Privacy Policy
This policy describes how BuilderSiteNow Pvt. Ltd. ("BuilderSiteNow", "we", "our") collects, uses, and protects personal data when you visit our website or use our construction ERP service. We are aligned with India's Digital Personal Data Protection Act 2023 (DPDP Act).
Section 01
In short
The essentials — the sections below are the full detail:
Section 02
Who we are and your role
BuilderSiteNow is a software-as-a-service (SaaS) construction ERP. When you sign up your construction firm (a “tenant”) and start storing your business data with us, the following roles apply under the DPDP Act:
- You (the tenant administrator) are the data fiduciary for the personal data of your employees, vendors, leads, and clients that you enter into BuilderSiteNow.
- We are the data processor, handling that data on your instructions and only for the purpose of providing the service.
- For personal data you give us directly (e.g. when you sign up or contact us), BuilderSiteNow is the data fiduciary.
Section 03
What we collect
We collect personal data in three ways. Sensitive fields (passwords, tokens) are redacted before they reach our logs.
Account data
- Name
- Phone
- Role
- Password (hashed)
- Login activity
Business data you enter
- Sites
- Leads
- Vendors
- Bills
- Employees
- Ledger entries
- Letterhead images
Usage data
- IP address
- Browser
- Request timing
- Error logs
- Product analytics
Section 04
How we use it
Secure your account
- Authenticate users
- Enforce tenant isolation
Operate the service
- Provide ERP features
- Run projects & billing
- Improve BuilderSiteNow
Communicate
- Welcome emails
- Password resets
- Plan expiry notices
- Support replies
We also process data to diagnose errors and to comply with applicable Indian law, including the DPDP Act and tax rules.
We do not sell your data. We do not use your business data to train AI models without a separately signed agreement.
Section 05
Where your data is stored
All production data is stored in data centres located in India (Mumbai region). Encrypted backups are replicated across availability zones, also within India. We do not transfer your data outside India.
Section 06
How long we keep it
We retain personal data for as long as your tenant remains active, plus a reasonable period after deactivation for legal and tax reasons.
| Data | Retention period |
|---|---|
| Active tenant data | Until you delete it or close the account |
| Transactional records (invoices, ledger) | 8 years (per Indian tax law) |
| Account audit logs | Minimum 3 years (statutory record-keeping) |
| Marketing-only data (contact forms) | 24 months |
Section 07
Security
We protect personal data with, among other measures:
Encryption in transit
- All traffic served over HTTPS
- No plaintext over the wire
Hashed passwords
- Stored hashed, never plaintext
- Not readable by our team
Redacted logs
- Passwords & tokens stripped
- Removed before logging
For a fuller description of tenant isolation, access control and audit logging, see our security page.
Section 08
Your rights
Under the DPDP Act, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Have your data deleted, subject to the retention requirements above.
- Withdraw consent for processing where consent was the basis.
- Nominate someone to exercise your rights if you cannot.
- Lodge a grievance with our grievance officer (see below).
Email privacy@buildersitenow.com and we will respond within 30 days.
Section 09
Cookies
See our cookie policy for details on the cookies and localStorage entries we use, why, and how long they persist.
Section 10
Grievance officer
As required by the DPDP Act, you may contact our grievance officer for any privacy-related complaint:
- Email: dpo@buildersitenow.com
- We will acknowledge within 7 days and resolve within 30 days where possible.
Section 11
Updates to this policy
We may update this policy as the product or applicable law evolves. Material changes will be announced inside the product and at the top of this page. Continued use after a change constitutes acceptance of the new policy.
Frequently asked questions
Does BuilderSiteNow sell my data?
No. We never sell your data, and we do not use your business data to train AI models without a separately signed agreement.
Where is my data stored?
All production data and its encrypted backups stay in data centres located in India (Mumbai region). We do not transfer your data outside India.
Who owns the project data I enter?
You do. For the employees, vendors, leads and clients you enter, your firm is the data fiduciary and BuilderSiteNow is only the data processor — we handle it on your instructions to run the service.
Can I export or delete my data?
Yes. You can export your records, and you can have personal data deleted — subject to the statutory retention periods (tax and audit records) listed in the retention section above. Email privacy@buildersitenow.com and we respond within 30 days.
How long are invoices kept?
Transactional records such as invoices and ledger entries are retained per applicable Indian tax law — currently 8 years.
How do you keep my data secure?
Data is encrypted in transit over HTTPS and account passwords are stored hashed, never in plain text. See our security page for how tenant isolation, access control and audit logging work.
Need help with your data?
Privacy queries
privacy@buildersitenow.comGrievance officer
dpo@buildersitenow.comResponse time
Within 30 days
Still have questions about privacy?
Our privacy team is happy to walk you through how your construction data is stored, secured and kept private — no legalese, just straight answers.