Privacy Policy
This policy describes how BuilderSiteNow Pvt. Ltd. ("BuilderSiteNow", "we", "our") collects, uses, and protects personal data when you visit our website or use our construction ERP service. We are aligned with India's Digital Personal Data Protection Act 2023 (DPDP Act).
In short
The essentials — the sections below are the full detail:
Who we are and your role
BuilderSiteNow is a software-as-a-service (SaaS) construction ERP. When you sign up your construction firm (a “tenant”) and start storing your business data with us, the following roles apply under the DPDP Act:
- You (the tenant administrator) are the data fiduciary for the personal data of your employees, vendors, leads, and clients that you enter into BuilderSiteNow.
- We are the data processor, handling that data on your instructions and only for the purpose of providing the service.
- For personal data you give us directly (e.g. when you sign up or contact us), BuilderSiteNow is the data fiduciary.
What we collect
We collect personal data in three ways. Sensitive fields (passwords, tokens) are redacted before they reach our logs.
- Name
- Phone
- Role
- Password (hashed)
- Login activity
- Sites
- Leads
- Vendors
- Bills
- Employees
- Ledger entries
- Letterhead images
- IP address
- Browser
- Request timing
- Error logs
- Product analytics
How we use it
- Authenticate users
- Enforce tenant isolation
- Provide ERP features
- Run projects & billing
- Improve BuilderSiteNow
- Welcome emails
- Password resets
- Plan expiry notices
- Support replies
We also process data to diagnose errors and to comply with applicable Indian law, including the DPDP Act and tax rules.
We do not sell your data. We do not use your business data to train AI models without a separately signed agreement.
Where your data is stored
All production data is stored in data centres located in India (Mumbai region). Encrypted backups are replicated across availability zones, also within India. We do not transfer your data outside India.
How long we keep it
We retain personal data for as long as your tenant remains active, plus a reasonable period after deactivation for legal and tax reasons.
| Data | Retention period |
|---|---|
| Active tenant data | Until you delete it or close the account |
| Transactional records (invoices, ledger) | 8 years (per Indian tax law) |
| Account audit logs | Up to 365 days (90 by default; set per tenant) |
| Marketing-only data (contact forms) | 24 months |
Security
We protect personal data with, among other measures:
- All traffic served over HTTPS
- No plaintext over the wire
- Stored hashed, never plaintext
- Not readable by our team
- Passwords & tokens stripped
- Removed before logging
For a fuller description of tenant isolation, access control and audit logging, see our security page.
Your rights
Under the DPDP Act, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Have your data deleted, subject to the retention requirements above.
- Withdraw consent for processing where consent was the basis.
- Nominate someone to exercise your rights if you cannot.
- Lodge a grievance with our grievance officer (see below).
Email privacy@buildersitenow.com and we will respond within 30 days.
Grievance officer
As required by the DPDP Act, you may contact our grievance officer for any privacy-related complaint:
- Email: dpo@buildersitenow.com
- We will acknowledge within 7 days and resolve within 30 days where possible.
Updates to this policy
We may update this policy as the product or applicable law evolves. Material changes will be announced inside the product and at the top of this page. Continued use after a change constitutes acceptance of the new policy.
Frequently asked questions
Does BuilderSiteNow sell my data?
No. We never sell your data, and we do not use your business data to train AI models without a separately signed agreement.
Where is my data stored?
All production data and its encrypted backups stay in data centres located in India (Mumbai region). We do not transfer your data outside India.
Who owns the project data I enter?
You do. For the employees, vendors, leads and clients you enter, your firm is the data fiduciary and BuilderSiteNow is only the data processor — we handle it on your instructions to run the service.
Can I export or delete my data?
Yes. You can export your records, and you can have personal data deleted — subject to the statutory retention periods (tax and audit records) listed in the retention section above. Email privacy@buildersitenow.com and we respond within 30 days.
How long are invoices kept?
Transactional records such as invoices and ledger entries are retained per applicable Indian tax law — currently 8 years.
How do you keep my data secure?
Data is encrypted in transit over HTTPS and account passwords are stored hashed, never in plain text. See our security page for how tenant isolation, access control and audit logging work.
Need help with your data?
Still have questions about privacy?
Our privacy team is happy to walk you through how your construction data is stored, secured and kept private — no legalese, just straight answers.