Effective September 28, 2026. This policy applies to the public website, trial and checkout, customer application, support and connected services.
Notice at collection: information we collect
We may collect account details, authorized project-member emails, project settings, schedules, budgets, tasks, contractor information, uploaded plans and documents, design selections, permit details, support communications, transaction records, device and security logs, and information you choose to send through connected email or QuickBooks services. For connected QuickBooks companies, we may store encrypted authorization tokens, the company identifier and name, customer and invoice identifiers, hosted payment links, and payment status.
Categories may include identifiers and contact details; account credentials and security events; commercial, subscription and transaction information; internet, device and usage activity; approximate location inferred from an IP address; professional or employment information; customer communications; audio when a call is recorded with required notice; uploaded content; and inferences used to customize requested marketing or workflow recommendations. BuildVecta does not intentionally collect precise geolocation, government identifiers, health records or biometric templates through the standard service.
Authorized customer support access
Authorized BuildVecta personnel may access the operational portions of an account when reasonably necessary to complete setup, provide requested support, diagnose problems, correct records, maintain security, or prevent misuse. Support access is role-limited, time-limited, visibly identified inside the account, and logged. Support personnel cannot view customer passwords, complete payment-card or bank information, authentication secrets, or connected-service credentials.
How information is used
- Provide and secure private project access.
- Save project records, process uploads and deliver requested features.
- Send transactional messages and optional email reminders.
- Process purchases and refunds.
- Create customer and invoice records in a connected contractor-owned QuickBooks company and retrieve invoice or payment status.
- Answer support requests, prevent fraud and improve reliability.
- Meet legal obligations and enforce our policies.
Google user data
If you connect a Google account, BuildVecta requests only the permissions needed for the features you choose. Gmail sending permission is used to send messages that you initiate or approve inside BuildVecta. Gmail read-only permission is used to check the Gmail threads created by those sent messages, identify replies, show the sender, subject, date and reply preview in the Email Center, connect a reply to a matching lead, and pause that lead's automated follow-up. Google Ads permission is used only to connect the Google Ads customer account selected by you; report impressions, clicks and spend; and create, update, pause or manage campaigns only when you request or approve those actions in BuildVecta.
Meta user data
If you connect Facebook or Instagram, BuildVecta stores encrypted authorization tokens and the Pages, linked Instagram professional profiles and Meta ad account you select. BuildVecta uses those permissions to publish approved daily posts, retrieve permitted performance information, and create, update or pause ads when you request or approve those actions. Posts and advertising are sent only to the subscriber-selected destinations. Disconnecting Meta removes the stored connection and stops scheduled publishing.
BuildVecta stores encrypted Google authorization tokens, the connected account email, provider message and thread identifiers, sent-message records, imported reply previews, and the Google Ads customer identifier needed to provide these features. Google user data is not sold, used for advertising, or used to train generalized artificial-intelligence or machine-learning models. It is shared only with infrastructure and security providers acting for BuildVecta when necessary to operate and protect the requested features, or when legally required.
BuildVecta's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Disconnecting Google in BuildVecta revokes Google authorization and deletes the stored connection tokens. You may also revoke access from your Google Account permissions. Saved sent-message records and reply previews remain part of the business project record until you delete them or request deletion through the Contact Us page, subject to legal retention requirements.
Contractor customer and lead data
The subscribing contractor determines what lead, customer, employee, subcontractor, supplier, call, text, email, project, and job information is entered into BuildVecta and why it is used. The contractor is responsible for providing required notices, obtaining consent, honoring communication preferences and privacy requests, limiting access, and ensuring it has a lawful basis to collect and use that information. BuildVecta processes this information to provide the contractor's requested services and does not independently sell it.
Software-assisted features
BuildVecta uses third-party software processing, including OpenAI's business API, for features such as the assistant, plan analysis, takeoffs, permit research, marketing content and design visualizations. Relevant uploaded plans, photos, documents, messages and account context may be sent to the provider when you use those features. Do not upload information you lack authority to share. Verify generated output before use.
OpenAI states that it does not use API inputs or outputs to train or improve its models by default unless a customer explicitly opts in. Its standard API data controls may retain abuse-monitoring logs for up to 30 days, with exceptions stated in its policy; some API features may retain application state longer. BuildVecta does not represent API processing as zero retention or as accessible only to BuildVecta. See OpenAI's API data controls for current details.
Uploads are checked in BuildVecta for supported file formats, matching file signatures and obvious active content before storage. Attachments used for estimates may also be reviewed by our software provider for instructions attempting to redirect the assistant. These checks do not guarantee that a file is free of malware. Files selected for software features may be transmitted over HTTPS to our software provider as described above.
Sharing
We do not sell personal information. We may share the minimum necessary data with hosting, authentication, payment, email, storage, analytics, security and automated-processing providers; with authorized members of your project; when required by law; or during a business transfer subject to appropriate protections.
BuildVecta does not sell personal information for money. Optional advertising measurement may constitute “sharing” or targeted advertising under some state laws. Where applicable, visitors may decline optional tracking through the cookie prompt or submit a privacy request. BuildVecta does not knowingly sell or share personal information of people under 16.
Cookies and advertising measurement
Essential storage supports security and core website functions. With your permission, BuildVecta also uses optional analytics and advertising technologies, including Meta Pixel, to measure visits, understand which promotions lead to signups and show more relevant advertising. These technologies may collect device, browser, page-view, referral and conversion information and share it with the applicable provider. You may accept or decline optional tracking when prompted. Declining does not prevent you from using essential website features.
QuickBooks and payment information
Credit-card and bank information entered on a QuickBooks payment page is collected and processed by Intuit, not BuildVecta. BuildVecta does not receive or store complete card numbers, bank account numbers, security codes, or QuickBooks passwords. Intuit's processing is governed by its privacy statement and applicable QuickBooks and Payments agreements.
Retention and security
BuildVecta uses encrypted Cloudflare database and object storage for account records and uploaded files, and HTTPS for browser connections and server-to-OpenAI API requests. We use reasonable administrative and technical safeguards, but no online service can guarantee absolute security. Account and project data, including saved email records, may be retained while your account is active. Following account closure or a verified deletion request, active-system copies are deleted or de-identified within 30 days unless retention is required for disputes, fraud prevention, accounting, security or legal compliance. Backup copies age out through the ordinary backup cycle.
Your choices
You may update project information, control invited-member permissions, turn optional email alerts on or off, remove files, disconnect email or QuickBooks integrations and request account assistance. Requests to access, correct or delete personal information may be made through the Contact Us page or by calling customer support at (360) 967-9726. We may need to verify the requester's identity and authority. Some records may be retained where legally required or permitted.
Children
The service is intended for adults managing construction projects and is not directed to children under 13.
State privacy rights
Depending on where you live, you may have additional rights concerning confirmation, access, correction, deletion, portability, restriction, objection, opting out of sale, sharing or targeted advertising, limiting certain sensitive-data uses, and appealing a denied request. Authorized agents may submit requests where permitted. BuildVecta will not discriminate for exercising a privacy right. We verify requests and respond within the time required by applicable law.
Business customers and processing roles
For account, billing, security, website and direct-support information, BuildVecta may act as the business or controller. For lead, customer, employee, subcontractor and project information submitted by a subscriber, BuildVecta generally acts as a service provider, contractor or processor under the Data Processing Addendum.
Changes and contact
Updates will be posted on this page with a revised effective date. Privacy questions may be submitted through the Contact Us page.