Privacy Policy

This Privacy Policy explains how BuilderPad, Inc. ("BuilderPad", "we", "us") handles information. It covers our websites (builderpad.com and inbuild.ai), the BuilderPad application, BuilderPad Finance (formerly inBuild), and our mobile apps (together, the "Service"). inBuild is now part of BuilderPad, and this policy replaces the separate BuilderPad and inBuild privacy policies.

1. Two kinds of information

Customer Data. Our customers are construction businesses. When they use the Service, they put in their own business information: projects, clients, vendors, invoices, bills, payments, documents, and email they connect. That information may include details about people, such as homeowners, subcontractors and vendor contacts. For Customer Data, we act as a service provider (also called a processor): we handle it on our customer's behalf and only to provide the Service. Our Terms of Service and Data Processing Agreement govern Customer Data. If your information is in a BuilderPad customer's account and you have a question about it, please contact that customer first; we will help them respond.

Information we control. We also collect information for our own purposes: account, contact and billing details of the people who sign up for and use the Service, visits to our websites, and communications with us. This policy mainly describes that information, and explains how we treat Customer Data.

2. Information we collect

Account information. Name, business name, email address, phone number, job title, and login details. If you sign in with Google or Microsoft, we receive your name, email address and profile picture from that provider.

Billing information. Billing contact and address, plan, and payment history. Card details are collected and stored by our payment processors (PayKickstart and Stripe), not by us.

Customer Data. Whatever you and your team put into the Service or connect to it. See Sections 4 to 6 for how we handle email, banking details and AI processing.

Usage and device information. Pages and features used, clicks, IP address, browser and device type, and error reports. We use session-replay tools (Sentry and PostHog) that record how pages are used so we can diagnose problems.

Communications. Emails, support chats, feedback, and calls with us. We may record video calls, such as onboarding and support calls, with notice at the start of the call.

Cookies and similar technologies. We use cookies and similar technologies to keep you signed in, remember preferences, understand how our sites are used, and measure our advertising. You can control cookies through your browser settings.

3. How we use information

We use information to:

• provide, maintain, secure and support the Service;
• process invoices, bills and payments at your instruction;
• send service, security and billing messages;
• understand how the Service is used and improve it;
• create Aggregated Data, as described in Section 7;
• market BuilderPad to businesses, including measuring our advertising (every marketing email includes an unsubscribe link);
• prevent fraud and abuse, and comply with law.

We use Customer Data only to provide the Service to the customer it belongs to, to keep the Service secure, to create Aggregated Data, and as the law requires.

4. Connected email (Outlook and Gmail)

BuilderPad Finance can read invoices and bills from your email so you don't have to forward them. Here is exactly what happens when you connect a mailbox.

How you connect. You sign in with your own Microsoft or Google account and approve access. We use only the access you grant; we never receive your email password.

What we read. We check the Inbox for messages that have attachments, received within a recent window (14 days unless you change it). We skip messages we have already processed. We do not search, read or store other messages or other folders.

What we change. We add a label or category to messages we process (for example "synced") so you can see what was picked up. This is why Microsoft and Google ask you to approve permission to modify mail and mailbox settings: the label is the only change we make. We never send email from your mailbox and never delete your messages.

Google user data. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. We do not use Gmail data for advertising, and we do not use it to train AI models.

What we store. Attachments, which become documents in your account, and details of the message they came from: sender, recipients, subject, date, and the message text that Microsoft or Google provides with the message.

Disconnecting. You can disconnect a mailbox at any time in your settings. We stop reading it immediately and remove our stored access tokens. Documents already imported stay in your account until you delete them or your account is deleted.

You can also forward invoices to your BuilderPad Finance forwarding address instead of connecting a mailbox. Forwarded messages and their attachments are stored the same way.

5. Banking and payment details

To pay vendors, BuilderPad Finance stores vendor payment details, including bank account and routing numbers and tax identification numbers. Vendor bank account and routing numbers are encrypted in our database with a separate encryption key, on top of the encryption our hosting providers apply to all stored data, and they are shown masked in the app. Payments are carried out by our payment partners: Mercoa for electronic payments, Lob for mailed checks, and Plaid to connect bank accounts. Each of them receives only the details needed for the payment.

6. Artificial intelligence

BuilderPad Finance uses AI to read invoices and bills and extract their details, such as vendor, amounts, line items and due dates. Today that AI is provided by Google (Cloud Document AI and the Gemini API). Our Subprocessors page lists every AI provider we use or have approved.

• We do not use Customer Data to train, fine-tune or improve AI models.
• We use AI providers only on terms that prohibit them from using Customer Data to train, fine-tune or improve their models.
• Aggregated Data (Section 7) is not Customer Data. We describe how we may use it below.
• AI results can be wrong. You should review extracted details before approving or paying anything.

7. Aggregated Data

We may combine information from many customers to create statistics, such as typical invoice turnaround times or cost trends by region. We call this Aggregated Data. Before information becomes Aggregated Data:

• each customer's information is de-identified before it is combined with anyone else's;
• it is combined with information from at least 10 unrelated customer companies;
• names and identifying details of customers, their users, vendors, clients, projects, addresses and any individual are removed; and
• it cannot reasonably be used to identify, or infer information about, or otherwise be linked to, any customer, person, vendor or project.

We keep Aggregated Data in that de-identified form, we do not attempt to re-identify it, and we require anyone we share it with to do the same. We may use Aggregated Data for benchmarking, analytics, improving the Service and building new features, including AI features, and we may keep using it after a customer leaves. Aggregated Data is not Customer Data.

8. How we share information

We do not sell personal information. We share information only:

• with our subprocessors and service providers, listed on our Subprocessors page, who process it on our behalf under written agreements;
• with services you connect, such as QuickBooks, Procore or your email provider, at your direction;
• with payment partners, to make payments you instruct;
• for advertising measurement: we share hashed (scrambled) email addresses of BuilderPad users with Meta to measure our ads. Some state laws treat this as "sharing" for advertising; see Section 10 to opt out;
• for legal reasons, when required by law, or to protect rights, safety and the Service;
• in a business transfer, such as a merger or acquisition, under this policy's protections.

9. Security and breach notification

We protect information with encryption in transit (TLS), encryption of stored data by our hosting providers, field-level encryption of vendor bank account and routing numbers (see Section 5), and access limited to staff and contractors who need it. No system is perfectly secure.

If we confirm a security breach affecting Customer Data, we will notify the affected customer within 72 hours of confirming it, and keep them updated as we learn more. We will notify individuals and regulators where the law requires.

10. Your privacy rights

Depending on where you live, you may have the right to know what personal information we hold about you, get a copy, correct it, delete it, and opt out of targeted advertising or the "sharing" or "sale" of personal information. We will not discriminate against you for using these rights.

To use them, email privacy@builderpad.com. We will verify your request and respond within the time the law requires (typically 45 days). To opt out of advertising sharing, email us with the subject "Do not share". An authorized agent may make a request for you with your written permission. If we deny a request, you may appeal by replying to our decision.

If your information is Customer Data held in a BuilderPad customer's account, we will pass your request to that customer and help them respond.

11. Data retention

We keep account information while your account is active and for as long as needed afterward for legal, tax and accounting purposes. We keep Customer Data for as long as the customer's account is active. After an account ends, we delete or return Customer Data at the customer's instruction, as set out in our Data Processing Agreement, except where the law requires us to keep it.

12. Text messages

If a BuilderPad customer uses the Service to text you (for example about a project), they are responsible for having your consent. Reply STOP to stop messages, or HELP for help.

13. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

14. Where information is stored

The Service is intended for customers in the United States. Our main systems are in the United States, and some providers (for example AI and network providers) may process information in other countries.

15. Changes to this policy

We will post changes on this page and update the effective date. If a change materially affects how we handle Customer Data, we will email account owners at least 30 days before it takes effect.

16. Contact us

BuilderPad, Inc.
8480 Honeycutt Rd, Suite 227
Raleigh, NC 27615
privacy@builderpad.com · 919-367-1634

Security issues: security@builderpad.com