Privacy Policy

1. Information We Collect

1.1 Information You Provide Voluntarily

Depending on the features used, we may collect:

• Building dimensions, measurements, and related information used for estimation
• Floor plans, architectural drawings, and construction documents you upload
• Client names or project names used for quotation templates, if provided
• Contact information, if voluntarily submitted
• Account registration information, including email and password
• Feedback, comments, or support requests
• Messages, phone numbers or user handles, profile names, attachments, and delivery metadata you send to us through instant messaging software, such as WhatsApp, Telegram, or similar messaging channels

1.2 Information Collected Automatically

We may collect:

• IP address, browser type, access timestamps
• Cookies and analytics data
• Device information, including model, operating system, and screen resolution
• Usage patterns and interaction data
• Referral URLs and pages visited
• Error logs and performance data
• Webhook delivery metadata from connected messaging providers, such as message IDs, timestamps, and delivery status

2. How We Use Your Information

We may use your information to:

• Produce AI-generated estimates and analysis
• Create quotation templates and reports
• Maintain, troubleshoot, and improve service quality and reliability
• Provide technical support and customer service
• Prevent fraud, abuse, or misuse of our services
• Comply with legal obligations
• Send service-related communications
• Analyze usage patterns to improve user experience
• Receive, route, and respond to instant messaging requests that you initiate or authorize

We do not use your data for unrelated purposes or sell your personal information.

Website analytics and general service-improvement activities do not use private email content, email snippets, or other Google user data obtained through Google APIs.

2A. Instant Messaging Data

If you contact Sigma Build or Science and Construction through instant messaging software, such as WhatsApp, Telegram, or similar messaging channels, we may receive and process your phone number or user handle, display name, message contents, attachments, message IDs, timestamps, delivery status, and conversation context needed to provide support, account linking, project updates, document intake, or requested service responses.

We use instant messaging data only to operate the messaging feature, respond to your requests, maintain conversation continuity, protect the service from abuse, comply with law, and improve service quality and reliability. We do not sell instant messaging data.

Messages may be processed by the relevant messaging platform provider and by our contracted hosting, storage, security, and service providers acting on our behalf. We store messaging conversation records only for as long as needed for the purposes described in this Policy, unless a longer period is required for legal, security, fraud-prevention, dispute-resolution, or audit reasons.

2B. Google User Data

When you connect a Gmail account to Sigma Build, we use the Gmail API to access recent email metadata, including message and thread identifiers, sender and recipient details, subject lines, dates, and short message snippets. Sigma Build uses this information only to identify quote-related emails and present quote status, project association, reference, due-date, and follow-up information in the user-facing Project Tracking feature.

Sigma Build stores the connected mailbox address, authorization tokens, message and thread identifiers, sender and recipient details, subject line, received date, short message snippet, and the quote and project-tracking information derived for your workspace. Access is read-only: Sigma Build does not send, modify, or delete Gmail messages. You may disconnect a Gmail account in Sigma Build or revoke access through your Google Account settings. You may also request deletion through our User Data Deletion page.

We do not sell Google user data or use it for advertising, advertising measurement, generalized analytics, market research, or to train or improve generalized artificial-intelligence or machine-learning models. We share Google user data only with contracted service providers acting on our behalf when necessary to operate the Project Tracking feature, for security purposes, or to comply with applicable law. Those providers must protect the information and process it only according to our instructions.

Sigma Build's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Information Sharing

We respect the confidentiality of your construction data and do not sell, rent, or trade your personal information or project files.

Your uploaded drawings, project data, and estimation information remain private to your account and are not shared with other users or competitors.

We may share limited information only in the following circumstances:

3.1 Service Providers

We work with trusted third-party service providers that help us operate the platform, such as:

• Cloud hosting and infrastructure providers
• Data storage and processing providers
• Analytics and performance monitoring services
• Payment processors, if applicable
• Messaging platform providers when you use instant messaging features, such as WhatsApp, Telegram, or similar channels

These providers may process data only on our behalf and are contractually required to maintain strict confidentiality and data security.

3.2 Legal Requirements

We may disclose information if required to do so by law or in response to valid requests from courts, law enforcement, or government authorities.

3.3 Security and Fraud Prevention

Information may be shared with security or fraud-prevention partners when necessary to detect, prevent, or investigate misuse of the platform or violations of our Terms of Use.

3.4 Business Transfers

If Science & Construction is involved in a merger, acquisition, financing, or sale of assets, user information may be transferred as part of that transaction. In such cases, we will take reasonable steps to ensure that your information remains protected under this Privacy Policy.

3.5 Aggregated or Anonymized Data

We may use aggregated or anonymized data, which cannot be used to identify you, for research, reporting, and platform improvement purposes.

4. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate users and maintain sessions
• Analyze website traffic and usage patterns
• Improve our services and user experience

You can control cookies through your browser settings. However, disabling cookies may affect the functionality of certain features.

5. International Data Transfers

Your data may be processed or stored in servers located in:

• The European Union
• The United States
• Australia
• Other jurisdictions where our service providers operate

We take reasonable steps to ensure compliance with international privacy regulations, including implementing appropriate safeguards for cross-border data transfers.

6. Data Retention

We retain data only for as long as necessary to fulfill the purposes for which it was collected. Specifically:

• Project data: retained while your account is active and for a reasonable period afterward
• Account information: retained until account deletion is requested
• Analytics data: typically retained for 26 months
• Legal compliance data: retained as required by applicable laws

After the retention period, data will be securely deleted or anonymized.

7. Your Rights

Depending on your jurisdiction, such as under GDPR, Australian privacy law, or CCPA, you may have the following rights:

• Access: request a copy of your personal data
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data
• Restriction: request restriction of processing
• Portability: request transfer of your data to another service
• Objection: object to certain types of processing
• Withdraw consent: withdraw previously given consent
• Complaint: lodge a complaint with a supervisory authority

To exercise these rights, please contact us through the channels provided on the Website.

8. Data Security

We implement reasonable technical and organizational measures to protect your data, including:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Firewalls and intrusion detection systems
• Regular security assessments and updates
• Employee training on data protection

However, no internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Links

Our Website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of significant changes by:

• Posting the updated policy on our Website
• Updating the "Last Updated" date
• Sending email notifications for material changes, if applicable

Continued use of the Website after any changes constitutes acceptance of the updated version.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the contact information provided on the Website.