Privacy Policy

Last updated: March 2026

1. Information We Collect

We collect the following types of information:

  • Account Information: Email address, display name, and role assigned by your organization's administrator.
  • Project Data: Construction schedule data, activity records, relationships, and other project information you input into the Service.
  • Usage Data: Log-in timestamps, pages visited, and actions taken within the application for security and service improvement.

2. How We Use Your Information

We use your information to:

  • Provide and maintain the Service
  • Authenticate users and manage access control
  • Send service-related notifications
  • Monitor and improve the platform's performance and security
  • Respond to support requests

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

3. Data Storage and Security

Your data is stored in Supabase PostgreSQL databases hosted in the United States. We implement industry-standard security measures including:

  • Encryption in transit (TLS/HTTPS)
  • Encryption at rest for database storage
  • Row-level security policies in the database
  • Role-based access control
  • Rate limiting on API endpoints

4. Data Sharing

We may share your data with:

  • Service Providers: Supabase (database hosting), Vercel (application hosting), Google (Sheets API sync), and Sentry (error tracking) — only to the extent necessary to provide the Service.
  • Legal Requirements: When required by law, court order, or governmental regulation.

5. Data Retention

We retain your data for the duration of your subscription. Upon termination, you have 30 days to export your data. After that period, we will delete your data from our active systems within 60 days. Backup copies may persist for up to 90 days before being purged.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access and download your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability (export in standard formats)

The Service includes a data export feature (JSON/CSV) accessible to administrators.

7. Cookies

The Service uses essential cookies for authentication and session management only. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

8. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates the most recent revision.

10. Contact

For privacy-related inquiries, contact us at: bob@alpinemp.com