Privacy Notice

Who is responsible

CurlyByte Solutions, Hamburg, Germany, provides BuildTrail CRM and BuildTrail Scout. We are responsible for the public website, account administration, service security, and our own business records.

For customer, property, and job data entered in a company workspace, that company normally decides why the data is used. CurlyByte Solutions processes it on the company’s behalf under the applicable customer agreement.

Email [email protected]

Information we handle

• Public website data needed to deliver and protect the site, such as IP address, request time, requested page, browser information, and security logs.
• Account and service data, such as name, business contact details, login identifiers, organization membership, permissions, and audit records.
• Content submitted through a workspace, such as customer, contact, property, project, inspection, photo, document, note, location, and job information.
• Weather, map, measurement, and provider information connected to a property or assessment when those features are used.

Why we use it

We use personal data to provide, secure, support, and improve the services; manage accounts and customer relationships; meet legal duties; and prevent misuse. We provide notice and obtain consent where required by applicable U.S. or Canadian law.

We do not sell personal data or use it for third-party advertising. BuildTrail does not make automated legal, insurance, or employment decisions about people.

Who receives it

Data may be available to authorized users in the relevant customer organization and to service providers that host or protect BuildTrail, including Amazon Web Services and Cloudflare. An integration receives data only when the customer enables it or directs its use. We may disclose data when required by law.

Service providers may process data in countries where they operate. We use contracts and other safeguards required by applicable U.S. and Canadian law.

Retention and security

We keep data only as long as needed for the service, the customer agreement, security, and legal obligations. Customer workspace retention follows the customer agreement and organization settings; backups and security logs expire on controlled schedules.

We use technical and organizational safeguards designed to protect the service. No online service can guarantee absolute security.

Cookies and analytics

The public landing pages do not use advertising cookies, tracking pixels, or visitor analytics. The signed-in application uses essential session and security technology needed to operate the account.

Your privacy rights

Depending on your U.S. state or Canadian province, you may have the right to access, correct, delete, or receive a copy of your personal data, object to certain uses, or withdraw consent. We do not sell personal data or share it for targeted advertising. Contact us to make a request; we may need to verify your identity. You may also contact the applicable U.S. regulator or the Office of the Privacy Commissioner of Canada.

Email [email protected]

Changes

We may update this notice when the service or legal requirements change. The effective date above shows the latest version.