What we collect, and why.

From a contractor or staff member: your name, email address and password (we never see your password in readable form), your company name and logo, and your currency and time zone settings.

About a client: the name, email address and phone number the contractor enters when inviting them, and the account they create when they accept.

The project records you add: milestones, site updates and photos, expenses and receipts, payment records and receipts, and documents such as contracts and drawings. These can include prices and other business or personal information.

Messages we send you: a record of the notifications we created and whether they were delivered.

Technical information: the usual details a web service sees, such as your IP address, browser and the time of a request, kept in logs for security and to fix problems.

• To run the service: show a contractor's projects to the right people, and nobody else.
• To send you what you asked for: sign-in and confirmation emails, notifications and, if you switch them on, WhatsApp messages and the weekly summary.
• To keep the service secure and working, and to answer your questions.

We don't sell your data, we don't show advertising, and we don't use your records for anything other than running BuildPeek for you.

Each person sees only what their role allows. A client sees only their own project, and only what the contractor has chosen to share. Other companies and other clients never see it. Photos, receipts and documents are kept in private storage and opened through short-lived links; the one public file is a company logo.

The few people who run BuildPeek can technically reach the system to keep it working, and only do so to fix problems or to help when you ask.

We use these providers to run the service. They process data only to provide their part of it.

• Supabase: the database, sign-in and file storage.
• Vercel: hosting the website and the app.
• Resend: delivering emails.
• Meta (WhatsApp): delivering WhatsApp messages, only for people who switched them on.
• A content delivery network that serves the small country-flag pictures in the phone-number picker, which means your browser contacts it when that picker is shown.

These providers may store or process data in countries other than your own. We choose providers that protect data, but we can't control how their systems work. We may also share information if the law requires it.

We use only what is needed to keep you signed in and to remember small choices, such as your theme, whether the sidebar is folded and whether a card is hidden. There are no advertising or tracking cookies.

Photos are resized on your phone before upload, and the location information phones put inside photos is removed.

We keep your data while your account exists. If you ask us to delete your company's data, we will do so within 30 days. Copies in logs or provider backups may remain for a short time after that before they are overwritten.

A client's account and the records they confirmed belong to a project that a contractor controls: if the contractor deletes the project, the client's view of it goes too.

• Ask to see, correct or delete the personal information we hold about you.
• Download your records from Settings, under Your data, whenever you like.
• Turn off email and WhatsApp messages in Settings.
• If you are a client and want your information removed, ask your contractor or write to us. Where a contractor holds the project records, we may have to ask them first.

Write to hello@buildpeek.app for any of these. We will answer as soon as we can.

Access to data is enforced where it is stored, not only on screen. No system is perfectly secure. If we find out that your data was exposed, we will tell you promptly.

BuildPeek is for businesses and their clients. It is not meant for anyone under 18.

If we change this policy in a way that matters, we will update the date at the top and tell you in the app or by email.