Privacy Policy
Last updated: October 15, 2026
Your privacy matters to us. This Privacy Policy describes how TrustConstruct collects, uses, and protects your personal information when you use our platform.
1. Introduction
THE TRUST CONSTRUCT TECHNOLOGIES LLC ("TrustConstruct", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our construction project management platform ("Platform"). By using the Platform, you consent to the practices described in this policy. This Policy is pending final review by U.S. construction and platform counsel ahead of the Platform's public launch; factual statements about data processing and processors reflect the current implementation as of the "Last updated" date above.
2. Information We Collect
Information You Provide
We collect information you provide directly, including: name, email address, phone number, mailing address, profile photo, company details, professional licenses and certifications, project descriptions, bid proposals, messages sent through the Platform, payment information, and any other information you choose to provide.
Information Collected Automatically
When you use the Platform, we automatically collect: IP address, browser type and version, operating system, device identifiers, pages visited and features used, access times and dates, referring URLs, clickstream data, and general geographic location derived from your IP address.
Information from Third Parties
We may receive information from third-party services you connect to your account, including identity verification services, payment processors, and mapping services.
4. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Platform and our services
- Process transactions and manage milestone payments
- Facilitate communication between Clients and Contractors
- Verify contractor licenses and qualifications
- Resolve disputes and enforce our Terms of Service
- Send transactional notifications (project updates, payment confirmations, messages)
- Provide customer support and respond to inquiries
- Analyze usage patterns to improve user experience
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce our rights
5. Third-Party Services & Data Processors
We use third-party service providers to host, secure, support, and operate the Platform and to provide particular features. The principal providers and material processing activities currently used, or conditionally approved for the uses stated below, are described in this section. We may add or replace service providers when reasonably necessary, subject to applicable contractual and privacy requirements. We will update this Policy or our current subprocessor list before a new provider begins a materially different use of personal information.
Hosting and data location (Hetzner Cloud, United States)
Our primary production environment, including our application servers, database, and platform file storage, is hosted through Hetzner Cloud in the United States. Personal information stored in that environment is stored in the United States. Hetzner may use third-party data-center operators for cloud locations outside the European Union. We use administrative, technical, and organizational safeguards designed to protect personal information. Information may also be processed in other countries by the service providers described in this Policy.
International processing
If you access the Platform from outside the United States, your personal information may be transferred to and processed in the United States and other countries where we or our service providers operate. Those countries may have privacy laws that differ from the laws where you live. Where applicable law requires a particular transfer safeguard, we will use an appropriate legal mechanism.
Third-party payment provider (payment processing and marketplace payouts)
When payment services are available and used, the third-party payment provider identified on the payment screen collects and processes payment information under its own privacy policy. TrustConstruct does not receive or store full card or bank account numbers on its servers; it may receive limited identifiers, transaction status, and other information needed for reconciliation, support, fraud prevention, security, and compliance.
Payment services and financial privacy
When you use payment services made available through TrustConstruct, we may provide Liquid Global, Inc. d/b/a LiquidTrust and its sponsor bank and service providers with identification, contact, project, transaction, payment, support, fraud-prevention, compliance, and dispute information needed to establish and administer the payment service. LiquidTrust controls the payment account and payment-processing records it collects for its services and handles that information under its Privacy Policy and GLBA Consumer Privacy Notice (https://www.liquidtrust.io/privacy). LiquidTrust states that its current sharing of nonpublic personal information is limited to purposes permitted without a GLBA opt-out. TrustConstruct's collection and use of information remain governed by this Policy. If you do not permit information needed to establish or administer the payment service to be shared, the payment service may be unavailable.
Resend (transactional email delivery)
Transactional emails (verification, password reset, payment receipts, notification digests) are delivered through Resend (United States). Resend processes recipient email address and message contents on our behalf in accordance with their privacy policy (https://resend.com/legal/privacy-policy).
Push notification delivery (Expo Push & Firebase Cloud Messaging)
We use Expo Push (Expo / 650 Industries, Inc., United States), together with Apple's push notification service, to deliver notifications to our iPhone app. We use Firebase Cloud Messaging (Google LLC, United States) for our Android app and web app. These services process push tokens and notification payloads to deliver alerts. Visible notification text uses brief summaries, such as "New message" or "Payment update". The delivery payload also includes technical routing information, such as record identifiers, so the app can open the relevant screen. You can view the underlying message or project details inside the app. On Android, Firebase also processes an installation identifier and basic app and device information to operate the messaging service; technical information is also used to maintain and improve Firebase services. For more information, see the Expo Privacy Policy (https://expo.dev/privacy), Firebase privacy information (https://firebase.google.com/support/privacy) and Apple Privacy Policy (https://www.apple.com/legal/privacy/).
Mapbox (website maps and address lookup)
We use Mapbox, Inc. (United States) for maps on our website and for address search and geocoding in our apps and on our servers. Mapbox may collect location data and usage information in accordance with their privacy policy (https://www.mapbox.com/legal/privacy).
Google Maps (maps in our Android app)
Our Android app displays maps using the Google Maps SDK for Android, provided by Google LLC (United States). The SDK automatically sends technical information to Google, including device and app details, your IP address and a Maps SDK-specific identifier. It also sends crash information when applicable and, depending on how map features are used, information about map interactions such as panning and zooming. Google uses this information to provide, maintain and improve its services under the Google Privacy Policy (https://policies.google.com/privacy). Use of Google Maps features and content is subject to the Google Maps End User Additional Terms of Service (https://maps.google.com/help/terms_maps/).
Apple Maps (maps in our iPhone app)
Our iPhone app displays maps using Apple Maps. Apple processes the map requests and technical information needed to provide these features under its privacy terms. Location-based features depend on the permissions you give the app in your device settings. For more information, see Apple Maps & Privacy (https://www.apple.com/legal/privacy/data/en/apple-maps/) and the Apple Privacy Policy (https://www.apple.com/legal/privacy/).
Google ML Kit (QR code scanning in our Android app)
Our Android app uses Google's ML Kit barcode-scanning features to read QR codes. Barcode recognition is performed on the device. The SDK sends Google LLC technical information such as device and app details, installation identifiers, feature-use events, performance measurements and error codes for diagnostics and usage analytics. This technical collection is separate from any scan result, image or receipt information that you choose to submit to TrustConstruct or an AI feature. For more information, see the ML Kit data disclosure (https://developers.google.com/ml-kit/android-data-disclosure) and Google Privacy Policy (https://policies.google.com/privacy).
Location-based address lookup (device geocoding services)
Location-based features may use your device's geocoding service to turn coordinates into an address. On Android, the service provider depends on the device and may be Google. The service may receive coordinates and technical request information to return an address under its own terms and privacy policy. You can decline location access; you can enter a project address manually and use estimate drafting without automatic location information. For more information about Google services, see the Google Privacy Policy (https://policies.google.com/privacy).
AI service providers
Certain optional features and internal support tools use commercial application programming interfaces provided by AI service providers. For a user-facing AI feature, we send the text or other information you submit to or select for that feature, together with the technical instructions needed to produce a response. Depending on the feature, this may include estimate or project details, text submitted for a dispute summary, or registration information.
AI service providers — Google
We use Google LLC's Gemini API for the AI features described in this Policy, including TrustConstruct Assistant. We use a paid business API configuration covered by Google's Data Processing Addendum for Products Where Google is a Data Processor. This configuration does not authorize Google to train its general-purpose models on the content we submit. Google's security monitoring and retention are described in Google's terms; this is not a promise that the provider stores no content.
TrustConstruct Assistant: project records and saved preferences
When you use TrustConstruct Assistant, it can search records available to your account, including records from completed projects, to help answer your question. Your messages, relevant conversation history and eligible record excerpts are processed through Anthropic's Claude API or Google's Gemini API under the business API arrangements described in this Policy. Google also processes information for question-topic checks and, if you turn on saved personalization, to prepare saved notes. Relevant saved notes may be included in the context sent to the provider answering your question. We may use Gemini instead of Claude when Claude is unavailable or our usage limits are reached. Parts of the same conversation may therefore be processed by both providers.
TrustConstruct Assistant: saved personalization
If you choose to turn on saved personalization, the assistant can also save short notes about your own work and preferences, such as your trade, rates, crew size, preferred materials or suppliers, language and communication style. We keep these notes in your TrustConstruct account so you do not have to repeat the same information in later conversations. This is saved account information, not training a new AI model. AI-generated notes can be incomplete or mistaken.
TrustConstruct Assistant: your choices about saved notes
You can use the assistant without saved personalization. To see, correct or delete your saved notes, or stop future saving, contact privacy@thetrustconstruct.com; you do not need to close your account. Deleting a conversation does not by itself delete saved notes. When you ask us to delete notes or stop saving them, we do not rebuild those notes from your earlier conversations unless you ask us to. Please do not include another person's private information, passwords, payment details, identity documents or sensitive personal information for the assistant to remember. Saved personalization is designed for your work preferences, not those details.
TrustConstruct Assistant: how long saved notes are kept
We keep current notes while your account is active and they remain needed for personalization, unless you ask us to delete them sooner. We remove superseded or retired notes within 90 days. On account deletion, we remove the notes from active systems; backup deletion and any limited retention required by law follow the retention section below. Information retained for a legal obligation is not used to personalize the assistant. Deleting saved notes does not delete project records that must be retained under that section.
AI service providers — Anthropic
We use Anthropic, PBC's Claude API for internal review of new contractor registrations. For that review, we send the contractor's name, state, claimed license number, and the licensee name and license status returned by the applicable state registry. We do not send the contractor's full project history, platform messages, uploaded documents, payment information, account password, or government identity documents through this registration-review workflow. The AI output is reviewed by authorized TrustConstruct staff and does not by itself approve, reject, suspend, label, or publicly score a contractor.
AI service providers — Anthropic: replies to your inquiries
We also use Anthropic's Claude API to help review inquiries you send directly to TrustConstruct and prepare replies. Information sent through this workflow may include the text of your inquiry, a name you provide, and limited inquiry or account information relevant to your question. For routine inquiries, our system may send an AI-generated reply automatically after automated checks and a short delay, without a person reviewing each reply before it is sent. These replies identify the sender as an AI assistant. An authorized member of our team receives a copy of the reply for support and oversight. If you would prefer a reply from a person, reply to the email and say so. Requests for a person, complaints, disputes and questions about personal information are routed to staff rather than answered automatically.
AI service providers: Anthropic API
We use Anthropic, PBC's Claude API to answer questions in TrustConstruct Assistant, assist with project-agreement drafts, wording suggestions and consistency checks, and support our internal staff assistant under Anthropic's Commercial Terms and incorporated Data Processing Addendum. Those terms do not permit model training on the content we submit. Anthropic normally deletes API inputs and outputs within 30 days. Content flagged for policy enforcement may be retained for up to two years, and related safety classification records for up to seven years. Longer retention or additional review may apply where required by law or under applicable service or model-specific conditions. Limited authorized security and policy-enforcement review may occur. These arrangements do not mean that no content is stored. See Anthropic's commercial terms (https://www.anthropic.com/legal/commercial-terms) and retention information (https://privacy.claude.com/en/articles/7996866-how-long-do-you-store-my-organization-s-data).
AI-assisted agreement drafting and consistency checks
Optional AI tools can help restate project information, suggest wording for the work description and identify missing or inconsistent project details in an agreement draft. We send relevant agreement text and project information to Anthropic's Claude API or Google's Gemini API. This may include parties' names and roles, scope of work, milestone descriptions and agreed prices, schedules and acceptance criteria. Gemini may be used if Claude is unavailable or usage limits are reached; parts of the same request may be processed by both providers. These tools do not provide legal advice or determine whether an agreement complies with law. Suggestions do not by themselves change or sign an agreement. The parties review any proposed changes through the normal agreement workflow.
AI service providers — fallback
OpenAI, LLC may be used as a fallback provider for the same limited internal registration review if the primary provider is unavailable. OpenAI does not receive personal information through this workflow unless and until the fallback is enabled under a TrustConstruct business API account and applicable data-processing terms.
AI service providers — training and retention
For the business API workflows listed above, under the business API terms and settings we use, we do not permit these providers to use submitted content to train or improve their general-purpose models, and we do not opt in to model training. Providers may process and retain limited content for service operation, security, abuse prevention, legal compliance, and other purposes described in their applicable business terms. We limit the information sent to what is reasonably necessary for the feature.
AI assistance for our staff
Our staff may use AI assistants through a restricted connection to our office tools to help organize limited office records and prepare routine administrative work. These may include products from OpenAI (such as ChatGPT and Codex), Anthropic (such as Claude and Claude Code), and Google (such as Gemini). The tools we use may vary; this does not mean that every provider receives every record. This connection provides selected record references, general categories such as account role, U.S. state and type of work, workflow statuses, dates and counts. It may also include proposed or agreed project and milestone prices, totals of those prices, and estimated TrustConstruct platform fee rates and amounts. These commercial figures describe the project and our fee calculation, not payments made or fees actually charged. Record references may relate to an account or project. Names, direct contact details, message contents and uploaded documents are not made available through this restricted connection. Actual payment amounts, payment-provider records and statuses derived from them are excluded.
AI assistance for our staff: processing and retention
The provider of the assistant processes the information returned by the connection under its applicable terms and privacy policy. We use account settings or contractual controls to exclude these conversations from training the providers' general-purpose models, and we do not submit office content as model-improvement feedback. Providers may still process content, including through automated safety checks and review by authorized personnel, to operate and secure their services, prevent abuse and comply with legal obligations under their applicable terms. Retention varies by service and account settings. Conversations and related files may remain on a provider's systems until deleted or for the applicable retention period. Saved memories, summaries and other copies may be stored separately, including on staff devices or in our work files. Deleting a conversation or disconnecting a tool does not necessarily delete those separate copies. Security and legal retention exceptions may also apply. More information is available in the providers' privacy notices: OpenAI (https://openai.com/policies/us-privacy-policy/), Anthropic (https://www.anthropic.com/legal/privacy), and Google (https://policies.google.com/privacy).
AI assistance for our staff: internal assistant
Authorized staff may use an internal AI assistant in the TrustConstruct administration area to find and understand records and prepare routine reply wording for human review. This is separate from the restricted office connection described above. Its answers stay within our authorized administration interface rather than being returned through a staff member's personal ChatGPT, Claude or similar connection.
AI assistance for our staff: internal assistant, information used
The expanded internal staff assistant uses Anthropic's paid Claude API described above. If that API channel is unavailable, the expanded feature does not send the request or its context to a different AI provider. When staff ask about a record, it receives a limited selection of relevant information, which may include names and roles, account and project references, project and milestone descriptions, agreed scope and prices, acceptance criteria, planned dates, change orders, tasks, ordinary project messages and support replies, necessary license and verification facts, workflow queues and platform totals. Contract prices and estimated platform fees describe the agreement and our fee calculation, not money actually paid, held, refunded or released.
AI assistance for our staff: internal assistant, text you wrote and exclusions
Messages and other narrative text written by platform users are made available to this assistant only after we have confirmed the author's acknowledgement of the Policy version describing this feature and any other applicable restrictions on that record. If we cannot establish this, the text is withheld. Our system screens eligible text before sending it to the API and withholds content flagged as restricted or not cleared for this use; staff can review the original in TrustConstruct instead. Direct contact details, passwords and access credentials, bank or card details, identity documents, uploaded files, sensitive personal information, legally privileged correspondence, raw dispute statements, payment-problem reports, individual payment records and payment-provider records are excluded from this feature.
AI assistance for our staff: internal assistant, no decisions or actions
The assistant helps explain the available record; it does not determine anyone's legal rights, decide entitlement to a disputed payment, send replies, submit administrative actions, change account or project records or move funds. Any action takes place separately through the appropriate authorized workflow. Staff must check relevant source records before relying on a summary or using suggested wording.
AI assistance for our staff: internal assistant, access and memory
Access depends on the staff member's current authorization. When that authorization ends, earlier staff-assistant conversations are no longer available to that account. This staff feature does not read or create saved personal-memory notes. The underlying account, project and support records remain subject to the separate retention rules in this Policy.
AI assistance for our staff: internal assistant, retention
On our active systems, a staff-assistant conversation expires after 72 hours without a new message and is removed at the next scheduled cleanup, normally within a further six hours. Backup copies follow a separate rotation schedule: daily copies are normally kept for about a week and weekly copies for about a month; rotation can be delayed if a backup run fails. Expired conversations do not become available again merely because a backup is restored. These periods are separate from the AI providers' retention and exceptions described above. Google's Gemini API security-monitoring documentation specifies 55 days for prompts, context and responses for features that use that service. Applicable provider terms also address legally required retention and disclosures.
AI assistance for our staff: review and limits
For supported actions prepared through the restricted office connection described above, a staff member must review and confirm the action in TrustConstruct before a reply is sent or an account or project record is changed. The internal staff assistant may suggest routine reply wording, but it does not submit replies or administrative actions. Routine inquiry replies sent through the separately described business API workflow may be sent automatically under that workflow's safeguards. Neither the restricted office connection nor the internal staff assistant can move money or determine entitlement to a disputed payment. Questions about this use of information can be directed to the privacy contact in this Policy.
Sentry (error monitoring)
Application crashes and error traces are reported to Sentry (Functional Software, Inc., United States / European Union region). Stack traces are scrubbed of authorization headers, cookies, passwords, tokens, and email values before transmission. Sentry's privacy practices: https://sentry.io/privacy/.
6. Information Sharing & Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- With other Platform users: Your profile information, project details, bids, and reviews are visible to other users as necessary for the Platform to function.
- With service providers: We share information with third-party vendors who assist us in operating the Platform (payment processing, hosting, analytics).
- For legal compliance: We may disclose information when required by law, court order, or government regulation.
- For safety and security: We may share information to protect the rights, property, or safety of TrustConstruct, our users, or the public.
- In business transfers: If TrustConstruct is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- User-connected applications: If you choose to connect an independent third-party application, such as ChatGPT, TrustConstruct sends that application only the account and project information needed for the functions and permissions you select. Depending on the function, this may include project and milestone records, tasks, schedules, your own estimates and invoice printouts with their line items and prices, the items and prices in your supplier catalogue, and content you or another project participant added to a shared project. The application may also send TrustConstruct an instruction to create or update a supported project record, estimate, or supplier catalogue item on your behalf. The third party processes and may retain the information under its own terms and privacy policy and is not TrustConstruct's service provider for this user-directed connection. Disconnecting stops future access but does not delete information already retained in the third party's service. TrustConstruct records connection and tool-use metadata and may temporarily retain the response returned to the application for security, support, and audit purposes. The authorization screen identifies the categories of information and actions requested, available controls, and applicable retention periods before you connect.
7. Your Rights (GDPR / CCPA / state privacy laws)
Depending on your jurisdiction (including the European Economic Area, the United Kingdom, California, and other US states with privacy statutes), you may have the following rights regarding your personal information:
- Right of access: Request a copy of the personal information we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete information.
- Right to erasure ("right to be forgotten"): Request deletion of your personal information, subject to certain exceptions (financial records, dispute records, audit logs — see Section 8).
- Right to data portability: Request a machine-readable copy of your data.
- Right to opt out of marketing: Opt out of non-essential communications via the in-app Notification Preferences screen or the "unsubscribe" link in any email.
- Right to restriction: Request that we limit how we use your information.
- Right to object: Object to certain types of processing of your information.
- Right to non-discrimination (CCPA): You will not receive different service for exercising any of these rights.
To exercise any of these rights — access, rectification, erasure, or portability — please email privacy@thetrustconstruct.com from the email address associated with your account. We will verify your identity and respond within 30 days (GDPR) or 45 days (CCPA). You can close your account yourself in Settings on the website and in the app. Closing erases your personal information, including your name, email address, phone number, photo and profile, and frees your email address for future use. A self-service data export is still on the product roadmap; the email channel above remains available for it and as a fallback for any request. Note that deletion may not immediately remove all information from our systems due to legal retention requirements (Section 8) and routine encrypted backups; backup copies are overwritten on a rolling 90-day window.
8. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. After account closure, we retain certain information as required by law or for legitimate business purposes, including: transaction records (7 years for financial compliance), dispute records (3 years after resolution), audit logs (5 years), and anonymized analytics data (indefinitely). You may request deletion of your data at any time, subject to these retention requirements. For connected applications, we keep a record of each request an application makes and of each action it prepares (what was requested, when, and the outcome) for 24 months, and the exact content returned to the application or prepared as an action for 7 days. A problem report sent through a connected application includes your description, the part of the Platform it concerns, and a copy of the response it concerns; it is reviewed by authorized TrustConstruct staff, and its copy is kept until the report is closed plus 90 days, and never longer than 12 months.
9. Data Security
We implement industry-standard security measures to protect your information, including: encryption in transit (TLS/SSL), bcrypt-hashed password storage, JWT-based session authentication with revocable session records, role-based access controls (RBAC) on all administrative actions, rate limiting on authentication endpoints, audit logging of significant state changes, automated error monitoring (Sentry) with PII scrubbing, regular dependency security audits, and infrastructure hosted in a hardened Docker/Linux environment behind a managed reverse proxy with HTTPS termination. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
10. Children's Privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated Policy, revise the “Last updated” date, and provide any additional notice or obtain any consent required by applicable law. Material changes will be presented through the Platform or another appropriate communication before or when they take effect. Continued use does not replace any consent required by law.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: privacy@thetrustconstruct.com, or write to: THE TRUST CONSTRUCT TECHNOLOGIES LLC, Privacy Team, 2643 Liberty St, Hollywood, FL 33020.