Privacy Policy

• No training on your data. We do not use your project content to train AI models, and we do not allow our AI providers to do so.
• No selling or advertising. We do not sell personal information, share it for cross-context behavioral advertising, or track you across other companies' apps and websites.
• Encrypted in transit and at rest.
• You control your data. You can access, export, or delete it (see Section 9).

Most people use construction.live because their employer or a project team invited them. In that case your organization is usually the controller of project content (drawings, reports, recordings, messages), and we process it on the organization's behalf under our agreement with them. We act as the controller for account, device, and usage information we need to run the Service. If you have a question about project content, you can contact your organization or us.

3.1 Information you provide

• Account information: name, email address, password (stored only as a salted hash), phone number (if you enable SMS features or phone verification), company, role, and profile photo.
• Project content: daily logs, reports, time-and-material sheets, schedules, inspections and markups, drawings, documents and files you upload, messages and chats with the AI assistant, meeting recordings, transcripts, and minutes.
• Communications: support requests, feedback, and emails you send to or through the Service.
• Billing information: if you purchase a subscription, payment is processed by Stripe; we receive the billing name, email, and limited card details (such as brand and last four digits), never the full card number.

3.2 Information from the mobile app's device features

The app only uses these features when you choose to, and asks for iOS/Android permission first. You can turn permissions off at any time in your phone's settings.

• Photo metadata: photos can contain embedded metadata (EXIF), such as the time taken and, if location tagging is on for your camera, GPS coordinates. We use the capture time to put photos in the right place in a report. The original file, including its metadata, is stored with your project. The app does not request access to your device's location.
• On-device storage: the app keeps your sign-in token in the device's secure keychain, and caches project data, pending recordings, and photos locally so field capture works offline. This data is removed when you delete the app.
• Home-screen widget: the recording widget stores only the name of the last project you recorded to.

3.3 Information collected automatically

• Usage and device data: IP address, device model, operating system and app version, crash and error diagnostics, and log data such as feature usage and timestamps. We use this to keep the Service secure and reliable.
• App updates: the mobile app checks for updates through Expo's update service, which receives your IP address, platform, and app version to deliver the correct update.
• Website analytics: on our website we use PostHog to understand how visitors use the site (see Section 8). The mobile app does not include advertising or third-party analytics SDKs.

3.4 Information from connected services

If you or your organization connect a third-party account, we access it only to provide the features you turn on:

• Microsoft 365 / Outlook / OneDrive / Teams and Google Workspace / Gmail / Google Drive / Google Calendar: email, calendar events, contacts, and files you authorize, used for features like email drafting and filing, meeting scheduling and notetaking, and document search.
• Procore: project, document, and record data from the Procore projects you connect.
• Video meeting platforms (such as Microsoft Teams and Google Meet): when you invite or schedule the construction.live notetaker, it joins the meeting and records audio, video, participant names, and the transcript.
• API connections you add: credentials you provide are encrypted and used only to make requests you or your AI assistant initiate.

You can disconnect any integration at any time, which stops further access.

• Provide, operate, and maintain the Service, including syncing your work across web and mobile.
• Transcribe recordings, generate meeting minutes, daily reports, and summaries, and answer your requests through AI features.
• Send the emails, text messages, and notifications you or your team request, and service messages (such as sign-in codes, invitations, and security alerts).
• Secure the Service: authentication, two-factor verification, fraud and abuse prevention, and audit logging.
• Troubleshoot, measure performance, and improve reliability.
• Process payments and manage subscriptions.
• Send product news and newsletters only with your consent; you can unsubscribe at any time.
• Comply with legal obligations and enforce our terms.

We do not use your project content for advertising, and we do not make decisions with legal or similarly significant effects about you based solely on automated processing.

construction.live uses third-party AI services to power its AI features. This section explains exactly what is sent, who receives it, why, and the choice you have.

5.1 What data is sent, and why

Data is sent only when you, or a colleague on your project, use a feature that needs it, and only the material that feature needs:

We do not send your password, payment details or device identifiers to AI services.

5.2 Who receives it

• OpenRouter, Inc. (United States), an AI gateway that routes each request to a model provider.
• The model provider for that request: Google (Gemini models), xAI (Grok models), OpenAI, or, in the AI agent, the provider of the model you choose in the model picker.

5.3 How it is protected

• Zero data retention. Our OpenRouter account only routes requests to providers with a zero data retention policy. Those providers process a request to produce a result and do not keep your data afterwards.
• No training. Your data is never used to train AI models, by us or by these providers.
• Encryption. Requests are sent over encrypted (TLS) connections.
• What we keep. The results (transcripts, reports, minutes, answers) are stored in your construction.live workspace under the same protections as the rest of your content, and are deleted with it.
• Equal protection. We only use AI services whose terms protect your data at least as well as this policy does.

5.4 Your permission and how to change it

• In the mobile app, we ask before anything is sent. After you sign in, the app explains what is sent and to whom, and asks whether you allow AI data sharing. Nothing is sent to an AI service on your behalf until you answer.
• You can change your answer at any time in the app under Settings > AI data sharing. The change takes effect immediately.
• If you don't allow it (or turn it off), your voice memos, photos, notes and recordings are still saved to your project, but they are not transcribed, summarised or included in AI-written reports, and the AI agent is unavailable to you.
• On the web, AI features run only when you use them, for example when you send a message to the AI agent or process a meeting.
• Your choice covers AI features you use and your entries in AI-written reports. Content you add to a shared project can still be read by the AI agent when a colleague who has AI data sharing turned on asks it about that project, because that content belongs to the project your organization controls.

5.5 Accuracy

AI output can be inaccurate. Review generated reports, minutes and emails before relying on them.

We share personal information only as described here:

• Your organization and project team: content you add to a shared project is visible to the members of that project, according to the permissions your organization sets.
• People you choose to contact: for example, when you send an email, share a report, or share a link.
• Service providers (sub-processors) who process data on our behalf under contracts that require confidentiality and security:

• Legal and safety: when required by law, subpoena, or court order, or to protect the rights, property, or safety of our users, the public, or us.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information or share it for cross-context behavioral advertising.

construction.live's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to provide the features you enabled, is not used for advertising, is not sold, is not used to train generalized AI models, and is not read by humans except with your consent, for security purposes, or as required by law.

• Strictly necessary cookies keep you signed in and secure the Service. They are always active.
• Analytics cookies (PostHog) help us understand website usage and are retained for up to 12 months. In the EEA, UK, and Switzerland we set them only with your consent; elsewhere they are set by default and you can opt out through your browser controls or by contacting us.
• The mobile app does not use advertising identifiers and does not track you across other companies' apps or websites.

Depending on where you live (including under Canada's PIPEDA and provincial laws, the EU/UK GDPR, and US state laws such as the California Consumer Privacy Act), you may have the right to:

• Access the personal information we hold about you and receive a copy (portability).
• Correct inaccurate information.
• Delete your account and personal information.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Turn off AI data sharing at any time in the mobile app under Settings > AI data sharing (see Section 5.4).
• Opt out of marketing emails (use the unsubscribe link) and SMS (reply STOP).
• Not be discriminated against for exercising these rights.

Deleting your account. In the mobile app, go to Settings → Delete account, or email rahul@construction.live from the address on your account. We will verify the request, delete or de-identify your account and personal information within 30 days, and confirm when it's done. If your account belongs to an organization, project content you contributed to shared projects may remain available to that organization as part of its project records. We will tell you if that applies.

To exercise any other right, email rahul@construction.live. We respond within 30 days. You may also complain to your local data protection authority, including the Office of the Privacy Commissioner of Canada.

• Account and project content: kept while your account or your organization's subscription is active, and deleted or de-identified within 30 days after closure, unless we must keep it longer to meet legal, tax, or accounting obligations or resolve disputes.
• Recordings and transcripts: kept with the project they belong to and deleted along with it, or earlier if you remove them.
• Security and diagnostic logs: kept for a limited period, typically no longer than 12 months.
• Backups: deleted data may persist in encrypted backups for a limited period until they are overwritten.

We use encryption in transit (TLS) and at rest, role-based access controls, two-factor authentication, encrypted storage of integration credentials, isolated sandboxes for AI tasks, and audit logging. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the appropriate authorities of a data breach as required by law.

We are based in Canada, and our service providers process data in the United States and other countries. When we transfer personal information across borders, we protect it with contractual safeguards, including Standard Contractual Clauses where required. Information processed in another country may be accessible to that country's authorities under its laws.

The Service is intended for professional use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy from time to time. We will post the updated version here with a new effective date and, for material changes, notify you by email or in the Service before the changes take effect.

Neuratwin Inc. (construction.live)

Toronto, Ontario, Canada

Privacy Officer: rahul@construction.live