Privacy Policy

BuildEasyPro ("we," "us") builds CRM software for contractors. This Privacy Policy describes what data we collect, how we use it, and the choices you have. We collect only what we need to operate the service. We don't sell your data to anyone, ever.

• Account info — name, email, company name, password (hashed with bcrypt).
• Customer data — leads, projects, proposals, invoices, and any content you create or upload. This is your data; we just store and serve it back to you.
• Billing info — handled by Stripe. We store only a Stripe customer ID, your selected plan, and payment status. We never see or store your credit card number.
• Usage data — IP address, browser type, pages visited, timestamps. Standard for any web application.
• Email content— proposals you send via the Service are routed through Resend; we keep delivery metadata (sent, opened, bounced) but not the email bodies after they're sent.

• Operating the Service (auth, sending invoices, signing proposals, etc.)
• Billing your subscription
• Sending transactional email (verification, password reset, notifications)
• Improving the product (aggregate analytics, never identified by user)
• Customer support — only when you contact us
• Complying with legal obligations

We do not sell your data, share it with advertisers, or use it to train AI models outside the explicit context of features you opt into (e.g., the in-app AI chat assistant only sees what you type into it).

Strictly limited to service providers needed to operate:

• Stripe — payment processing
• Resend — transactional email delivery
• Cloudflare R2 — file storage (uploaded documents, photos)
• Neon — database hosting
• Vercel — application hosting
• Anthropic — AI chat features (only the text you send to the bot)
• Google Maps — appointment address geocoding (lookups only, no personal data sent)

Each of these has their own privacy policy and we choose providers with strong data protection practices. We will disclose data if legally required (subpoena, court order).

All traffic to and from app.buildeasypro.com is encrypted with TLS. Passwords are hashed with bcrypt. The database is encrypted at rest. Multi-tenant isolation is enforced at the application layer — every query is scoped to the user's organization. Despite our best efforts, no system is 100% secure. We'll notify affected users promptly in the event of a data breach.

We keep your data as long as your account is active. On cancellation, we retain it for 30 days in case you reactivate, then permanently delete it. You can export your data at any time via CSV from the relevant pages. Email delivery logs are retained for 90 days.

Depending on where you live, you may have rights including:

• Access — Request a copy of the data we hold about you
• Correction — Update inaccurate data (most is editable directly in the app)
• Deletion — Request deletion of your account and associated data
• Portability — Export your data in CSV
• Opt-out — Disable non-essential emails from Settings

Email us at support@buildeasypro.comto exercise any of these rights. We'll respond within 30 days.

We use cookies only for essential functionality:

• Authentication session cookies (so you stay logged in)
• CSRF protection tokens
• Platform-admin impersonation flag (only relevant for our staff)

We don't use tracking cookies or third-party advertising cookies.

The Service is intended for business use by adults (18+). We don't knowingly collect data from anyone under 16. If you believe a child's data has been provided, contact us for immediate deletion.

BuildEasyPro is operated from the United States. By using the Service, you consent to your data being processed in the U.S., where data protection laws may differ from those in your country.

We may update this Policy from time to time. Material changes will be announced via email and an in-app notice. The "Last updated" date at the top reflects the most recent change.

Questions about your privacy? Reach out to support@buildeasypro.com. We read every message.