Copperleaf Build — Privacy Policy

This document is provided as a starting point and is not legal advice. We recommend a qualified lawyer familiar with Canadian privacy law (PIPEDA and BC PIPA) review it before you rely on it.

Last updated: June 19, 2026 Effective date: June 19, 2026

1. Who we are

Copperleaf Build ("Copperleaf Build", "we", "us", or "our") is a construction-management software service operated by Copperleaf Developments of British Columbia, Canada. This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices you have.

If you have questions about this policy or your information, contact us at support@copperleafbuild.com.

This policy applies to the Copperleaf Build web application and related services (the "Service"). It does not apply to third-party websites or services we link to.

2. Who this policy covers

• Account owners and administrators — the people who sign up a company and manage it.
• Team members / employees — people added to a company account who log in to track time, file daily logs, and so on.
• Visitors — people who use our website or sign-up pages.

If you are an employee added to a company's account, your employer (the account owner) decides what information to enter about you and is responsible for that data. We process it on their behalf.

3. Information we collect

Information you provide directly:

• Account information — your name, email address, company name, and password (passwords are stored only as a secure one-way hash, never in plain text).
• Company and project data — projects, schedules, tasks, daily logs, estimates, invoices, change orders, expenses, and budgets you enter.
• Team information — employee names, contact details, time entries, and pay-related settings entered by the account administrator.
• Subcontractor and supplier information — business names, contacts, and tax details you choose to record, such as GST/HST numbers and business numbers. We do not store Social Insurance Numbers (SIN); the app records only a yes/no flag indicating whether a SIN is on file with you.
• Photos and files — jobsite photos and documents you upload.
• Billing information — your plan selection and billing contact email. Subscription invoicing is handled through QuickBooks Online (see Section 5). We do not collect or store full credit-card or bank-account numbers ourselves.

Information collected automatically:

• Basic technical data needed to operate and secure the Service, such as log information and session data.

4. How we use your information

We use personal information to:

• Provide, operate, and maintain the Service;
• Authenticate logins and keep accounts secure;
• Create and send subscription invoices and process plan changes, cancellations, and refunds;
• Generate features you request, such as AI-assisted daily site reports;
• Send transactional emails (for example, password resets, invitations, and billing notices);
• Provide customer support; and
• Comply with our legal obligations.

We do not sell your personal information, and we do not use your project or company data to advertise to you.

5. Service providers (sub-processors)

We use trusted third parties to run the Service. They may process your information only as needed to provide their service to us:

Provider	Purpose	Data involved
Replit	Application hosting and database	All account and app data
Google Cloud Storage	Storage of uploaded photos and files	Photos, documents
Resend	Sending transactional email	Email addresses, message content
Intuit (QuickBooks Online)	Subscription invoicing and payment records	Billing contact, invoice records
OpenAI	AI-assisted daily report generation	Daily-log content you submit for summarization

We may update this list as our service evolves; we will keep this section current.

6. AI features

When you use AI-assisted features (such as daily site reports), the relevant content you submit is sent to our AI provider to generate the output, which is then returned to you. This content is submitted through the provider's business API, and under that API's terms it is not used to train the provider's AI models. We will update this section if that arrangement changes.

7. How we share information

We share personal information only:

• With the service providers listed above;
• Within your company account, as designed (for example, administrators can see team time entries);
• When required by law, such as a valid legal request; or
• In connection with a business transfer (such as a merger or acquisition), in which case we will notify you.

8. Data location and cross-border transfers

Your information may be stored or processed on servers located outside of Canada, including in the United States, depending on where our service providers operate. Where information is transferred across borders, it may be subject to the laws of those jurisdictions, including lawful access by courts, law enforcement, and government authorities in those countries.

9. How long we keep information

We keep personal information for as long as your account is active and as needed to provide the Service. After an account is closed, we retain data for 90 days to allow for reactivation and to meet legal, tax, and accounting obligations, after which we delete or anonymize it. Billing and invoice records may be retained longer where required by tax law.

10. Security

We protect your information with measures including encrypted connections, hashed passwords, access controls that wall off each company's data from others, and encryption of sensitive integration credentials at rest. No system is perfectly secure, but we work to protect your information and to address issues promptly.

11. Your rights and choices

Depending on your location, you may have the right to access, correct, or delete your personal information, or to withdraw consent. To make a request, contact support@copperleafbuild.com.

If you are an employee on a company account, please direct requests to your employer (the account owner) first, since they control that data. We will assist account owners in fulfilling such requests.

Canadian residents who are not satisfied with our response may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

12. Children

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from children under 18.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice where appropriate.

14. Contact us

Copperleaf Developments British Columbia, Canada Email: support@copperleafbuild.com