1. Information We Collect and How We Use It
| Data Category | Examples | Purpose | Retention | Shared With |
|---|---|---|---|---|
| Account & Contact | Name, email, phone, company | Account creation, authentication, support | During subscription + up to 12 months after termination | Hosting infrastructure, communication providers |
| Billing Information | Billing details, transaction history | Payment processing, accounting, fraud prevention | As required by applicable tax/accounting law and internal retention policy | Stripe |
| Project & Workflow Data | Project details, document content, contractor/client fields | Service delivery, workflow automation, document generation | Until user deletion request or account-closure policy window | Hosting infrastructure, Cloudflare R2 |
| Usage & Analytics | IP address, browser/device metadata, usage events | Security, diagnostics, performance, product improvement | Up to 24 months (where enabled) | Google Analytics, hosting infrastructure |
| Website Benefit Claim | Company and authorized-contact identifiers, claim/status, eligibility-verification timestamp, accepted terms and scope versions | Verify and fulfill a requested one-time website benefit, prevent duplicate use, support the project, and maintain legal/accounting records | For the claim/project relationship and applicable legal, fraud-prevention, and accounting periods | Forza Veloce, after an authorized benefit request and consent |
2. Sensitive Data Statement
We do not intentionally collect sensitive personal data categories beyond what users submit directly for workflow use. If sensitive details are provided in user-entered text, they are processed only to provide requested service functionality and not for targeted profiling.
2.5 Data Sale/Sharing Statement
We do not sell, share for cross-context behavioral advertising, or trade personal data.
3. Service Providers & Subprocessors
- Hosting infrastructure: Application hosting, database, and operational infrastructure (US region).
- Cloudflare: DDoS protection and Cloudflare R2 object storage for secure document/file storage.
- Stripe, Inc.: Payment processing (US region).
- Resend: Transactional email delivery (account, support, and billing notices).
- Twilio: SMS delivery/webhooks for supported communication flows.
- Google Analytics: Product/website analytics (US region, if enabled).
- Sentry: Application error monitoring and performance diagnostics (US region).
- Upstash: Rate limiting and session management (US region).
- Forza Veloce: Affiliated website fulfillment provider. After an authorized website-benefit request and consent, we share only the minimum company, contact, claim, verification, and accepted-version data needed to verify and fulfill the benefit, prevent duplicate use, support the project, and maintain required records. Benefit data is not shared for unrelated marketing.
3.5 SMS / Text Messaging Consent and Opt-Out
BuilderMaxPro collects mobile phone numbers at account signup and when contractors add client contacts to a project. Users opt in to SMS communications by providing their mobile number and affirmatively checking an unchecked consent box adjacent to a clear disclosure of what messages will be sent (project updates, estimates, invoices, scheduling and appointment reminders, payment reminders, account verification codes, and operational account notifications).
No sharing of mobile information for marketing. BuilderMaxPro does not sell, rent, or share mobile phone numbers or SMS consent data with third parties or affiliates for their marketing or promotional purposes. Phone numbers are used only to deliver the transactional SMS messages you have consented to receive, and are only shared with our SMS delivery provider (Twilio) strictly to transmit those messages.
Message frequency and rates. Message frequency varies based on your activity and project lifecycle. Message and data rates may apply based on your wireless carrier plan.
Opt out. You may opt out of SMS messages at any time by replying STOP to any message from BuilderMaxPro. Reply HELP for assistance, or contact info@buildermaxpro.com. Consent to receive SMS messages is not a condition of purchase.
For the complete SMS program description, see our SMS Consent & Messaging Terms.
4. Texas Privacy Rights (TDPSA) & User Controls
Eligible users may request access, correction, deletion, or portability/export of personal data.
How to submit a request:
- Email: privacy@buildermaxpro.com
Email requests are routed to the privacy team for review and response tracking.
Appeals process:
If we decline to take action on a request, you may appeal by emailing privacy@buildermaxpro.com within 14 days of our decision. We target an appeal response within 45 days. If your appeal is denied, you may contact the Texas Attorney General where applicable.
We will honor recognized universal opt-out preference signals (for example, Global Privacy Control) where required by applicable law.
5. Data Storage & Security
We use commercially reasonable safeguards, including encryption in transit and access controls. No method of transmission or storage is guaranteed to be 100% secure.
6. User-Submitted Language
User-submitted text is stored and processed as entered. If generated documents are used for legal filing, you are solely responsible for ensuring language, content, and format are accurate and legally sufficient.
7. Contact
Privacy: privacy@buildermaxpro.com
Legal: legal@buildermaxpro.com