Privacy Policy

Information we collect

Website. When you request a demo we collect your name, work email, company and anything you write in the message. We also receive basic technical data from your browser (such as IP address, browser type and pages visited), and, when enabled, Google Analytics uses cookies to measure how the site is used.

Service. To provide the Service we store account information (name, email and the company you belong to) and the information your company enters: projects, construction plans, markings, assignments, daily progress, invoices, rates, attendance and production of crews, and photos uploaded as evidence for invoices.

Mobile app. The app generates a random device identifier so it can keep you signed in and so a session can be revoked if the device is lost; it is not an advertising identifier. Session credentials are kept in the operating system's secure storage (Keychain on iOS, Keystore on Android). The app uses the camera only when you choose to take a photo for an invoice, and your photo library only when you pick a file; it does not access your microphone or contacts.

We do not track the location of users or devices, and we do not collect biometric information.

How we use information

We use information to provide, secure and support the Service; to answer demo requests and questions; to send messages related to your account (such as invitations, password resets and notifications about invoices); to bill for the Service; to improve the product; and to comply with the law.

We do not sell personal information, and we do not use the data your company enters in the Service for advertising.

Your company's data

The information a company enters in the Service — including information about its crews and subcontractors — belongs to that company. We process it on the company's behalf and following its instructions. Each company's data is kept separate from every other company's data. If you are a crew member or subcontractor, please contact the company that invited you to make requests about your information; we will help them respond.

Who we share information with

We share information only with service providers that help us run the Service — such as hosting and storage, email delivery and website analytics — under obligations to protect it and use it only to provide their services to us. Today those providers are Hetzner (servers and database), Amazon Web Services (storage for plans, photos and encrypted backups), Resend (email delivery) and Google Analytics (statistics for spanlines.com only; the web and mobile apps don't use it). Data is stored on servers located in the United States. We may also disclose information when required by law, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy will continue to apply.

Retention

We keep information while your company's account is active and as needed to provide the Service. After an account is closed or deleted, we delete or anonymize its data within 30 days, except where we must keep it to comply with legal obligations or resolve disputes; encrypted backups rotate automatically and deleted data disappears from them within a limited period. Demo requests are kept as long as needed to follow up with you. On the device, the app deletes the plans and temporary files it downloaded every time you sign out.

Security

We use reasonable administrative, technical and physical safeguards to protect information, including encryption in transit, access controls and encrypted backups. No system is completely secure. If a security breach affects your personal information, we will notify you and the authorities as required by law, including within 30 days under the Florida Information Protection Act.

Your choices

You can ask to access, correct or delete your personal information by writing to cto@spanlines.com from your account's email address; we reply within 30 days. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google's browser add-on.

Deleting your account

Email cto@spanlines.com from the address you sign in with, using the subject "Delete my account". We will confirm the request by email and, within 30 days, delete your account and personal data (name, email, phone, sessions and devices).

Work records that are part of a company's accounting (for example, paid invoices) may be kept under that company's name, without your contact details, when the law or the company requires it. If you only want to leave a company, you can also ask its administrator.

Children

The Service is a business tool and is not directed to children under 16. We do not knowingly collect information from them.

Changes and contact

We may update this policy. When we make material changes we will update the date at the top and, when appropriate, notify account holders. Questions: cto@spanlines.com.