Privacy

BLDFactor is operated by BLDFactor, founded by Dave Lee, based in Reno, Nevada, USA. Contact: hello@bldfactor.com. We are the controller of account data on bldfactor.com. For project data your company puts into BLDFactor, your company is the controller and we process it on your company's instructions.

• Account information. Your name and e-mail address, and if you sign in with Google, the name, e-mail address and profile picture Google shares with us. We do not receive your Google password.
• Project information. Whatever your company puts into its projects: photos, drawings, documents, messages, notes, field captures, and the record of who added or reviewed each item and when.
• Technical information. The usual server logs — IP address, browser type, pages requested, timestamps — kept to run and secure the service and to find problems.
• Messages you send us. If you e-mail hello@bldfactor.com or send feedback inside the app, we keep that message.

We do not run advertising, do not sell personal information, and do not use third-party advertising or tracking cookies on bldfactor.com.

• To sign you in and keep your session secure.
• To show you the projects your company has given you access to.
• To keep the project record straight: who added, reviewed or sealed each piece of evidence, and when. These records are kept deliberately and are not editable after the fact.
• To send transactional e-mail (sign-in codes, notices about your projects). No marketing e-mail unless you ask for it.
• To find and fix problems with the service.

Google sign-in. If you use "Continue with Google", we use the information Google provides only to create and sign you into your BLDFactor account and to show your name in the project record. BLDFactor's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google data for advertising and do not transfer it to anyone except as needed to run the service or as required by law.

AI features. Where BLDFactor uses AI to read or summarize project material, it works on your company's own project information to answer questions about that project. We do not use your project information to train models that serve other customers.

BLDFactor runs on established cloud providers in the United States. Each one sees only what it needs to do its job:

• Vercel — runs the web application and keeps server logs.
• Clerk — handles sign-in and stores account credentials and sessions.
• Neon — the database that stores project records and account references.
• Cloudflare — stores uploaded files (photos, documents) and protects the site.
• Resend — delivers transactional e-mail.
• Better Stack — checks whether the site is up. It sees no customer data.

Data is encrypted in transit and at rest with each provider. If you are outside the United States, your information is transferred to and stored in the United States.

• Your company. People your company has given access to a project can see that project. Your company decides who those people are.
• BLDFactor staff. A small number of people who run the service can access data to operate it, fix problems, or when you ask for help — and only for those reasons.
• Providers above. Only to the extent needed to run the service.
• Law. If we are legally required to, or to protect the rights and safety of users or the public.

We do not sell or rent personal information to anyone.

Project records are kept for as long as your company's account is active, because a construction record that can be quietly changed or lost is not a record. When a company leaves BLDFactor, it can ask for an export and for deletion; we delete or anonymize within 90 days, except where we must keep something for legal, tax or dispute-related reasons. Server logs are kept for a limited period for security and troubleshooting, then discarded. Account information is deleted when the account is deleted.

• You can see and update your name and e-mail in your account settings.
• You can delete your account; your company's project record keeps a reference to actions you took, with your identity revoked.
• You can ask us what personal information we hold about you, ask for a copy, or ask for it to be corrected or deleted, by e-mailing hello@bldfactor.com. We answer within 30 days.
• If you are in a region with specific privacy laws (for example the EU, UK or California), you have the rights those laws give you, and you can exercise them the same way.
• To disconnect Google from your account, remove BLDFactor at myaccount.google.com/permissions.

bldfactor.com uses cookies only to keep you signed in. Your light/dark preference is kept in your own browser's storage, not sent to us. There are no advertising or cross-site tracking cookies.

BLDFactor is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children.

If we change this page in a way that matters, we will update the date at the top and, for signed-in users, say so in the app. Earlier versions are available on request.