Privacy Policy
Last updated: draft — not yet published
1. Overview
This policy describes what information buildBOQ collects, how it's used, and the choices you have about it. It applies to organization admins, the users they add, and clients who open a client-facing proposal link.
2. Information we collect
Account information (name, email, organization) provided at signup or when an admin adds a user; content you create or upload (estimates, documents, client and vendor records); and usage information such as when a client-facing proposal link is opened, including timestamp and device type.
3. How we use information
To provide the service (authentication, storing and displaying your estimates and documents), to power features that depend on activity (proposal view-tracking feeding Sales CRM, seat usage against your plan), and to communicate account and billing notices.
4. Data storage & security
Data is stored in a managed Postgres database and file storage; access is controlled through your organization's roles and policies. We use industry-standard measures to protect data in transit and at rest.
5. Third-party services
We use third-party infrastructure providers for hosting, storage, and (where applicable) payment processing. These providers only receive the information necessary to perform their function and are not permitted to use it for their own purposes.
6. Data retention
Account and content data is retained for as long as your organization has an active account, plus a reasonable period afterward for backups and legal compliance, after which it's deleted.
7. Your rights
You can request access to, correction of, or deletion of your personal information by contacting us. Org admins can remove a user's access directly from User Details at any time.
8. Cookies
We use essential cookies/local storage to keep you signed in and to remember preferences like theme. We don't use third-party advertising trackers.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated to org admins in advance of taking effect.
10. Contact
Questions about this policy can be sent through the Contact page. [Placeholder — confirm the entity name and registered address for this section.]