Information we process
- Account and company details, roles, billing identifiers, and support communications.
- Client, project, catalog, floor-plan, annotation, cost, and proposal data uploaded by your company.
- Operational logs, trace IDs, device/browser details, provider usage, security events, and audit records.
How information is used
We use information to authenticate users, isolate company data, run the product workflow, process floor plans, generate and deliver proposals, administer billing, prevent abuse, diagnose errors, support customers, and meet legal obligations.
Service providers
Production service providers may include Supabase for database, authentication, and storage; Vercel for hosting; Stripe for billing; Resend for email; Sentry for controlled error monitoring; and Upstash for rate limiting and jobs. Floor-plan pages are analysed by Constructa’s own service rather than a third-party AI or OCR provider. Provider access is limited to the service being performed.
Plan analysis
Uploaded floor-plan pages are read by Constructa’s own plan-analysis service to return printed dimensions and plan text. Pages are not sent to any third-party OCR, detection, or AI model provider, and pages are held only for the length of the request. Users can continue manual work when plan analysis is unavailable.
Sharing
We do not sell customer data. Information is shared with service providers, authorized company users, proposal recipients through private tokenized links, and authorities or advisors when legally required or necessary to protect the service.
Retention and deletion
Sent proposals and audit logs are retained for up to seven years, cancelled-company data for 90 days, soft-deleted records for 30 days, and logical backups for 90 days unless law or an active dispute requires longer. Privacy and deletion requests are handled manually and verified before action.
Security and choices
Controls include tenant row-level security, private proposal storage, short-lived signed access, role checks, audit logs, rate limits, encrypted transport, and backups. No system is risk-free. Company owners can update account data and may request export, correction, or deletion review.
Contact
Send privacy or deletion requests from an authorized company email to privacy@getconstructa.com. We will verify identity and company authority before disclosing or deleting data.