Privacy Policy (Data Processing Addendum)

Last Updated: December 4, 2025

1. Who We Are

This policy applies to Struction.com (the "Controller"). We are responsible for deciding how and why your personal data is processed. Data Protection Officer: Elliott Toy (elliott@struction.com)

2. The Data We Collect and Why

We collect data to provide our construction management platform and to improve your user experience.

  • Account & Project Data: We collect your name, email address, billing information, and construction project details.
    • Purpose: To create your account, authenticate your login, process payments, and store the project data you upload to the platform.
    • Legal Basis: Performance of a Contract (providing the service you signed up for).
  • Usage Data: We collect anonymized user usage events (e.g., button clicks, page views).
    • Purpose: To analyze how our platform is used so we can fix bugs and improve features.
    • Legal Basis: Legitimate Interest (improving our product).

3. How We Store and Share Your Data

We partner with industry-leading third-party processors to ensure your data is secure. We do not sell your data.

  • Authentication: We use Clerk to manage user logins and security.
  • Database Hosting: Your account and project data are securely stored in Neon Database.
  • Analytics: We use PostHog to process anonymized usage events.

International Transfers: Please note that our service providers (Clerk, Neon, PostHog) may process data in the United States. We ensure these transfers are protected through appropriate safeguards, such as Data Processing Agreements (DPAs) and adherence to international privacy frameworks.

4. Data Retention

We only keep your data for as long as necessary:

  • Account Data: Retained as long as you have an active account. If you unsubscribe or request deletion, we will remove your personal data from our active databases.
  • Analytics Data: Anonymized usage events in PostHog are retained for 90 days, after which they are automatically deleted.

5. Your Rights

Under the GDPR and verified privacy laws, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate information.
  • Request Deletion ("Right to be Forgotten") of your data.
  • Object to the processing of your data.

To exercise any of these rights, please contact our help address, help@struction.com, or our Data Protection Officer, Elliott Toy, at elliott@struction.com.