Privacy Policy

1. Who we are

SitePulse ("we", "us", "our") is a construction management platform. Our registered business address and contact details are available at privacy@sitepulse.app.

2. What data we collect

We collect the following categories of data when you use SitePulse:

• Account data: your name, email address, company name, and role when you create an account.
• Project data: RFIs, deficiencies, submittals, daily logs, photos, documents, schedule tasks, change orders, and any other content you create inside the platform.
• Usage data: pages visited, features used, and actions taken within the app (used to improve the product).
• Device data: browser type, device type, operating system, and IP address (collected automatically by Firebase).
• Billing data: if you subscribe to a paid plan, payment details are processed by Stripe and never stored on our servers. We receive only a customer reference ID and subscription status.

3. How we use your data

• To provide and operate the SitePulse service
• To send transactional emails (assignment notifications, RFI responses, account alerts)
• To process your subscription and manage billing
• To monitor for errors and improve the platform
• To comply with legal obligations

We do not use your data for advertising or sell it to third parties.

4. Data storage and security

Your data is stored on Google Firebase (Firestore and Firebase Storage), hosted in your chosen region. Firebase is SOC 2 Type II certified and uses encryption at rest and in transit.

We use Firebase Authentication for account security. Passwords are hashed by Firebase and never accessible to us. We recommend enabling two-factor authentication on your Google account if you use Google Sign-In.

5. Data sharing

We share data only with the following sub-processors, strictly to operate the service:

• Google Firebase — database, file storage, and authentication
• Stripe — payment processing
• Resend — transactional email delivery
• Sentry (optional) — error monitoring

We do not share your data with any other third parties. We will never sell your data.

6. Your rights

Depending on your location, you may have rights under GDPR, CCPA, PIPEDA, or other applicable laws, including:

• Access: request a copy of the data we hold about you
• Correction: update inaccurate data via your profile settings
• Deletion: request deletion of your account and all associated data
• Portability: export your project data using the ZIP export feature in the app
• Objection: object to certain processing activities

To exercise any of these rights, email privacy@sitepulse.app. We will respond within 30 days.

7. Data retention

We retain your account and project data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

Billing records are retained for 7 years as required by financial regulations.

8. Cookies

We use only functional cookies and browser local storage to maintain your session, remember your project, and store your preferences. We do not use advertising cookies or third-party tracking pixels.

9. Children's privacy

SitePulse is designed for professional use and is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe we have inadvertently collected such data, contact us immediately.

10. Changes to this policy

We may update this policy as our product evolves. We'll notify you by email and in-app banner for material changes. Continued use of the service after notification constitutes acceptance.

11. Contact

For any privacy questions or to exercise your rights: privacy@sitepulse.app