1. Overview
BuildLedger Pro ("BuildLedger Pro," "we," "us," or "our") provides project and financial management tools for construction contractors, including a web-based API, a web application, and a companion mobile app. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, create a workspace, or otherwise use our services (collectively, the "Services").
By using the Services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Services.
2. Information We Collect
We collect information in the following ways:
- Account information: name, email address, phone number, password (stored hashed), and workspace/company details you provide when registering.
- Project and financial data you enter: project details, budgets, expenses, wallet transactions, labour contracts and work entries, contractor and supplier details, material quotations and purchases, supplier payments, tags, tasks, and any files or receipts you upload.
- Team and role information: workspace memberships, roles, and permissions assigned to users you invite.
- Device and usage information: IP address, browser or device type, operating system, app version, and general usage patterns (e.g. which features are used) collected automatically to operate and improve the Services.
- Communications: information you provide when you contact us for support or feedback.
We do not intentionally collect sensitive categories of personal data (such as health information, government identifiers, or payment card numbers) unless you choose to include them in files, notes, or fields you upload, in which case you are responsible for ensuring you have the right to store that information.
3. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Services, including project, expense, labour, and supplier tracking features;
- Authenticate users and enforce workspace, role, and license-based access controls;
- Generate project backups and enable file storage and retrieval;
- Respond to support requests and communicate service-related notices;
- Monitor, troubleshoot, and improve the performance, reliability, and security of the Services;
- Detect, investigate, and prevent fraud, abuse, or unauthorized access.
We do not sell your personal data, and we do not use the project or financial data you enter to serve third-party advertising.
4. Legal Basis for Processing
Where applicable data protection law requires a legal basis for processing (such as under the GDPR), we rely on: performance of a contract with you (providing the Services you signed up for), our legitimate interests (such as securing and improving the Services), compliance with legal obligations, and, where applicable, your consent.
5. How We Share Information
We share information only in the following circumstances:
- Within your workspace: data you enter is visible to other members of your workspace according to their assigned role and permissions.
- Service providers: we share information with vendors who help us operate the Services (e.g. hosting, cloud storage, email delivery), under contractual obligations to protect it and use it only for the purposes we specify.
- Connected third-party accounts: if you connect a third-party account (such as Google Drive) for project backups, the relevant project data is transferred to that account under your authorization; that provider's own privacy policy governs their handling of the data once transferred.
- Legal requirements: if required to comply with applicable law, regulation, legal process, or a valid governmental request.
- Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality arrangements.
6. Third-Party Services
The Services may integrate with third-party platforms you choose to connect, such as Google Drive for automatic project backups. When you connect such a service, you authorize us to access and transfer the relevant data on your behalf. We are not responsible for the privacy practices of third-party services; please review their privacy policies before connecting them.
7. Data Storage & Security
We use administrative, technical, and physical safeguards designed to protect your information, including encrypted connections (HTTPS/TLS) for data in transit, access controls scoped by workspace and role, and hashed storage of passwords. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.
8. Data Retention
We retain account and project data for as long as your workspace remains active, or as needed to provide the Services. If you delete a project, contractor, or other record, associated data may be retained for a limited period in backups or logs before being permanently removed. We may retain and use information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
9. Account Deletion
You can request deletion of your account at any time from within the app (Account Settings) or by contacting us. Submitting a request does not delete anything immediately — your account enters a 30-day grace period first.
- During the 30-day window, your data is untouched and nothing is permanently removed.
- If you log back in at any point during the grace period, the deletion request is automatically cancelled and your account continues normally — no data is lost. You can also cancel the request directly without waiting to log in.
- If the 30 days pass with no cancellation, we permanently delete your user account and every workspace you own, along with all projects, expenses, labour, material, and supplier data scoped to those workspaces.
- If you were only a member of someone else's workspace (not the owner), deleting your account removes your membership and access to it, but does not delete that workspace or its data — it remains the owner's record.
- Project backup files you synced to your own connected Google Drive are not deleted by us as part of this process, since that storage belongs to you; you can remove them directly from your Drive at any time.
We may retain limited information beyond the grace period where required to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements.
10. Your Rights & Choices
Depending on your location, you may have the right to access, correct, export, or delete personal information we hold about you, and to object to or restrict certain processing. You can update most account and profile information, and request or cancel account deletion, directly within the app. For other requests, contact us using the details below and we will respond within a reasonable timeframe.
Workspace owners and administrators are responsible for managing the personal data of members they invite into a workspace, including removing access when appropriate.
11. Children's Privacy
The Services are intended for business use by contractors, project managers, and their teams, and are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.
12. International Users
Your information may be processed and stored in countries other than the one in which you reside, including countries whose data protection laws may differ from those of your jurisdiction. Where required, we take steps intended to ensure appropriate safeguards are in place for such transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. We will update the "Last updated" date above and, for material changes, provide additional notice where appropriate. Continued use of the Services after changes take effect constitutes acceptance of the updated policy.