Privacy Policy
This policy explains what information Build Flow Draw collects, why, who it is shared with, and the choices you have. the company that operates Build Flow Draw runs the Service. For the project and financial records a company puts into Build Flow Draw, that company decides what is collected and we process it on its behalf.
What we collect
- Account details: your name, email, company name, job title, role and password (stored only as a secure hash).
- Records your company enters: projects, budgets, contracts, change orders, purchase orders, invoices, payments, retainage, lien waivers, draw requests, vendors and their compliance details.
- Files you upload: invoices, receipts, payment proofs, insurance certificates, W-9 forms, contracts and photos.
- Activity: a permanent log of who changed what and when, which construction finance needs for audits.
- Technical data: sign in times, device and browser type, and server logs used to keep the Service secure and working.
How we use it
- To run the Service: show your records, do the calculations, send approvals, receipts and reminders.
- To read scanned documents and fill in forms for you.
- To keep accounts secure, prevent fraud and fix problems.
- To bill for paid plans.
- To tell you about important changes to the Service or these policies.
We do not sell personal information and do not use your records for advertising.
Who we share it with
Only the providers needed to run the Service, each bound to use it only for that:
- Hosting and storage, where the servers and backups live.
- An AI provider that reads scanned documents, when scanning is used.
- An email provider that delivers notifications.
- Payment processors for subscriptions, such as Stripe, Apple and Google.
- Accounting software you choose to connect, such as QuickBooks or Xero, only when you connect it.
People inside your company see records according to the roles your account owner gives them. Lenders or others only receive a draw request or document when someone on your team sends it. We may share information if the law requires it, and we will push back on requests that are not lawful.
How long we keep it
Records stay while your company's account is open. Financial records and the activity log are kept and not edited, because construction payments often need to be shown years later. When an account closes, records are deleted 30 days later, except copies the law requires us to keep and backups, which expire on their normal schedule.
Security
Connections are encrypted, passwords are hashed, access is limited by role, every money action is logged, and the database is backed up every night. No system is perfect; if a breach affects your information we will tell you as the law requires.
Your choices and rights
You can see and correct your account details in Settings, choose which emails you get, and ask for a copy of your information or for it to be deleted. If your information is in a company's account, we may pass the request to that company, since it controls those records.
California residents have the right to know what personal information is collected and why, to see it, correct it and ask for it to be deleted, to limit use of sensitive information, and not to be treated differently for using these rights. We do not sell or share personal information for cross context advertising.
Children
The Service is for businesses and is not meant for anyone under 16.
Changes
If we change this policy in a way that matters, we will tell account owners before it takes effect.
Contact
Privacy questions or requests: use the contact details on the Build Flow Draw website.