Privacy Policy

Information we collect

• Account information: your name, email address, company name, and password (passwords are stored hashed, never in plain text).
• Content you upload: the construction documents, submittals, drawings, photos, project data, and related files you add to your account. This content belongs to you.
• Usage information necessary to operate the service: authentication timestamps and basic technical logs generated by our hosting providers.

We do not run third-party advertising or analytics trackers on the application. We do not sell your personal information.

How we use information

We use your information solely to provide and operate the service: authenticating your account, storing and organizing the documents you upload, generating the outputs you request (such as PDFs and reports), and maintaining the security and reliability of the platform.

How information is stored and protected

Your data is stored using Supabase (database, authentication, and file storage) and served via Vercel. Files are held in access-controlled storage, and database access is governed by row-level security so that each company’s data is isolated to that company. We use industry-standard measures to protect your information, though no method of transmission or storage is completely secure.

AI processing

Some features (such as classifying a submittal by CSI division or extracting information from a document) process the content of files you upload using a third-party AI provider (Anthropic’s Claude) to generate the result you requested. This processing is performed to deliver the feature; the content is sent for the purpose of producing your output.

Sharing

We share information only with the service providers that operate the platform on our behalf (such as our hosting, database, and AI processing providers), and only as needed to run the service. We may disclose information if required by law. We do not sell your data.

Your choices and rights

You may access, correct, or delete your account information, and you may request deletion of your account and associated data by contacting privacy@tuttohq.com. Depending on where you live, you may have additional rights over your personal information.

Data retention

We retain your information for as long as your account is active or as needed to provide the service, and as required to comply with our legal obligations.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy: privacy@tuttohq.com