Who we are
ConstruC builds and operates the ConstruC platform at tryconstruc.com, from San Francisco, California, United States. For the data your firm puts into ConstruC, your firm is the controller and we are the processor: it is your data, held on your behalf, and you can take it out or have it deleted.
What we store
- Account details — name, work email, company role and department, and a hashed password. We never store a password in readable form.
- What your firm creates — drawings and their revisions, takeoff and bills, purchase orders and deliveries, site logs and photos, ledger entries, payroll figures, programme data and equipment records.
- Operational records — who did what and when, because approvals, RFIs and inspections are only worth anything if they are attributable. Audit entries are deliberately hard to erase.
- Technical logs — request and error logs used to keep the service running and to investigate faults.
Who can see it
Every record is scoped to your firm at the query level. One firm cannot read another firm's data, and we test that with live cross-company probes rather than assuming it. Inside your firm, permissions are department-scoped down to individual figures — a design lead does not see finance numbers, and the QS does not see payroll. Executives see across the firm.
Our own staff do not browse customer data. Access to production happens only to operate or repair the service, and we do not sell data or share it for advertising — ever, to anyone.
Where it runs
ConstruC runs on Google Cloud Platform in the United States (us-central1). Databases, file storage and backups live there. If your firm needs data held in a specific jurisdiction, email us before you commit.
These sub-processors are in the path:
- Google Cloud Platform — compute, database, file storage.
- Vercel — serves this website and the app front end.
- Upstash — the queue and real-time message broker.
- Resend — transactional email (verification, invitations, resets).
- Google Vertex AI — the assistant and document extraction.
- Meta (WhatsApp Business) and Slack — only if your firm chooses to connect them.
The assistant and your data
When someone asks the assistant a question, the relevant records are sent to the model to answer it — under that person's own permissions, so it cannot surface something they could not already open. Your data is not used to train anyone's model. Every action the assistant proposes is executed only after a human confirms it.
How long we keep it
For as long as your firm has an account. Ask us to delete it and we remove your firm's data from production within 30 days, and from backups as those backups age out. Records we are legally required to retain are the exception.
Your rights
You can ask for a copy of your data, correct it, or have it deleted — whoever and wherever you are. We extend those rights to every customer rather than only where a statute compels it: California residents under the CCPA/CPRA, people in the EU or UK under GDPR, and firms in Ghana under the Data Protection Act, 2012 (Act 843). Email info@tryconstruc.com and we will action it — no forms.
Cookies
We use a session cookie to keep you signed in. That is what it is for, and it is required for the app to work. We do not run advertising trackers.
If something goes wrong
If a breach affects your firm's data, we will tell you what happened, what was affected and what we did about it — without waiting to be asked.
Changes
If this notice changes materially, we will tell account owners by email rather than quietly editing the page. The date at the top always reflects the current version.