Draft — to be reviewed by counsel before launch
This page is a working draft. It describes how Construction Company Software works today, but it is not final legal text and is not yet in effect. Sections marked [LAWYER: …] are waiting on our attorney.
Privacy Policy
Last updated: Draft — not yet in effect
This policy explains what information Construction Company Software stores, why, who helps us process it, and the choices you have. Short version: we use your data to run the service for your company, we don't sell personal data, and you can export or delete your account at any time.
1. Who this covers
It covers people who visit our website, people who sign up and use the app (contractors and their team), and people our customers work with through Construction Company Software — subcontractors, suppliers, clients and inspectors who get texts, emails or portal links.
For data a contractor adds about their subs and clients, the contractor decides what to add and why; Construction Company Software processes it on their behalf. [LAWYER: controller/processor roles, legal entity of the operator, and jurisdiction-specific notices (e.g. CCPA/CPRA, other US state laws, GDPR if applicable)]
2. What we collect
- Account information: your name, email address, password (stored only as a secure hash) or Google sign-in, company name, phone number, time zone and settings, and your role on the team.
- Project data: projects and addresses, schedules and tasks, daily logs, punch lists, RFIs, submittals, inspections, meetings, timecards, comments and messages.
- Contacts: the subcontractors, suppliers, clients and other contacts you add — names, companies, trades, email addresses, mobile phone numbers, preferred language, and whether each person agreed to texts or opted out (with the date and how).
- Files: photos, plans, documents and attachments you or your contacts upload.
- Money records: estimates, proposals and signatures, budgets, change orders, purchase orders, bills, invoices and payment records. Card and bank details are handled by Stripe.
- Messages: texts and emails sent and received through Construction Company Software, including replies like "1", "YES" or "STOP".
- Usage and device data: sign-in sessions, IP address, browser type, pages used, push-notification subscriptions, and logs we need to keep the service secure and working. [LAWYER: cookies and analytics disclosure — list any analytics tools once chosen]
3. How we use it
- To provide the service: show schedules, send the texts and emails you ask Construction Company Software to send, run reports, sync calendars and accounting if you connect them.
- To bill your subscription and process invoice payments.
- To keep the service secure, prevent abuse and spam, and meet carrier and legal requirements (for example, honoring STOP requests).
- To support you when you contact us, and to send account and billing notices.
- To improve Construction Company Software. [LAWYER: whether aggregated/de-identified usage data is used for product improvement; product email/marketing opt-out]
[LAWYER: legal bases for processing, if required]
4. Texts and phone numbers
Phone numbers are used only to send the schedule and job texts the contractor sends through Construction Company Software, and to process replies. We never use them for marketing and never share them for anyone else's marketing. The first text to a new number asks for permission, and replying STOP stops texts from that contractor. Details: SMS Terms and how subs opt in.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the service providers that deliver the messages. [LAWYER: confirm carrier-required wording]
5. Service providers we use
We use these companies to run parts of Construction Company Software. They may only use the data to provide their service to us.
- Stripe: Subscription billing for Construction Company Software, and online invoice payments your clients make to you. Card details go to Stripe; Construction Company Software never stores full card numbers.
- Twilio: Sending and receiving text messages (SMS) to subcontractors and other contacts: phone numbers and message content.
- Resend or Postmark: Sending email: email addresses and message content (schedule updates, invoices, sign-in links, billing notices).
- Anthropic: AI features, only when your company has them turned on: the text, photos or documents you ask the AI to work with, plus the project data needed to answer.
- Cloud hosting and file storage: Running the app and database, and storing uploaded files and photos (S3-compatible storage).
- Google and Microsoft: Only if you choose to: Google sign-in, and syncing your schedule to Google Calendar or Outlook.
- Intuit (QuickBooks Online): Only if you connect it: customers, vendors, invoices, bills and payments you sync.
- US National Weather Service: Weather forecasts for job sites: we send approximate coordinates of the job address, not names.
[LAWYER: sub-processor list format, where data is stored, international transfers, data processing agreements]
6. AI processing
When AI features are on, the information needed for a request (for example, a photo of a whiteboard schedule, a PDF, or the project data behind a client update) is sent to Anthropic to generate a draft, which you review before anything is saved or sent. An admin can turn AI features off for the whole company in Settings → AI & privacy; when they're off, nothing is sent to an AI provider. [LAWYER: Anthropic data-retention/training terms that apply to our account, and any disclosure required for AI processing]
7. We don't sell personal data
We don't sell personal data, and we don't share it for cross-context behavioral advertising. We share data only with the service providers above, with the contractor whose account it belongs to, when you ask us to (for example, connecting QuickBooks), or when the law requires it. [LAWYER: business transfers, legal requests, and state-law "sale/share" wording]
8. How long we keep it
We keep account data while the account is active. After a trial ends or a subscription is canceled, the account is read-only and data stays available for export. An owner can delete the company account from Settings, which removes its data. Records of text-message consent and opt-outs are kept to prove compliance. [LAWYER: retention periods after cancellation and deletion, backups, consent-record retention period]
9. Security
Data is sent over HTTPS. Passwords are hashed, connection tokens for integrations are encrypted at rest, API keys are stored as hashes, and each company's data is kept separate. Links sent to subs and clients are signed and can be turned off. [LAWYER: security commitments and breach notification]
10. Your choices and rights
- Account users can view and update their profile, export company data, and (owners) delete the account.
- Subs and other contacts can reply STOP to any Construction Company Software text to stop texts, and can ask the contractor who added them to update or remove their details.
- Anyone can email support@construction-company-software.com with a privacy request.
[LAWYER: state privacy rights (access, deletion, correction, opt-out), verification, authorized agents, appeals, response times]
11. Children
Construction Company Software is a business tool and isn't meant for children. [LAWYER: children's privacy statement]
12. Changes and contact
We'll update this page when our practices change and note the date at the top. Questions: support@construction-company-software.com. [LAWYER: notice of material changes; postal address]