Privacy Policy
Buildore LLC · Last updated September 15, 2026
1. Who we are
Buildore is construction project management software operated by Buildore LLC, a Florida limited liability company.
Two kinds of people use it, and the difference matters legally:
Customers— general contractors and their office staff, who hold an account with us. For your own company's data, you decide what happens to it and we act on your instructions.
Subcontractors — people invited by a contractor they already work for. For your personal information, the contractor who invited you decides, and we process it on their behalf. You still have every right in Section 9, and you can exercise all of them with us directly.
2. What we collect, and why
We collect what the product needs to work. Nothing is collected for advertising, and nothing is sold.
From your account
Name, email, phone number, company name, language preference, and your password — stored as a salted hash, so we never see it.
From running your jobs
Project names, clients, addresses, budgets, contract values and schedules. Sections of work and who's assigned. Milestones, due dates and amounts. Submissions with notes and photographs. Approvals and denials with reasons. Payments recorded with method and reference. Retainage withheld and released. Late penalties and early bonuses. Change orders. Expenses. Permits, their status history and dated check-in notes. Inspections and their results.
Sensitive documents — named explicitly, because generic policies hide these
Certificates of insurance. W-9 forms. Licences. Bonds.
A W-9 contains a taxpayer identification number, which for a sole proprietor is usually a social security number. We store these because subcontractors upload them and general contractors are required to collect them. They are visible to the company that requested them and to nobody else.
Photographs
Site photographs uploaded by anyone on a job. These may contain people, faces, vehicles, licence plates and addresses.
We do not run facial recognition, image analysis or any biometric processing on photographs. They are stored and displayed, nothing more.
Contractor reliability scores
We calculate a score for each subcontractor from their delivery history, approval rate, inspection outcomes and whether their required documents are current.
This is an automated assessment of a named individual's work, and it is visible to the company that hires them. Section 10 explains it fully, including how to challenge it.
Notes written about people
A general contractor can write private notes about a subcontractor. These are visible within that contractor's company and not to the subject of the note.
Activity and technical records
An audit log of actions taken, with the person, the time and their IP address. Your browser and device type. Pages visited.
When you contact us
Whatever you write, and your address so we can reply.
3. What we use it for
To run the product for you: show you your projects, calculate payments, retainage, penalties and bonuses, send the notifications you've asked for, keep the record that makes a job auditable a year later, provide support, and keep the service secure and working.
That's the complete list. If we ever want to use your data for something not on it, we'll ask you first.
4. What we never do
We never sell your personal information, and we never share it for advertising or for anyone else's marketing.
We never use your data to train artificial intelligence models. See Section 6.
We don't look at your content, except where it's genuinely necessary — to fix a problem you've reported, to investigate suspected abuse of the service, or where the law requires it. Accessing a customer's data for any other reason isn't something we do.
We don't build profiles about you for anyone other than the company you work with.
5. Who else touches your data
Every company, by name, and what each one sees.
| Service | What it does | What it can see |
|---|---|---|
| Xano | Our database and backend, in the United States | All account and project data |
| Cloudflare | Stores every uploaded file | Photographs, W-9s, certificates, documents |
| Vercel | Serves the website and the application | Requests and technical data |
| Resend | Sends our email | Names, addresses, and the content of notifications |
| Anthropic | Powers project summaries, on request only | Project data for the summary requested — see Section 6 |
| Zoho | Our company email | Anything you email us |
| Cal.com | Our consultation booking page | What you enter when booking a call, and cookies it sets on anyone who loads the booking page |
Each processes data only on our instructions and only to run Buildore. None may use it for their own purposes.
We will email every account holder at least 30 days before adding any new company to this list. If you don't want the change, you can cancel before it takes effect.
We may also disclose information where the law requires it, or to protect the rights and safety of our users. If Buildore is ever acquired, we'll tell you before your data moves.
6. Artificial intelligence
The three questions people actually mean, answered separately.
Does Buildore use AI on my data?
One feature.A written summary of a project, produced when a user asks for one. That request sends the project's data to Anthropic, our AI provider, and returns the summary.
There is no chat interface. Nothing else in the product sends anything to an AI service. We do not run AI over uploaded documents — your W-9s, insurance certificates and photographs are never processed by a model.
Is my data used to train AI models?
No.
Not by us, not by Anthropic. Our agreement with them prohibits training on data we send. This applies to everything in Buildore, including content uploaded by subcontractors.
What about AI tools your staff use?
We use AI assistants internally to help write and review software. Where such a tool could process personal data, it's named as a processor in Section 5 and bound by the same agreement as every other one. These tools are not part of the product and do not operate on your content.
No automated decision producing legal or similarly significant effects is made about anyone. The reliability score in Section 10 informs a human's judgement; it doesn't make a decision.
7. How long we keep it — with actual numbers
| What | How long |
|---|---|
| Your account and project data | While your account is open. After cancellation: available for export for 30 days, then kept until you ask us to delete it |
| On a deletion request | Removed from live systems within 30 days |
| From encrypted backups | Within a further 90 days, as backup cycles roll over |
| Diagnostic and server logs | 90 days |
| Audit log of actions taken | For the life of the account — it's the record that makes a job defensible |
| Contact form messages | 24 months |
The exception, stated rather than hidden
Tax and payment records. Where a W-9, a payment record or a retainage ledger entry forms part of a business's tax or legal records, the business that holds the account may need to keep it for up to seven years, and some records must survive a deletion request because law, a contract, or a live dispute requires it.
If that applies to a deletion you've asked for, we'll tell you exactly what's being kept and why. We won't quietly keep it and we won't quietly delete something you were relying on.
8. What happens when you delete something
In the product, most things are a soft delete: a deleted project, section or milestone disappears from the screen but remains in your own data export, marked as deleted. That's deliberate — a payment record that can vanish isn't a record. There is no recycle bin.
When you cancel, your data stays available for export for 30 days. Export everything before you go: one click gives you every record type as a spreadsheet, all block content, and optionally every file ever uploaded.
When you ask us to delete, we remove it from live systems within 30 days, and from backups within a further 90, subject to Section 7's exception.
9. Your rights, and how to use them
You can ask us to show you what we hold about you, correct it, delete it, or send you a copy in a portable format.
Email support@buildore.co. We respond within 30 days.
You do not need an account, and you do not need to log in. If you were invited into Buildore by a contractor and no longer have access, email us anyway — we'll verify who you are and act on it.
Depending on where you live you may have further rights under laws such as the California Consumer Privacy Act, Colorado, Virginia, or the GDPR. We honour these rights for everyone regardless of where they live, because maintaining two standards isn't worth anyone's time.
10. Your reliability score — if you're a subcontractor
Separate section, because it concerns you personally and no competitor tells you this.
Buildore calculates a score for you from four things: whether you delivered by the due date, whether your submissions were approved, how your inspections came out, and whether your required documents are current and unexpired. Inspection results you recorded yourself are excluded from your own inspection rate.
That score is shown to the general contractor who hired you.
You can see it too, and the full breakdown behind it, on your own profile. Nothing is hidden from you that is shown to them.
If it's wrong, tell us. Email support@buildore.co and we'll go through the underlying records with you. If the records are wrong, they get fixed and the score follows. A score is arithmetic on facts — if the facts are right, we'll show you the arithmetic.
Under 3 scoreable events you have no score at all — it reads “New — not enough history” rather than a number, because three data points aren't a reputation.
11. If you were invited — read this
You were invited into Buildore by a company you already work for. You didn't sign up, you didn't pick us, and you may not have been asked.
What that actually means:
The contractor who invited you decides what happens to your work data. Projects, assignments, approvals and payments are theirs. We hold that information on their instructions, not our own.
You see only your own work. Your sections, your milestones, your payments, your retainage. Never the company's other projects, their margins, or their other subcontractors.
What you write is yours, and nobody can delete it. Your notes, photographs, daily log entries and submittals can only be removed by you. An administrator cannot delete another person's record of their own work. This is deliberate — a record the other side can quietly edit isn't evidence.
Records of payments and approvals are shared. They're your record and your contractor's business record at the same time, so they stay in their project history even if you leave.
Your documents are yours. Your W-9, your insurance certificate, your licence — you uploaded them, you can see them, and you can ask for them back or ask us to delete them.
You can reach us directly. support@buildore.co. You don't have to go through the contractor who invited you, and we won't tell them you contacted us unless you want us to.
Buildore is free for you. The contractor pays. You never will.
12. Security
Passwords are salted and hashed — we can't read them and neither can anyone who takes a copy of our database. Data moves over encrypted connections. Uploaded files are not publicly reachable: every file requires a signed link that expires. Access to production systems is limited to the people who operate the service.
We're honest about the limit here: no security measures can guarantee security. Anyone who tells you otherwise is selling something.
If there is a breach
If a security breach affects your personal information, we will notify you without undue delay and in any event within 72 hours of confirming it.
We'll tell you what happened, what data was involved, what we're doing, and what you should do. We commit to this in writing because no competitor in our market does, and you deserve to know before you find out some other way.
14. Where your data lives
In the United States. Our database runs on US infrastructure and files are stored with Cloudflare. If you're outside the US, using Buildore means your data is processed here.
Both are encrypted at rest with AES-256 — our database provider encrypts stored data with per-chunk keys, and Cloudflare encrypts every stored file automatically.
15. Children
Buildore is for businesses. It's not for anyone under 18 and we don't knowingly collect information from children.
16. Changes to this policy
If we change anything material, we email every account holder at least 30 days beforehand and update the date at the top. Every version is dated, and we'll tell you what changed rather than making you diff it.
17. Contact
Buildore LLC
support@buildore.co
See also our Terms of Service.
Something here doesn't match what you're seeing? Tell us. We'd rather fix the document than defend it.