Privacy Policy

Introduction

BrightBuild LLC ("BrightBuild," "we," "us," or "our") operates the BrightBuild platform and related services. This Privacy Policy describes how we collect, use, and protect your information when you use our website and services.

Information We Collect

We may collect the following categories of information:

• Account data: Name, email address, phone number, and password when you create an account.
• Communication data: Emails, text messages (SMS), and call-related data that you connect to BrightBuild to provide unified inbox and AI summary features.
• Project data: Project names, client and subcontractor information, schedules, and notes you store in the platform.
• Usage data: How you use the service (e.g., features used, log data, pages visited) to improve our product and support.
• Device and browser data: IP address, browser type, operating system, and device identifiers collected automatically when you access our service.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide you with the BrightBuild service (account data, project data, communication data).
• Legitimate interest: Product improvement, security, fraud prevention, and analytics, where our interests do not override your rights.
• Consent: Marketing communications and optional features. You may withdraw consent at any time.
• Legal obligation: When we are required to process data to comply with applicable laws.

How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the BrightBuild service.
• Deliver unified inbox, AI summaries, and project management features.
• Send you service-related notifications and, with your consent, marketing communications.
• Improve our product, security, and customer support.
• Comply with legal obligations and enforce our terms.

Data Sharing

We do not sell your personal information. We may share data with:

• Twilio: For SMS messaging (sending and receiving text messages). Twilio's privacy practices apply to their processing of message data.
• Email providers: When you connect your email, we use provider APIs under their respective policies.
• Service providers: Hosting, analytics, and support tools that process data on our behalf under strict agreements.
• Legal requirements: When required by law or to protect our rights and safety.

Cookies and Tracking Technologies

We use essential cookies to operate our service (e.g., authentication, session management). We do not currently use third-party analytics or advertising cookies. If we add analytics tools in the future, we will update this policy and provide appropriate notice and controls.

SMS and Messaging

When you use BrightBuild's SMS features or receive messages from us via SMS:

• BrightBuild project messaging is used for transactional project coordination updates between contractors and their subcontractors/clients.
• When a contractor adds a new SMS contact, BrightBuild may send a consent request message. The recipient must reply START (or UNSTOP where supported) before project coordination messages are enabled. BrightBuild records consent and opt-out events for compliance and audit purposes.
• During closed beta, BrightBuild may send SMS through a BrightBuild-managed shared A2P campaign. As BrightBuild scales, messaging may migrate to tenant-specific sender registration/campaigns.
• Message frequency varies based on project activity and communication volume.
• Standard message and data rates may apply, as determined by your carrier.
• Consent to receive SMS is not a condition of purchasing or using BrightBuild.
• You can opt out at any time by replying STOP. Reply HELP for assistance. You may receive a confirmation message. To re-subscribe after opt-out, reply START or UNSTOP.
• BrightBuild enforces SMS suppression for opted-out numbers across supported messaging workflows except where a compliance confirmation message is required.
• For SMS consent workflow details and sample messages, see https://www.brightbuild.app/sms-consent.
• Carriers are not liable for delayed or undelivered messages.
• We comply with applicable TCPA, A2P (application-to-person), and carrier requirements for messaging.
• Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes.
• Text messaging originator opt-in data and consent will not be shared with third parties except with messaging vendors required to deliver SMS services.

AI and Automated Processing

BrightBuild uses artificial intelligence to provide features such as communication summaries, escalation detection, and project insights. These AI features assist you with information organization and do not make automated decisions that produce legal or similarly significant effects. You can contact us to request more information about how AI is used in our service.

Data Security

We use industry-standard measures to protect your data, including encryption in transit and at rest, access controls, and secure infrastructure. No method of transmission or storage is 100% secure; we work to reduce risk and will notify you of significant breaches as required by law.

Data Retention

We retain your personal data for as long as your account is active and as needed to provide you with our services. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, tax, or regulatory purposes. Anonymized, aggregated data that cannot identify you may be retained indefinitely for analytics and product improvement.

International Data Transfers

BrightBuild is based in the United States. If you access our service from outside the United States, your data may be transferred to and processed in the United States. We take steps to ensure your data is protected in accordance with this policy and applicable law, including using standard contractual clauses or other approved transfer mechanisms where required.

Your Rights

Depending on where you live, you may have the right to:

• Access: Request a copy of the personal data we hold about you.
• Export: Receive your data in a portable format.
• Delete: Request deletion of your personal data and account.
• Correct: Update or correct inaccurate data.
• Object or restrict: Object to certain processing or request restriction in some jurisdictions.

We aim to honor these rights in line with GDPR, CCPA, and other applicable laws. To exercise your rights, contact us at the email below. We will respond to verified requests within 30 days (GDPR) or 45 days (CCPA).

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt out: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

Children's Privacy

BrightBuild is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at the email below.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website prior to the changes taking effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of BrightBuild after changes are posted constitutes your acceptance of the updated policy.

Contact

For privacy-related questions or to exercise your rights, contact us at:

BrightBuild LLC
2290 170th St
Fort Dodge, IA 50501
Email: mark@brightbuild.app
Phone: 515.570.7530