Privacy Policy

Zuma Construction Corporation ("Zuma," "we," "us") is a licensed general building contractor based in Woodland Hills, California (CSLB #1055448, Class B). This policy covers zumaconstruction.com, the forms on it, and the emails we send to people who sign up on it.

Our site links to other services, such as Instagram. Those have their own privacy policies, and this one does not cover them.

We collect information in three ways: what you type into a form, what your browser sends when you visit, and what our email and phone services report back to us.

Our Visit Log

A small script on every page keeps one record of each visit in our database. It records:

• The pages you view, the page you arrived on, and the site or link that sent you.
• How long each page was actually on your screen, and how far down you scrolled.
• Which buttons and links you tap, such as our phone number, our email address or a link to another site. For forms, it notes that you started or sent one, never what you typed.
• Campaign tags and ad click IDs in the link you followed, such as a Google Ads click ID.
• Your IP address and the approximate location our host works out from it (city, region and country), plus your device type, browser, operating system and full browser user agent.
• A random ID kept in your browser, so a return visit shows as visit 2, 3 and so on.
• Signs that a visit was automated, so we can set bots aside.
• How you used the design mockup, for example whether the offer appeared, whether you added a photo and how many changes you made.

The visit log does not hold your name or email address. If you make a design mockup, though, your signup record keeps the ID of that visit, which links the two. You can turn the visit log off under Your Choices.

Google and CallRail

Google Tag Manager loads these tools on our pages:

• Google Analytics reports how people use the site: pages viewed, how they arrived, approximate location and device.
• Google Ads tells us when someone who clicked one of our ads goes on to send us an inquiry. It keeps the ad click ID in a cookie.
• CallRail can show you a phone number that forwards to our office, so we can tell which ad or page led to a call. If you call that number, CallRail receives your phone number and caller ID, the time and length of the call, and how you reached our site.

These companies collect information directly from your browser using cookies and similar technology, and they may collect information about your online activity over time and across other websites. They handle it under their own policies: see Google's Privacy Policy and CallRail's Privacy Policy.

Our Contact Form

When you send the contact form on our site or on our ads page, we receive your name and email address, plus your phone number, property location, project type and message if you include them. The form also carries a label for the page it came from and any ad click ID or campaign tags from the link you arrived on.

Netlify, which hosts our site, receives the form, checks it for spam, records the IP address and browser it came from, and emails a copy to the people who answer inquiries for us. A copy also goes into our database.

Design Mockups and the Design Studio

You can upload a photo of a lot, a home or a room, or use one of our sample photos, and we render a finished version of it. Mockups are concept images made with AI. They are not designs, plans or quotes.

When you add a photo:

• Your browser resizes it and saves a fresh copy before sending it, which leaves out the location and camera details many phones store inside a photo.
• We send it to Anthropic, whose AI tells us whether it shows a room, a home or a lot and lists the features that could be changed, such as cabinets, counters or siding.
• We send it to Black Forest Labs, whose AI renders your mockup and each design change you choose.
• We store your photo and every design privately with Netlify. They can be opened only through the private links we give you, and we never publish them or use them in our marketing.
• We do not use your photos to train AI models.
• Please don't upload photos of people. If a photo shows people, we ask the AI to leave them out.

If you start from your address instead of a photo:

• As you type, we send what you've typed to Esri's address service, which suggests matching addresses. You pick one, and Esri confirms it.
• We may look up public listing photos of that address on Zillow, through Zillow's public search and a data service called Apify, or a street-level photo from Mapillary, an openly licensed street photo service. We use a photo we find only as the private starting point for your mockup, we credit where it came from, and we never publish it. If there's no usable photo, we design a new home for a lot like yours in that area instead.
• We keep the address with your signup and clear it 90 days after you sign up, unless you become a client.

To unlock your mockup and open the design studio, you give us your first name and email address. With your signup we also record the kind of space in the photo, the style of your mockup, how many design changes you made, private links to your studio and mockup, the page you were on, any ad click ID or campaign tags from the link you arrived on, the ID of your visit, your IP address and your browser user agent.

If you ask to talk to our design team from the studio, that request goes through our contact form, described above, and includes the link to your studio so our team can see your design.

Our Emails

We send design mockup emails through Resend: your mockup and studio link first, then two follow-ups. Resend tells us whether each email was delivered, bounced or marked as spam, and whether it was opened or a link in it was clicked, and we keep that on your signup record. Opens are counted with a small image in the email, so they go uncounted if your email app blocks images. Links in our emails are tagged so our visit log can tell that a visit came from one of them.

Before each follow-up, we check whether the same email address has sent our contact form. If it has, we stop the series.

Calls and Emails to Us

If you call us, email us or reply to one of our emails, we keep what you tell us so we can answer you and, if we work together, run your project.

We use the information above to:

• Answer your inquiry and set up a site walk.
• Make your mockup and the design changes you choose, and send the emails you signed up for.
• Understand which pages, ads and searches bring people to the site and what they find useful, so we can improve the site and our advertising.
• Keep out spam and automated signups, for example by checking that an email address's domain can accept mail.
• Keep business records and meet our legal obligations.

These services process information for us:

• Netlify hosts the site, runs the code that receives forms and signups, stores your uploaded photos and designs, stores contact form submissions and emails them to us, works out approximate location for the visit log, and keeps short-term technical logs.
• Airtable is the database that holds our visit log, contact form inquiries and design mockup signups.
• Resend sends our emails and reports on delivery, bounces, opens and clicks.
• Google Tag Manager, Google Analytics and Google Ads load our measurement tools and measure the site and our ads, as described above.
• CallRail tracks calls from the site, as described above.
• Anthropic receives photos you upload, and the mockups we make from them, so its AI can tell us what a photo shows and which features could be changed.
• Black Forest Labs receives photos you upload and the design changes you choose, so its AI can render your mockup and designs.
• Esri receives what you type into the address field, to suggest and confirm addresses. Zillow and Apify receive the address you picked, to find public listing photos of it. Mapillary, when we use it, receives its location, to find a street photo.
• The agency that builds and runs this website for us manages these tools and can see the visit log, inquiries and signups in order to do that work.

Within Zuma, the people who answer inquiries and plan projects see what you send us. We may also disclose information when the law requires it, to protect someone's safety or our legal rights, or to a buyer or successor if our business is sold or reorganized.

We do not sell personal information. We do not give, rent or trade our lists of names, email addresses, phone numbers or property addresses to other companies for their own marketing.

Our own code does not set cookies. It keeps a few small items in your browser's local storage, which stays until you clear your browsing data, or its session storage, which clears when you close the tab:

zuma.vidzuma.vcount Local storage

A random ID for this browser and a count of its visits, so the visit log can show a return visit as visit 2, 3 and so on.

zuma.visit Session storage

The current visit (pages, time on screen, scroll depth, taps) while it is being sent to the visit log.

zuma.notrack Local storage

Present only if you turned the visit log off in this browser.

zuma.offer.donezuma.offer.seen Local storage

Remember that you made a design mockup or closed the offer, so it does not keep appearing.

zuma.offer.session Session storage

Keeps the design mockup offer from appearing more than once per visit.

zuma.offer.pending Session storage

A design mockup that is still rendering or waiting to be unlocked, so it is not lost if you close the offer or change pages.

zuma.studio Local storage and session storage

Your private design studio link, so this browser can reopen your studio. It stays until you clear your browsing data.

zuma_gclidzuma_utm_campaignzuma_utm_term Session storage

The ad click ID and campaign tags from the link you arrived on, so they go with a form you send during the same visit.

zuma_lead_counted Session storage

Keeps our ads thank-you page from counting the same request twice.

Google and CallRail set their own cookies for the purposes described above. You can block or delete cookies and site data in your browser settings; the site and its forms keep working.

Some browsers can send a Do Not Track signal. There is no shared standard for how a website should respond to it, and our site does not currently change what it collects when it receives one. The choices below work whether or not your browser sends the signal.

• Stop our emails. Use the unsubscribe link at the bottom of any of them, or your email app's unsubscribe button. You can also reply "unsubscribe" or write to Info@zumaconstruction.com.
• Turn off our visit log in this browser. Turn it off, or turn it back on. Adding ?notrack=1 or ?notrack=0 to any page address on our site does the same. The setting is saved in your browser, so clearing your browsing data or blocking site storage undoes it. It stops logging from then on; it does not change visits already logged, and it does not affect Google or CallRail.
• Google Analytics. Install Google's opt-out browser add-on.
• Google advertising. Manage how Google uses your activity for ads in My Ad Center, and see how Google uses information from sites that use its services.
• Cookies. Block or delete them in your browser settings.
• Your photos. Use one of our sample photos instead of your own, or ask us to delete your photos and designs at any time.
• See, correct or delete your information. Ask us using the details under Contact Us.

• Uploaded photos, addresses and designs: deleted 90 days after you upload them, unless you become a client, in which case they stay with your project records.
• Design mockup signups: kept until you unsubscribe, or for 12 months after the last email we send you, whichever comes first. If you unsubscribe, we keep only your email address and the date, so you don't hear from us again by mistake.
• Contact form inquiries: kept as part of our business records.
• Visit log: kept while it helps us understand how the site and our advertising are working.
• Google, CallRail and Netlify keep what they collect under their own settings and policies.

The site is served over an encrypted (HTTPS) connection. The keys to our database and email service stay on our servers and never appear in the pages your browser loads. Each unsubscribe link is signed, so it works only for the signup it was sent to, and reports from our email service must carry a valid signature before they can change a record.

No website or database is perfectly secure. If a breach affects your personal information, we will notify you as the law requires.

This site is for adults planning a home project. It is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

If you live in California, you can ask us:

• What personal information we hold about you, where it came from, why we use it, and who we have disclosed it to.
• To correct it, or to delete it. We may keep information the law requires us to keep.
• To opt out of the sale or sharing of your personal information. We do not sell it; to limit how Google uses your activity for advertising, use the Google tools under Your Choices.

We will not treat you differently for making a request. To make one, email Info@zumaconstruction.com or call (310) 757-0659. We will confirm the request comes from you, usually by asking you to reply from the email address you used with us. You can also have an authorized agent ask for you; we may ask for proof that you gave them permission.

California's Shine the Light law (Civil Code Section 1798.83) lets California residents ask which personal information a business has shared with other companies for their direct marketing. We do not share personal information for that purpose.

When we change this policy, we will post the new version on this page and update the effective date at the top. If a change affects how we use information we already hold, we will also say so at the top of this page.

Questions about this policy, or a request about your information: