Privacy Policy

2.1 Information You Provide Directly

• Account registration information: name, email address, phone number, company name, title, role type, and password.
• Identity verification information: government-issued ID, NMLS number, professional license numbers, contractor license numbers, and similar credentialing information.
• Financial information: bank account information (for payment processing), billing information, credit card details processed through our payment processor, loan terms, draw amounts, investment amounts, and related financial data.
• Project information: property addresses, construction budgets, schedules, specifications, architectural plans, photographs, inspection reports, draw requests, and related project documentation.
• Communication content: messages sent through the Platform's messaging system, support tickets, feedback submissions, and concierge lead information.
• Professional profile information: lending criteria, investment preferences, specializations, service areas, and professional qualifications.
• Legal and compliance documents: contracts, lien waivers, certificates of insurance, permits, and similar documents uploaded to the Platform.
• eCommerce and procurement data: vendor orders, material specifications, pricing, shipping addresses, and purchase history.

2.2 Information Collected Automatically

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, time and date of access, and session duration.
• Device information: device type, unique device identifiers, mobile network information, and hardware model.
• Usage data: features accessed, actions taken, search queries, clicks, and navigation patterns within the Platform.
• Location data: approximate geographic location derived from IP address. We do not collect precise GPS location without explicit consent.
• Cookie and tracking data: as described in our Cookie Policy.
• Performance data: load times, errors, crashes, and other technical metrics used to improve Platform reliability.

2.3 Information from Third Parties

• Authentication providers: if you register or log in using a third-party service (e.g., Google), we receive basic profile information from that provider.
• Payment processors: transaction confirmation, payment status, and limited card metadata from our payment processing partners. We do not store full card numbers.
• Professional verification services: license verification, background check results, and credentialing data from third-party verification providers.
• MLS and property data services: publicly available property data, comparable sales, and market information.
• Referral partners: if you were referred to the Platform by a developer or partner, we receive the referral context and introduction source.
• Government and regulatory databases: publicly available permit records, zoning information, FEMA flood zone data, and similar public records.

2.4 Project and Construction Data

The Platform is specifically designed to facilitate real estate development. In this context, we collect and process sensitive project data including but not limited to: property legal descriptions, survey data, architectural and engineering documents, inspection reports, photographs and videos of construction progress, subcontractor and vendor performance data, draw request documentation, and Certificate of Occupancy information. This data is treated as confidential project information and is subject to the access controls and role-based permissions described in our Terms of Service.

3.1 Platform Operations

• Creating and maintaining your account and role-based access permissions.
• Processing draw requests, payment schedules, and financial transactions.
• Facilitating communication between project team members, lenders, investors, buyers, and vendors.
• Auto-assembling lender packages, investor prospectuses, and deal room documents from project data.
• Matching developers with lenders whose criteria align with project parameters.
• Generating financial statements, P&L reports, carry cost analyses, and True Land Basis calculations.
• Sending notifications about project milestones, draw approvals, balloon payment deadlines, and other time-sensitive events.
• Processing and tracking commission events, referral fees, and platform revenue.

3.2 Internal Data Use -- Our Right to Use Platform Data

By using the Platform, you grant Buildpoint OS a non-exclusive, worldwide, royalty-free license to use, process, and analyze data generated through your use of the Platform for the following internal purposes:

• Platform improvement: analyzing usage patterns, feature adoption, and user behavior to improve the Platform's functionality, reliability, and user experience.
• Machine learning and AI: training internal AI models to improve features such as cost estimation, lender matching, vendor recommendation, market analysis, and anomaly detection. This training uses aggregated and, where applicable, anonymized data.
• Benchmarking and analytics: creating aggregated, anonymized industry benchmarks for construction costs, draw timelines, lender funding speeds, and similar metrics. Individual project data is never published.
• Fraud detection and security: analyzing patterns to detect unauthorized access, fraudulent transactions, and platform abuse.
• Financial modeling: developing and refining financial models used in the Platform's P&L engine, carry cost calculator, and IRR projections.
• Product development: understanding which features are used, which are not, and where users encounter friction.

We will not sell your personally identifiable information to third parties for their marketing purposes. Aggregated, anonymized industry data may be used in marketing materials, investor presentations, and published reports without identifying any individual user or project.

3.3 Communications

• Transactional emails: account verification, password resets, draw notifications, milestone alerts, balloon payment warnings, and invoice confirmations.
• Platform notifications: in-platform alerts about project activity, team communications, and status changes.
• Service communications: updates about Platform changes, new features, security notices, and policy updates.
• Marketing communications: with your consent, promotional emails about new features, case studies, and industry insights. You may opt out at any time.

3.4 Legal and Compliance

• Complying with applicable laws, regulations, and legal processes.
• Responding to lawful requests from government authorities.
• Enforcing our Terms of Service and other agreements.
• Protecting the rights, property, and safety of Buildpoint OS, our users, and the public.
• Preventing and investigating fraud, unauthorized access, and other illegal activities.

4.1 With Other Users -- Role-Based Access

The Platform operates on a strict role-based access control system. Information is shared between users only according to the role permissions defined in our Terms of Service and configured by the project developer:

• Project team members see project data relevant to their role. A supervisor sees site photos and schedules. A lender sees draw requests and financial summaries. A buyer sees their payment schedule and project progress.
• Lenders see draw request documentation, project financial summaries, LTC/LTV ratios, and developer track records -- only for projects they have funded or are evaluating.
• Investors see capital contributions, equity positions, distribution schedules, and project progress -- only for projects they have invested in.
• Buyers see their payment schedule, project milestones, design selections, and warranty information -- only for their specific project.
• No user sees another user's personal financial information, compensation, or data from unrelated projects.

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf, subject to confidentiality obligations:

• Cloud infrastructure: Supabase (database hosting), Vercel (application hosting), and related infrastructure providers.
• Email delivery: Resend (transactional email delivery).
• Payment processing: [PLACEHOLDER -- payment processor to be confirmed by counsel].
• Identity verification: [PLACEHOLDER -- verification provider].
• Analytics: [PLACEHOLDER -- analytics provider].
• Customer support: [PLACEHOLDER -- support platform].

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in good faith belief that such disclosure is necessary to comply with a legal obligation, protect and defend the rights of Buildpoint OS, prevent or investigate possible wrongdoing, protect the personal safety of users or the public, or protect against legal liability.

4.5 What We Do Not Do

• We do not sell personally identifiable information to data brokers or advertisers.
• We do not share project financial data with competitors or unauthorized third parties.
• We do not use your data to train third-party AI models without your consent.
• We do not permit lenders to see other lenders' loan terms on the same project.
• We do not disclose attorney-client privileged communications shared through the attorney portal.

7.1 Access and Correction

You may access and update most of your personal information directly through your account settings. For information you cannot update directly, contact us at legal@buildpointos.com.

7.2 Data Portability

You may request an export of your personal data and project data in a machine-readable format. Project data exports are subject to the rights of other project participants.

7.3 Deletion

You may request deletion of your account and associated personal data. Note that we may be required to retain certain data for legal, financial, or regulatory compliance reasons. Project data may also be retained as necessary to protect the rights of other project participants (lenders, investors, buyers) who have legitimate interests in that data.

7.4 Marketing Opt-Out

You may opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by contacting us at legal@buildpointos.com. Transactional and operational communications are not subject to opt-out as they are necessary for Platform functionality.

7.5 California Residents (CCPA/CPRA)

[PLACEHOLDER -- California-specific rights including right to know, right to delete, right to opt-out of sale, right to non-discrimination, and right to correct. Requires counsel review for full CCPA/CPRA compliance.]

7.6 European Users (GDPR)

[PLACEHOLDER -- GDPR-specific rights including legal basis for processing, data subject rights, cross-border transfer mechanisms, and DPO appointment if required. Requires counsel review if Platform serves EU users.]

Buildpoint OS, Inc.

Email: legal@buildpointos.com

[PLACEHOLDER -- Legal address to be confirmed]