

TypeWhat it doesCan you turn it off?
Strictly necessary Loads pages, keeps your place in a form, prevents abuse No — the Service will not work without these
Analytics Tells us which pages and questions work and where people drop off Yes — see Section 10
Advertising Meta Pixel and similar tags that measure ad performance and build audiences Yes — see Section 10
Third-party mapping Google Maps Platform sets its own cookies when a map or measurement tool loads Governed by Google's own controls

Most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies will break the Service.

5.1 Global Privacy Control

We honor the Global Privacy Control (GPC) and other recognized universal opt-out signals. If your browser or extension transmits GPC, we treat it as a valid request to opt out of the sale and sharing of personal information associated with that browser, and we apply it regardless of which state you live in. Because a browser signal is tied to a device and not to a person, it cannot reach information already submitted through a form — for that, use Section 10.

5.2 Do Not Track

Browsers' "Do Not Track" signals have no agreed standard, and we do not respond to them. We do respond to GPC, as described above.


6.Calls, Texts, and Call Recording

When you check the consent box and submit a request, you give prior express written consent for Home Source and the one contractor who acquires your appointment to contact you at the number you provided — including by autodialer, prerecorded or artificial voice, and SMS or MMS. Consent is never a condition of getting an estimate.

We retain a durable record of that consent — the exact language shown, the page, and a timestamp — as required to demonstrate compliance with the Telephone Consumer Protection Act and state telemarketing laws.

To stop: reply STOP to any text, say "stop calling" on any call, click unsubscribe in any email, or write to optout@theonlyhomesource.com. We honor revocations made by any reasonable method within ten business days at the outside, and usually much sooner. We may send one confirmation text and nothing after that. If a contractor is already contacting you, tell the contractor directly as well.

Calls with Home Source may be monitored or recorded for quality, training, and compliance, with notice where the law requires it. Tell us if you would rather not be recorded.


7.How Long We Keep Information

InformationRetentionWhy
Consent and opt-out recordsAt least 5 years after the last contact TCPA claims carry a 4-year federal limitations period; we keep proof longer than that
Lead and appointment recordsUp to 4 years Servicing, disputes, marketplace accounting
Do-not-contact list entriesIndefinitely We must remember not to contact you — deleting the entry would undo the opt-out
Call recordingsUp to 12 months unless a dispute is pending Quality and compliance
Analytics and advertising dataPer the partner's retention schedule Measurement

We keep information longer where a legal hold, investigation, or pending claim requires it. When retention ends, we delete or de-identify.


8.Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, and vendor diligence. That said, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for the security of any device or email account you use to communicate with us. If we become aware of a breach affecting your personal information, we will notify you and any regulator as required by applicable law.


9.Children

The Service is for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. We do not knowingly sell or share the personal information of consumers under 16. If you believe a minor has given us information, write to privacy@theonlyhomesource.com and we will delete it.


10.Your Choices and How to Opt Out

Opt out of the sale and sharing of your information

Use any of these — no account required, no reason required, and we will not treat you differently for asking:

• The Do Not Sell or Share My Personal Information page
• Email privacy@theonlyhomesource.com with "Opt out of sale" in the subject
• Turn on Global Privacy Control in your browser — we honor it automatically
• Write to us at the address in Section 13

Timing matters. Opting out stops future sales and sharing. If a contractor has already acquired your appointment, we cannot claw that information back — but we will notify the contractor of your request and stop any further transfer.

Marketing email: click unsubscribe in any message. Texts and calls: see Section 6. Advertising: you can also opt out through optout.aboutads.info, optout.networkadvertising.org, and your device's ad-tracking settings. Do Not Call: register at donotcall.gov, and tell us directly to add you to our internal do-not-call list.


11.State Privacy Rights

Depending on where you live, you may have some or all of the rights below. As a matter of policy we extend the core rights — access, deletion, correction, and opt-out of sale and sharing — to every U.S. resident who asks, whether or not your state has a law requiring it. Arizona, where we are based, does not currently have a comprehensive consumer privacy statute; we honor these requests anyway.

11.1 How to make a request

Email privacy@theonlyhomesource.com or write to the address in Section 13. Tell us what you want and give us enough information to find your records — typically the phone number, email, or service address you used. We will verify your identity by matching what you give us against what we hold; for sensitive requests we may ask for more. We respond within 45 days, and may extend once by another 45 days with notice.

Authorized agents may submit requests with written permission signed by you, and we may contact you to confirm. A GPC signal is accepted as an opt-out without verification.

11.2 Appeals

If we deny your request, you may appeal within 30 days by replying to our decision or writing to privacy@theonlyhomesource.com with "Appeal" in the subject. We will respond in writing within 45 days (60 in Connecticut and Colorado) explaining our reasoning. If we deny the appeal, you may complain to your state attorney general.

11.3 California — additional disclosures

Under the CCPA as amended by the CPRA: the categories we collect, the sources, business purposes, and categories of recipients are in Sections 2, 3, and 4. We do sell and share personal information as those terms are defined. We do not collect or process sensitive personal information for purposes that would trigger the right to limit. California's "Shine the Light" law (Civ. Code § 1798.83) permits residents to request information about disclosures to third parties for direct marketing; send that request to the privacy address above.

11.4 Nevada

Nevada residents may direct us not to sell certain covered information by writing to privacy@theonlyhomesource.com.


12.Third-Party Services We Rely On

ServiceWhat it does for usTheir policy
Google Maps Platform & Solar API Address lookup, satellite imagery, roof geometry and measurement Google Privacy Policy
Meta (Facebook & Instagram) Advertising delivery and conversion measurement via the Meta Pixel Meta Privacy Policy
Blitz The marketplace where contractors acquire booked appointments blitz-live.com
Hosting & delivery Serving the website and processing form submissions Available on request

Links to third-party sites are provided for convenience. We are not responsible for their content or privacy practices.


13.Changes and Contact

We may update this Policy. We will change the "Last updated" date and, for material changes — such as a new category of recipient or a new purpose — provide additional notice before the change takes effect. Continued use after the effective date means you accept the update.

[REGISTERED LEGAL ENTITY NAME] d/b/a Home Source
[STREET ADDRESS]
[CITY], Arizona [ZIP]

Privacy requests: privacy@theonlyhomesource.com
Stop calls and texts: optout@theonlyhomesource.com
General: hello@theonlyhomesource.com
Phone: [BUSINESS PHONE]

If you have an unresolved concern, you may contact your state attorney general's consumer protection division.