Privacy Notice

1. Information and purposes

• Account and company information: name, email, sign-in identifiers, company name, logo, phone, and business ZIP, used to create accounts, identify contractors, provide company branding, and support the service.
• Job and customer records: customer/project names, contact details you provide, written scopes, notes, quantities, pricing, labor profiles, estimates, change orders, and uploaded photos/documents, used to prepare, save, and manage your work.
• Approval records: signer names, signatures, decisions, comments, and timestamps, used to send approval links, record decisions, and notify the contractor.
• AI inputs and results: submitted scope, job ZIP, relevant pricing and estimate history, crew details, optional photos, suggestions, and scope-review results, used to provide AI-assisted estimates and ScopeGuard reviews. Review the information you upload and avoid unnecessary sensitive personal data.
• Location: business and job ZIPs support regional pricing. If you choose Use Current Location, device coordinates are processed for a postal-code lookup through OpenStreetMap Nominatim. The estimate stores the resulting ZIP rather than a precise GPS location; you can enter the ZIP manually instead.
• Billing and usage: payment-provider customer and subscription identifiers, subscription status, purchase events, and AI usage/balances, used to manage plan access, prevent duplicate charges or credits, and show remaining estimates.
• Support and technical information: messages you send us, IP addresses, device/browser information, error diagnostics, and usage information, used for support, service operation, troubleshooting, and abuse prevention.

2. Legal bases

Where a legal basis is required, we process information to perform our contract with you (accounts, job tools, approvals, and subscriptions); for legitimate interests in operating, supporting, and securing the service; with consent where required, including optional device location permission; and to meet legal obligations such as accounting and responding to lawful requests. You may decline device location and provide your ZIP manually.

3. Recipients and sharing

Service providers process information necessary for hosting, account authentication, storage, email delivery, diagnostics, and AI processing. BuildAmend uses Lovable Cloud and Lovable integrations, including the Lovable AI Gateway; submitted AI inputs are processed by the AI provider used for the request. Google is used for contractor sign-in, and OpenStreetMap Nominatim handles optional postal-code lookups.

We share relevant information with Paddle, our Merchant of Record, for product sales, subscription management, payments, tax compliance, and invoicing. Paddle's handling of payment information is described in Paddle's Privacy Policy.

Customer approval links share the associated customer-facing record with anyone holding the link. Keep these links confidential. Contractor internal hourly costs are not part of customer-facing estimate records. Change-order links can include the attachments the contractor adds to the order.

We may share information with professional advisers for legal or accounting matters, or authorities when required by law. Providers may process information in countries different from yours; applicable transfer requirements must be addressed where required by law.

4. Retention and deletion

We retain account and job information as needed to provide the service and maintain requested records, and billing, security, or dispute information as needed for legal obligations and legitimate operational purposes. Information will be deleted or anonymized when no longer needed for these purposes.

Deleting an estimate moves it to Recently Deleted so it can be restored; archiving preserves the record. These actions do not constitute permanent erasure of all associated records. Contact us for account deletion or privacy-related erasure requests. Legal obligations, linked approvals, disputes, and backup processes may affect when deletion can be completed.

5. Security

We are committed to appropriate technical and organizational measures to protect personal information, including access controls and safeguards appropriate to the information processed. No service can guarantee absolute security. Protect your account and approval links, and report suspected unauthorized access to our contact address.

6. Cookies and browser storage

Essential cookies and browser storage support sign-in, session continuity, and service operation. Hosting, sign-in, and payment providers may use their own cookies under their policies. You can manage cookies and site data in your browser; disabling essential storage may prevent sign-in or checkout. Nonessential analytics or marketing cookies require consent where applicable and can be managed through any consent controls presented by the relevant provider.

7. Your rights and contact

Depending on your location and applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing; withdraw consent where processing relies on it; and complain to a relevant privacy authority. We respond within the time required by applicable law and may need to verify your identity. These rights may have legal exceptions.

Send requests to Jeremy Jakubowski at jeremy@buildamend.com. Do not include passwords or full payment details. Contractors should ensure they have authority to provide their customers' and workers' information.

8. Notice updates

We may update this notice as the service or applicable requirements change, and will provide notice of material changes where required. The effective date is shown above.