Information we process
- Account and company details, roles, billing identifiers, and support communications.
- Client, project, catalog, floor-plan, annotation, cost, and proposal data uploaded by your company.
- Operational logs, trace IDs, device/browser details, provider usage, security events, and audit records.
How information is used
We use information to authenticate users, isolate company data, run the product workflow, process floor plans, generate and deliver proposals, administer billing, prevent abuse, diagnose errors, support customers, and meet legal obligations.
Service providers
Production service providers may include Supabase for database, authentication, and storage; Vercel for hosting; Stripe for billing; Resend for email; Sentry for controlled error monitoring; Upstash for rate limiting and jobs; and configured floor-plan AI/OCR providers. Provider access is limited to the service being performed.
AI processing
Uploaded floor-plan pages may be sent to configured OCR and detection providers to return labels, symbols, and geometry. Expensive fallback providers are disabled unless explicitly configured. Users can continue manual work when AI is unavailable.
Sharing
We do not sell customer data. Information is shared with service providers, authorized company users, proposal recipients through private tokenized links, and authorities or advisors when legally required or necessary to protect the service.
Retention and deletion
Sent proposals and audit logs are retained for up to seven years, cancelled-company data for 90 days, soft-deleted records for 30 days, and logical backups for 90 days unless law or an active dispute requires longer. Privacy and deletion requests are handled manually and verified before action.
Security and choices
Controls include tenant row-level security, private proposal storage, short-lived signed access, role checks, audit logs, rate limits, encrypted transport, and backups. No system is risk-free. Company owners can update account data and may request export, correction, or deletion review.
Contact
Send privacy or deletion requests from an authorized company email to privacy@getconstructa.com. We will verify identity and company authority before disclosing or deleting data.