Privacy Policy

1. Introduction

Buildalytic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered software platform for contractors.

Buildalytic generally determines how website, account and business contact information is processed. For calls, messages, documents and workforce records submitted by a customer, we generally act on that customer’s instructions under its agreement and any data processing addendum. If your employer or contractor supplied your information, contact that organization first. We support its response as required by our agreement and applicable law.

2. Information We Collect

Information You Provide

• Account information: name, email, phone, company name, billing details
• Business information: service areas, project types, pricing, business hours
• Integration credentials: API keys and tokens for third-party services you connect

Information Collected Automatically

• Call audio where recording is enabled, transcripts, operational messages, emails and attachments
• Project updates, daily reports, workforce profile answers and approved workflow records
• Customer data flowing through the system: names, phone numbers, addresses, project history
• Usage data: features used, time spent, actions taken
• Device information: browser type, IP address, device type, operating system

Sensitive Personal Information

Depending on the features you use, we may process certain categories of sensitive personal information as defined under California law, including employee identification numbers, wage and payroll data for certified payroll compliance, and precise geolocation of job sites. This information is processed strictly to provide the services you have requested.

3. How We Use Your Information

• Provide, maintain, and improve our AI-powered contractor software
• Answer calls, capture leads, and communicate with your customers on your behalf
• Prepare reports, drafts and source-linked answers for review
• Coordinate approved follow-ups and operational workflows
• Maintain project context, approvals and audit history
• Generate reports and analytics about your business performance
• Improve service reliability using operational diagnostics
• Detect, prevent, and address technical issues and security threats

4. Automated Decision-Making

Buildalytic uses AI and automated systems for call answering, transcription, document classification, project knowledge and report drafting. These systems assist your operations but do not make final decisions regarding employment, credit, housing, or other legally significant matters without human oversight. You may contact us to request information about the logic involved in any automated processing that affects you.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• After an accepted public enquiry, we can associate the name, business email and company you provide with your website visit in PostHog. This supports campaign attribution and follow-up. We exclude your free-text message and sensitive records from this analytics update. These are submitted details and do not verify ownership of the email address. Campaign context may use tab session storage for up to 30 minutes of inactivity. Browser privacy signals and analytics opt-outs prevent this identity update.
• Service Providers: Third-party vendors who help us operate our platform, including cloud hosting, payment processing, and analytics. All are bound by data protection agreements.
• Integrations: Software platforms you choose to connect, such as Procore, Autodesk, or other construction management tools.
• Legal Requirements: When required by law, subpoena, or other legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

6. Data Retention

Your company sets the recording retention period in its agreement and settings. Transcripts, reports, messages, attachments, consent records and audit logs have separate retention requirements. There is no single retention period for every record or provider.

We retain records for the purposes described in this policy, customer instructions and applicable legal obligations. Consent and suppression records may need to remain after messaging stops so we can honor your choice and demonstrate consent. Your agreement identifies the periods and providers that apply.

On account closure, request an export within 30 days unless your agreement provides a different period. Deletion follows the agreed schedule and applicable legal holds. Provider copies and backups follow their own documented lifecycle, and we confirm the scope of completed deletion on request.

7. Data Security

We use administrative and technical safeguards including encryption in transit and at rest, company access controls and operational logging. No system is completely secure. The controls and architecture for your deployment are documented in your security review. For more detail, see our Security page.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications at any time.
• Automated Processing: Request information about the logic involved in automated processing and, where applicable, opt out.

To exercise any of these rights, contact us at privacy@buildalytic.com. We verify your identity and authority where necessary and respond within the period required by the law that applies. Legal obligations and other permitted exceptions may limit deletion.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act, including the right to know what personal information we collect, request deletion, correct inaccurate data, opt out of the sale or sharing of personal information, and limit use of sensitive personal information.

We do not sell or share personal information as defined under the CCPA/CPRA. Where applicable and technically supported, we honor recognized opt-out preference signals for processing subject to an opt-out right.

10. Additional State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Oregon, Indiana, Kentucky, Rhode Island, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their personal information. Contact privacy@buildalytic.com to exercise your rights under any applicable state law.

11. SMS and Phone Number Privacy

Phone numbers collected for SMS messaging are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes at any time. Consent records may be disclosed to the customer responsible for the program, communications providers needed to operate it, or where required by law. They are not shared for third-party marketing.

Buildalytic sends operational daily field-reporting text messages on behalf of construction companies to the reporters they enroll (report reminders and confirmations only, never marketing). Message frequency varies and is typically a few messages per week. Message and data rates may apply. You can reply STOP at any time to opt out, or HELP for help. See our SMS Consent Policy for full details.

12. Cookies and Tracking

We use cookies and similar technologies to improve your experience. These include essential cookies for site functionality, analytics cookies to understand usage patterns, and preference cookies to remember your settings. You can control cookie settings through your browser. Where applicable and technically supported, we honor recognized opt-out preference signals for processing subject to an opt-out right.

13. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

14. International Data Transfers

Buildalytic serves construction companies worldwide. Managed cloud customer data is hosted in the United States, and communication, speech, AI and connected service providers may process information elsewhere. Worldwide service availability does not mean local data residency. Your agreement identifies applicable providers, processing locations and any required transfer safeguards. Private cloud and local AI arrangements are scoped separately.

15. Call recording and AI data use

Recording is configured for your deployment. Before enabling it, your company and Buildalytic agree the notices, consent steps and handling of callers who decline, based on the locations and rules that apply. A phone number alone does not establish a caller’s location or consent.

Your data is never sold or used to train models for other companies. Training a private model on your data requires a separate agreement and your authorization. Partner platform data remains subject to its own restrictions.

Local AI covers the agreed chatbot models, embeddings and document index on servers you own. Calls, texts, speech processing, connected services, support and backups can still use external providers unless your agreement explicitly replaces those paths.

16. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the Service and update the date at the top of this page.

17. Contact Us

If you have questions about this policy or our data practices, contact us.