Bilt Base biltbase.com

Privacy Policy

Effective August 24, 2026

Bilt Base is construction management software used by companies to run their work. This policy explains what information the service handles, why, and what control you have over it. The short version: your company's data belongs to your company, we collect only what the product needs to function, and we sell nothing to anyone.

Information we collect

• Account information. Your name, email address, phone number, and role, provided when your company invites you or when a company account is created.
• Customer content. The records your company creates in the product: projects, clients, contacts, estimates, proposals, work orders, invoices, comments, time entries, expenses, and the photographs and documents uploaded to them. This content is your company's, entered by your company, and processed solely to provide the service.
• Photographs and camera access. The mobile app requests camera and photo library access only when you choose to photograph or attach work to a job. Photos are uploaded to your company's account and are never used for anything except displaying them back to your company. Location data embedded in photos is not extracted or used.
• Operational records. Sign-in times, actions taken in the product (who changed what, and when), and technical logs kept for security and support. We do not use third-party analytics, advertising trackers, or session-recording tools.

How information is used

• To provide the service: showing your company its own records.
• To send operational email your company triggers: invitations, password resets, proposals and invoices to your clients, and monitoring alerts.
• To keep the service secure: audit trails, rate limiting and backups.
• Never for advertising, and never sold or rented.

Optional AI features

A company may switch on AI analysis by adding its own API key. When enabled, the specific records or photographs a person chooses to analyse are sent to Anthropic's Claude API to generate the analysis, which is stored back on the record and clearly labelled as AI-written. Nothing is sent unless a person requests an analysis, the feature is off by default, and usage is metered and visible to your company's administrators.

Who else touches the data

We use a small number of infrastructure providers to run the service, each processing data only on our instructions:

• Hosting - the application and database run on dedicated infrastructure operated for Bilt Base.
• Cloudflare - network security, and optionally photograph storage (R2).
• Email delivery providers - to carry the operational email described above.
• Anthropic - only when a company enables AI features, as described above.

No other third parties receive customer content.

Retention and deletion

Customer content is retained while your company's account is active, because it is your company's system of record. When an account is closed, your company may export its data (standard formats: SQL, CSV, and original photograph files) and request deletion; we delete customer content within 30 days of a verified request, except where a backup copy persists for up to 14 further days on its normal rotation. Individual users may ask their company's administrator to deactivate their account at any time; a deactivated user's name remains on the records they created, because those records belong to the company's history.

Security

All traffic is encrypted in transit. Stored credentials your company provides (for example email-sending passwords) are encrypted at rest. Access is controlled by per-company roles and permissions, every change is recorded on an audit trail, and each company's data is isolated from every other company's.

Children

Bilt Base is a workplace tool and is not directed at children under 13. We do not knowingly collect information from children.

Changes and contact

If this policy changes materially, account administrators will be notified by email before the change takes effect. Questions or requests: privacy@biltbase.com.