Privacy Policy

• Account information: your email address (used for magic-link sign-in), your organization's name, legal entity, license number, address, and any logo you upload.
• Workflow content: projects, bid packages, bids, documents, RFIs, contracts, change orders, payments, daily logs, and finance transactions you create.
• Usage data: log entries, IP address, user agent, audit log entries on key state changes.

• To provide and operate the Service;
• To send transactional emails (magic-link sign-in, invitations, notifications);
• To enforce our Terms and prevent abuse;
• To respond to support requests.

We share data with the following processors strictly to operate the Service:

• Supabase — Postgres database, authentication, and storage of user sessions.
• Cloudflare R2 — object storage for uploaded documents and logos.
• Resend — transactional email delivery.
• Stripe — Connect onboarding and payment processing.
• DocuSeal — contract e-signature (when configured).
• Vercel — hosting and edge network.

We retain your data for the lifetime of your account and for up to 90 days after termination to support reactivation. Audit log entries may be retained longer for regulatory and security purposes.

You may request access to, correction of, or deletion of your personal data by emailing privacy@construpilot.com. We will respond within 30 days.

We use strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.

The Service is not intended for users under 18. We do not knowingly collect information from children.

We will notify you of material changes to this policy by email and an in-app notice at least 30 days before the changes take effect.

Questions or requests? Email privacy@construpilot.com.