Legal

Privacy Policy

Effective Date: August 2026

Last Updated: August 2026

1. Who We Are

Builtly operates the Builtly platform at builtly.io, construction management software built for custom home builders and general contractors running 1 to 20 active job sites.

For privacy inquiries contact us at: legal@builtly.io

2. Information We Collect

We collect information you provide directly and information generated through your use of the platform.

Information you provide:

• Account information: name, email address, phone number, company name, contractor license number
• Project data: job names, addresses, square footage, budget figures, phase information, draw schedules
• Team information: names and email addresses of invited team members and subcontractors
• Communications: support requests, feedback, and bug reports submitted through the platform
• Payment information: processed securely through Stripe (we never store raw card data)

Information generated through use:

• Job site photos uploaded to the platform, organized by project and phase
• Draw request documentation and associated lien waiver records
• Phase completion logs and status updates
• Subcontractor assignment and communication records
• Activity logs for audit trail purposes

Information collected automatically:

• IP addresses and approximate location (city/region level only)
• Browser type and device information
• Usage patterns and feature interactions
• Error logs for debugging purposes

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Builtly platform and its features
• Process draw requests and generate bank-submission packages
• Facilitate team collaboration and subcontractor coordination
• Send transactional emails including team invites, draw status updates, and client portal notifications
• Provide customer support and respond to your inquiries
• Monitor platform security and prevent unauthorized access
• Comply with legal obligations

We do NOT use your data to:

• Train AI or machine learning models without explicit consent
• Profile your business for advertising
• Share with competitors or industry data aggregators
• Analyze your proprietary bid data or pricing strategies for any commercial purpose

4. Data Sharing and Third Parties

We share your data only with trusted service providers who help us deliver the platform:

We may disclose information when required by law, court order, or government request, or to protect the rights and safety of Builtly users.

5. Data Retention

We retain your data for as long as your account is active and for up to 90 days after account deletion to allow for dispute resolution and legal compliance.

Draw packages, lien waiver records, and financial documentation are retained for 7 years to support your compliance with construction industry record-keeping requirements.

You may request deletion of your personal data at any time (see Section 8).

6. Data Security

We implement enterprise-grade security measures to protect your information:

• All data in transit is encrypted using TLS 1.3
• All data at rest is encrypted using AES-256
• Database-level Row Level Security (RLS) ensures complete isolation between organizations. Your data is never accessible to other companies on the platform.
• Authentication tokens are hashed using SHA-256 and subject to rate limiting
• Access is governed by role-based permissions. Field crew cannot access financial data.
• Regular security audits and penetration testing

For our complete security overview, visit builtly.io/security

7. Cookies and Tracking

We use minimal, essential cookies only:

• Session cookies: Required to keep you logged in during your session
• Preference cookies: Remember your display settings

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics that share your data with advertisers.

8. Your Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

To exercise any of these rights, contact us at legal@builtly.io with the subject line "Privacy Rights Request." We will respond within 45 days.

9. Children's Privacy

Builtly is intended for business use by adults aged 18 and older. We do not knowingly collect personal information from individuals under 18 years of age. If we discover we have collected information from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy as our platform evolves. Material changes will be communicated via email to account holders at least 30 days before taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.

11. Contact Us

For privacy questions, rights requests, or data concerns:

• Email: legal@builtly.io
• Response time: Within 5 business days
• Mailing: Builtly, Gulf Shores, AL