Privacy Policy

• Account information you provide when signing up: email, name, company name, avatar image.
• Business data you enter into the app: estimates, proposals, customer and lead records, project details, pipeline notes, sketches, renderings, and uploaded files.
• Customer contact data you add about your own clients (name, email, phone, address). You are the controller of this data; BuildScape processes it on your behalf.
• Billing information handled by our payment processor (see Third-party processors). BuildScape never sees or stores full card numbers.
• Integration data if you connect an external service (e.g. QuickBooks Online): OAuth tokens and the records you sync through that integration.
• Technical logs generated by our hosting platform: IP address, browser/user-agent, request paths, timestamps, and error traces, used to keep the service reliable and secure.

• Operate the app for you — save your work, restore your session, generate estimates and proposals, sync connected integrations.
• Send transactional messages (password resets, email confirmations, receipts, security notices).
• Provide AI-assisted features you invoke, such as scope-note generation and rendering.
• Diagnose errors, prevent abuse, and improve reliability.
• Comply with legal obligations (tax, accounting, lawful requests).
• We do not sell your data or your customers' data, and we do not use your business data to train third-party AI models.

• Data is stored in a managed Postgres database in the United States, with row-level access rules that scope each account's data to that account.
• All traffic is encrypted in transit over HTTPS/TLS. Data at rest is encrypted by the underlying cloud provider.
• Passwords are hashed by the authentication service; BuildScape never sees plaintext passwords.
• Access to production systems is limited to authorized personnel and requires authenticated access.

BuildScape relies on the following third-party service providers to operate. Each processes only the data required for its function, under its own terms and privacy policy. We do not share your data with third parties except as listed here or as required by law.

• Hosting & backend — Lovable Cloud (running on Supabase, AWS-hosted, US region). Stores your account, business data, files, and technical logs; provides authentication and database access.
• Payments — Paddle (Paddle.com Market Ltd). Acts as merchant of record for subscriptions and credit purchases. Paddle collects billing name, address, email, and payment-method details directly; BuildScape receives only a customer/subscription identifier and non-sensitive metadata (plan, status, last four digits).
• AI features — Lovable AI Gateway, routing to Google (Gemini) and OpenAI models. Processes the prompt content you submit for scope-note generation, renderings, and similar features. Providers under the Lovable AI Gateway are contractually prohibited from using submitted content to train their models.
• Email delivery. Transactional emails (verification, password reset, receipts, notifications) are sent through our hosting platform's email service and, where configured, an SMTP provider you connect.
• QuickBooks Online (Intuit Inc.) — optional integration. Only if you explicitly connect your QuickBooks Online company. When connected, BuildScape exchanges customer, estimate, and invoice data with Intuit at your request via the official Intuit APIs. OAuth tokens are stored encrypted and can be revoked at any time by disconnecting the integration in-app or from your Intuit account. Data shared with Intuit is governed by Intuit's own privacy policy.

Our primary infrastructure is located in the United States. If you access BuildScape from outside the US, your data will be transferred to and processed in the US. Third-party processors listed above may process data in their own regions under their standard contractual safeguards.

• Active accounts: business data is retained for as long as your account is active so you can continue to use and access it.
• Canceled accounts: we retain account and business data for up to 90 days after cancellation to allow reactivation and export, after which it is deleted from primary systems.
• Backups: encrypted backups may retain data for up to 30 additional days before being overwritten on rotation.
• Billing records: invoices and transaction records are retained for at least 7 years to meet tax and accounting obligations.
• Technical logs: retained for up to 90 days for security and troubleshooting, then purged or aggregated.

Depending on where you live, you may have rights under laws such as the GDPR or CCPA, including the right to access, correct, export, or delete your personal information, and the right to object to or restrict certain processing. To exercise these rights:

• Access & update: edit your profile and business data directly in the app.
• Export: generate proposal and estimate PDFs from within the estimator; on request we will provide an export of your account data.
• Deletion: request account deletion by emailing us via the Contact page. We will delete your account and associated business data within 30 days, subject to the retention exceptions above (billing records, backups on rotation, and legal holds).
• Disconnect integrations: revoke QuickBooks Online or other integrations at any time from within the app; this stops further data exchange.
• Complaints: if you are in the EEA or UK, you may lodge a complaint with your local data-protection authority.

BuildScape is a business tool for contractors and is not directed to children under 18. We do not knowingly collect personal information from children.

We may update this policy as the product evolves. Material changes will be announced by email or an in-app notice, and the "Last updated" date at the top of this page will reflect the change.

Questions about privacy, or to exercise any of the rights above? Contact us.