Legal

Privacy Policy

How Build Hero collects, uses, shares, and protects account, project, location, scan, device, and diagnostic data across our web and mobile apps.

Information We Collect

Account information such as your name, email address, phone number, password credentials, account role, and the profile details you choose to provide.
Business information for supplier accounts, including company name, business address, employer identification number, and resale certificate number. Tax identifiers are encrypted at rest and only the last four digits are ever displayed back to you.
Project information such as property address, budgets, estimates, milestones, tasks, schedules, bids, change orders, messages, and team activity.
Files you upload, including photos, reference images, profile avatars, estimate documents, supplier catalogs, and LiDAR scan files.

Precise location is read by our mobile app only while you are running an outdoor site scan, so the perimeter you walk can be placed correctly on a satellite map. We do not collect your location in the background or while the app is closed.
Environment scanning data is captured on LiDAR-capable devices and includes room and site geometry such as meshes, planes, surfaces, and dimensions. Scans are stored with your account and linked to the project you captured them for.
Approximate location may be derived from the ZIP code you enter, and may be collected by Google as part of authenticating you when you sign in with a Google account.

Device identifiers, including a push notification token so we can deliver alerts you have opted into, and an App Attest key identifier used to confirm that requests come from a genuine copy of our app.
Technical metadata such as IP address, operating system, device type, app version, language, time zone, and security metadata such as request identifiers.

Product interaction events, such as which screens you open and which actions you complete, are sent to our own servers and stored in our own database. They are not shared with advertising networks or data brokers.
Crash and performance data is processed by Sentry so we can find and fix defects. Sentry is configured to exclude personally identifying information: a crash report carries an account identifier, not your name or email address.
We do not track you across apps or websites owned by other companies, we do not use advertising or attribution SDKs, and we do not sell your personal information.

To create and secure accounts, verify sign-ins through email codes, Google, or Apple, prevent abuse with rate limiting, reCAPTCHA, and device attestation, and manage active sessions.
To operate project workflows, including estimates, dashboards, collaboration, file uploads, supplier catalogs, order tracking, payouts, notifications, and customer support.
To generate AI-assisted construction estimates from the project details, photos, and scans you submit.
To improve reliability, debug errors, measure performance, and send transactional email such as verification codes and account notices.

Authentication is provided by Google Sign-In and Apple Sign In. When you use Google Sign-In, Google may collect your name, email address, phone number, approximate location, and identifiers as described in its own privacy policy.
Infrastructure and delivery providers include managed PostgreSQL hosting, DigitalOcean Spaces for file storage, and Mailgun for transactional email.
Maps and address lookup are provided by Google Maps and Google Places, used to resolve and display project and delivery addresses.
Payments and supplier payouts are handled by Stripe. Bank and payout details are collected by Stripe on its own hosted pages; Build Hero does not receive or store them.
AI-assisted estimates are generated by sending project text, photos, and scan data to our AI model provider, Anthropic, accessed either directly or through OpenRouter.
Monitoring and abuse prevention use Sentry and Google reCAPTCHA.

Project data may be visible to invited or assigned clients, contractors, designers, suppliers, enterprise users, and administrators according to their role and project permissions.
Messages, documents, bids, milestones, orders, and activity records may be shared with project participants when necessary for collaboration.
We may disclose information when required by law, to enforce our terms, to protect rights and safety, or during a business transfer such as a merger or acquisition.

Passwords are hashed with Argon2 and are never stored in readable form. Supplier tax identifiers and resale certificate numbers are encrypted at rest.
Access is controlled by role-based permissions and bearer-token authentication, supported by rate limiting, request identifiers, and operational monitoring.
Uploaded files are stored in cloud object storage in production, with access controlled by platform workflows.
We keep information for as long as needed to provide the service, comply with legal obligations, resolve disputes, and maintain security records.

You can review and update your profile from your account at any time, and you can delete your account from within the app.
Deleting your account signs you out of every device immediately, removes your push notification tokens, and withdraws any pending bids. Your data enters a 30-day recovery window, after which your account is anonymized. Records we are required to keep, such as completed transactions, are retained in anonymized form.
If you have an order in progress, contact [email protected] to close it out before deleting your account.
Depending on where you live, you may have the right to access, correct, delete, port, or restrict the processing of your personal information, and to object to certain processing. We do not sell personal information and we do not share it for cross-context behavioral advertising.
You control camera, photo library, location, and notification permissions in your device settings. Denying a permission disables only the feature that depends on it.
To exercise any right, contact us at [email protected] with enough detail for us to verify your request. We will not discriminate against you for exercising these rights.

Build Hero is intended for property owners and construction professionals and is not directed to children under 13. We do not knowingly collect personal information from children under 13.
If you believe a child has provided us with personal information, contact [email protected] and we will delete it.

We update this policy when our data practices change. The version number and effective date shown with this document identify the current revision.
Material changes will be communicated in the app or by email before they take effect.