Back to ConstruTrack

Privacy Policy

Effective date: June 3, 2025

ConstruTrack (“we,” “our,” or “us”) operates the ConstruTrack web application (the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Service, you agree to the practices described below.

1. Information We Collect

Account Information

When you sign in with Google OAuth, we receive your name, email address, and profile picture from your Google account. We store this information to identify you within the Service and associate your data with your organization.

Project and Report Data

We collect the content you create: project names, addresses, daily report entries, work logs, time cards, general notes, incidents, and any text you enter into the Service.

Photos

Photos you upload are stored in our cloud object storage. Photos may contain embedded metadata including timestamps and, depending on your device settings, GPS coordinates. We do not process or expose location metadata beyond storing the file as uploaded.

Voice Recordings

If you use the voice drafting feature, your browser records up to 60 seconds of audio and sends it to our servers, which forward it to OpenAI for transcription and for extracting the report fields. We do not store the audio: it is held in memory only for as long as the request takes and is discarded once the draft is returned. The transcript is returned to your browser and is not stored either. Only the report content you keep and save — work logs, time cards, notes, and incidents — is written to our database.

Anything spoken while recording is sent for processing, including the voices of other people present. You are responsible for having their consent before recording them, and for not dictating information you are not permitted to share with a third-party processor.

Usage Data

We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used solely for security monitoring and service reliability.

2. How We Use Your Information

  • Provide, operate, and maintain the Service
  • Generate PDF daily reports and send them via email to designated recipients
  • Authenticate your identity via Google OAuth
  • Process payments for the Pro plan
  • Send transactional emails (report submissions, account notifications)
  • Respond to support requests
  • Monitor for abuse and ensure the security of the Service

We do not sell your data. We do not use your data for advertising.

3. Third-Party Services

We rely on the following third-party providers to operate the Service. Each provider processes data only as necessary to deliver their service to us:

Google OAuth

Authentication — processes your Google account name, email, and profile picture when you sign in.

Privacy policy ↗

Railway

Database and API hosting — stores all structured data (projects, reports, user records) on servers in the United States.

Privacy policy ↗

Cloudflare R2

Object storage — stores uploaded photos and generated PDF files.

Privacy policy ↗

Resend

Transactional email — delivers report submission emails and PDF attachments to your designated recipients.

Privacy policy ↗

LemonSqueezy

Payment processing — handles Pro plan subscriptions. We never see or store your full card number.

Privacy policy ↗

OpenAI

Voice drafting — transcribes voice recordings and converts the transcript into report fields. Audio is sent only when you use the feature, and is not stored by us.

Privacy policy ↗

Vercel

Frontend hosting — serves the web application and processes request traffic.

Privacy policy ↗

4. Data Retention

We retain your account data and project content for as long as your account is active. If you delete your account, we will delete your personal information and project data within 30 days, except where we are required by law to retain it longer.

Photos stored in object storage are deleted within 30 days of account deletion. PDF files generated for report delivery are not retained after transmission.

Voice recordings are never persisted by us and so have no retention period. Their handling once forwarded for transcription is governed by OpenAI’s own policies, linked above.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you
  • Correction — request that we correct inaccurate data
  • Deletion — request that we delete your account and associated data
  • Portability — request your data in a machine-readable format
  • Objection — object to certain types of processing

To exercise any of these rights, email us at info@construtrack.com. We will respond within 30 days.

6. Cookies

We use a single session cookie to keep you signed in. We do not use tracking cookies, analytics cookies, or advertising cookies. No third-party tracking scripts are loaded on any page of the Service.

7. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date above. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at: info@construtrack.com