Privacy Policy

1. Information We Collect

1.1 Personal Information

We collect information that you provide directly to us, including:

• Account Information: Name, email address, phone number, password (hashed and encrypted)
• Company Information: Company name, address, ZIP code, company size, revenue, description, website, and registration type
• Professional Information: Trade specialty, contractor type, organization type, and role
• Profile Information: Profile pictures, avatars, and other profile-related data

1.2 Transaction and Business Information

When you use our procurement services, we collect:

• Bid requests and supplier quotes
• Order details and purchase information
• Invoice and payment information
• Delivery and shipping information
• Project details and documentation

1.3 Payment Information

We collect payment information processed through Square, including:

• Payment method details (tokenized and secured through Square)
• Transaction history and subscription information
• Billing addresses and payment preferences

Note: We do not store full credit card numbers. All payment processing is handled securely through Square's payment infrastructure.

1.4 Location Information

With your permission, we may collect and process location data, including:

• GPS coordinates for delivery tracking
• Location-based services for project management
• Geographic data for supplier matching

1.5 Device and Usage Information

We automatically collect certain information about your device and how you interact with our Service:

• Device information (model, operating system, unique device identifiers)
• App usage data and analytics
• Performance metrics and error logs
• Network information and connection status
• Screen views and user interactions

1.6 Files and Documents

We collect files and documents you upload to the Service, including:

• Project documents and specifications
• Images and photos
• Invoices and receipts
• Other business-related documents

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and manage your account
• Connect contractors with suppliers and facilitate procurement
• Send you notifications, updates, and important information
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms
• Analyze usage patterns to improve user experience
• Personalize your experience and provide relevant content
• Process payments and manage subscriptions

3. How We Share Your Information

3.1 Service Providers

We share your information with third-party service providers who perform services on our behalf:

• MongoDB: Cloud database hosting and data storage
• Square: Payment processing and transaction management
• Twilio: SMS messaging and phone verification services
• SendGrid: Email delivery and communication services
• AWS S3: File storage and document management
• Sentry: Error tracking and performance monitoring
• QuickBooks: Accounting integration (if enabled)

3.2 Business Partners

We may share limited information with suppliers and contractors to facilitate transactions and procurement activities within the platform.

3.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Secure password hashing and authentication
• Role-based access control (RBAC)
• Regular security audits and updates
• Secure token storage using Expo SecureStore
• Biometric authentication support

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our Service to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records as required by law

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.

6. Your Rights and Choices

You have certain rights regarding your personal information, which may vary by state:

6.1 Access and Portability

You can access, update, or request a copy of your personal information through the app settings or by contacting us.

6.2 Deletion

You can request deletion of your account and personal information by contacting us at the email address below.

6.3 Correction

You can update your personal information directly in the app or by contacting us.

6.4 Opt-Out

You can opt-out of certain communications, such as marketing emails, through your account settings or by contacting us.

6.5 Location Services

You can control location permissions through your device settings. Disabling location services may limit certain features of the app.

6.6 Push Notifications

You can manage push notification preferences through your device settings or the app settings.

7. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

8. Data Storage and Processing

Your information is primarily stored and processed in the United States. Some of our third-party service providers may store or process your information in other countries. By using our Service, you consent to the transfer, storage, and processing of your information in the United States and other countries where our service providers operate.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell about you.
• Right to Delete: You have the right to request deletion of your personal information that we have collected.
• Right to Opt-Out: You have the right to opt-out of the sale of personal information. We do not sell your personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Limit Use: You have the right to limit the use of sensitive personal information.

To exercise your California privacy rights, please contact us at the email address provided in the "Contact Us" section below. We will respond to your request within 45 days.

10. Other State Privacy Rights

Residents of certain other U.S. states may have additional privacy rights under state-specific laws, such as:

• Virginia (VCDPA): Right to access, delete, correct, and opt-out of certain data processing
• Colorado (CPA): Right to access, delete, correct, and opt-out of targeted advertising
• Connecticut (CTDPA): Right to access, delete, correct, and opt-out of sale of personal data
• Other States: Various states have enacted or are considering privacy laws that may provide similar rights

If you are a resident of a state with specific privacy laws, you may contact us to exercise your rights under those laws.

11. Do Not Track Signals

Some web browsers and mobile operating systems include a "Do Not Track" (DNT) feature or setting that you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Our Service does not currently respond to DNT browser signals or mechanisms.

12. Third-Party Services

Our Service contains links to third-party websites and integrates with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies:

• Square: Square Privacy Policy
• Twilio: Twilio Privacy Policy
• SendGrid: SendGrid Privacy Policy
• AWS: AWS Privacy Policy
• Sentry: Sentry Privacy Policy
• MongoDB: MongoDB Privacy Policy

13. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

14. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and, if the changes are significant, we may provide additional notice (such as adding a statement to our homepage or sending you an email notification). You are advised to review this Privacy Policy periodically for any changes.

15. Contact Us