Privacy Notice

Last updated: October 20, 2026

Elifas Garcia, trading as BuildPro 360, provides the Service and is the data controller for personal data about account holders and team members described here. For the customer contact details you store in BuildPro 360, your company is the controller and we process that data on your behalf to provide the Service.

Data we collect and why

• Account data (name, email, login credentials, company details, logo) — to create and run your account. Basis: contract.
• Business content (customers, job sites, estimates, catalog, payments recorded) — to provide the Service. Basis: contract.
• Customer responses (name entered when approving or declining an estimate) — to record decisions. Basis: legitimate interests.
• Connected email data (if you connect Gmail: your address, sent estimates and replies) — to send and show estimate emails. Basis: consent.
• Usage and device data (IP address, browser, device identifiers, logs) — for security, fraud prevention and improving the Service. Basis: legitimate interests.
• Support messages — to help you. Basis: legitimate interests.

Who we share data with

• Service providers and subprocessors (hosting, database, email delivery, AI summary processing, support tools).
• Paddle, our Merchant of Record, for the sale of plans, subscription management, payments, tax compliance and invoicing.
• Professional advisers (legal, accounting).
• Authorities, where required by law.

We do not sell personal data. Some providers may process data outside your country; where required we rely on safeguards such as Standard Contractual Clauses.

Retention

We keep data while your account is active and as needed for legal or accounting obligations. When no longer needed, it is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or export your data, object to processing, withdraw consent, and complain to a data protection authority. Contact us via your account email and we will respond within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit, encrypted connection keys, private file storage and per-company access controls.

Cookies

We use only essential cookies and browser storage needed to keep you signed in and run the app. We do not use advertising cookies. You can clear them in your browser settings, but you will be signed out.