1. Overview
VestaBuilder ("we," "our," or "us") is a construction scheduling platform that helps general contractors manage project timelines and communicate with subcontractors via SMS. This Privacy Policy explains how we collect, use, and protect your information.
2. Information We Collect
We collect the following types of information:
- Account Information: Email address and authentication data when you create an account (managed by our authentication provider).
- Project Data: Project names, task names, schedule dates, and durations that you enter into the platform.
- Subcontractor Information: Names, phone numbers, and trade specialties of subcontractors added by general contractors.
- SMS Data: Content of SMS messages sent to and received from subcontractors for scheduling purposes.
- Usage Data: Activity logs related to task management, reminders, and schedule changes.
3. How We Use Your Information
- To provide and operate the scheduling platform.
- To send automated SMS reminders to subcontractors about upcoming scheduled tasks.
- To process SMS replies from subcontractors (confirmations, reschedule requests).
- To display scheduling data and communication history on the dashboard.
- To send password reset emails and account-related communications.
4. SMS Messaging
Our platform sends SMS messages to subcontractors for the purpose of construction task scheduling and confirmation. Key details:
- Phone numbers are provided by the general contractor who manages the project.
- Messages are strictly related to construction task scheduling — we do not send marketing or promotional messages.
- Subcontractors can opt out of SMS messages at any time by replying STOP to any message.
- Message frequency depends on the project schedule, typically 1-2 messages per task.
- Standard message and data rates may apply.
- We do not sell, rent, or share phone numbers with third parties for marketing purposes.
5. Data Sharing
We do not sell your personal information. We share data only with:
- Twilio: Our SMS delivery provider, which processes phone numbers and message content to send and receive text messages.
- Supabase: Our database provider, which stores your project and scheduling data.
- Clerk: Our authentication provider, which processes sign-in, sign-up, and session security.
- Google (Gemini AI): SMS message content is processed to determine intent (confirm/reschedule). No personal data is stored by this service.
6. Data Security
We use industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication, and row-level security policies on our database to ensure users can only access their own data.
7. Data Retention
We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us. SMS logs and activity history are retained for the duration of the project.
8. Your Rights
- Access, correct, or delete your personal information.
- Opt out of SMS messages by replying STOP.
- Request a copy of your data.
- Delete your account and all associated data.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email.