This policy explains what information BuildFocus (the "Service") collects, how it is used and who it is shared with.

Account information: your name, email address, role and company, and your password (stored in protected, hashed form by our authentication provider).

Business information you enter: projects, customer names, email addresses, phone numbers and addresses, estimates, proposals, invoices, change orders, draw schedules, subcontracts, vendor records, time clock entries, daily logs, photos, files and electronic signatures.

Technical information: basic information needed to keep you signed in and keep the Service secure, such as session cookies.

To provide the Service, authenticate users, send emails you request (such as proposals, invoices and change order approvals), keep the Service secure and fix problems. We do not sell your information.

Data is separated by company. People in your company can see information based on the role you assign them. Customers see only the documents you send them, through private links.

We use trusted providers to run the Service: Supabase (database, sign-in and file storage), Vercel (hosting) and Resend (email delivery). They process information only to provide their services to us.

You can ask to access, correct or delete your information, or have a company's data exported or deleted. Customers whose information was entered by a contractor should contact that contractor first.

We use access controls and encryption in transit to protect information. No system is perfectly secure. We keep information while an account is active and as needed for legal and business record-keeping, then delete or anonymize it.

We may update this policy and will change the effective date above when we do.