Privacy Policy

1.About this policy

ConstructFlo ("we", "our", "us") is a construction site management platform operated by Cubeloop Technologies Private Limited. This policy explains how we collect, use, store, and protect personal data when you use the ConstructFlo mobile app, web application, and related services (together, the "Platform").

By using the Platform you agree to the practices described here. If you do not agree, please discontinue use and contact your organisation administrator.

2.Data we collect

We collect the following categories of personal data:

• Account data: name, email address, phone number, and a password hash.
• Profile data: role, organisation name, and profile photo.
• Location data: precise GPS coordinates collected when you use attendance check-in or in-app camera capture. Location is read only while the app is in use (foreground only).
• Site photos: photos captured in the app are watermarked with location and timestamp, then uploaded to secure cloud storage.
• Device data: a random device identifier generated on first install, used to manage concurrent session limits.
• Usage data: actions you take in the Platform, such as work reports, RFIs, material requests, and attendance records.

3.How we use your data

• Operating the Platform: authentication, work reporting, attendance, materials, and approvals.
• Geofencing: verifying that check-ins occur within a designated site boundary.
• GPS watermarking: embedding location and timestamp on site photos for documentation.
• Notifications: sending approval alerts and project updates to your device.
• Security and fraud prevention: detecting unusual login activity across devices.
• Compliance: meeting applicable legal and contractual obligations.

We do not sell your personal data, use it for advertising, or track you across other apps or websites.

4.Legal basis and your consent

Under the Digital Personal Data Protection Act, 2023, your organisation is the Data Fiduciary that decides how your data is processed, and ConstructFlo acts as a Data Processor on its documented instructions. We process personal data to perform the service your organisation has subscribed to, to meet legal obligations, and, where required, on the basis of consent that you may withdraw at any time.

5.Third-party services

The Platform relies on the following processors:

Analytics and advertising measurement on the marketing website are optional. The trackers load only after you choose Allow analytics in the consent banner, and you can decline without losing any functionality. The ConstructFlo app itself does not use advertising or analytics trackers.

6.Data retention

We retain your personal data while your account is active or as needed to provide the Platform. When an account is deactivated by an organisation administrator, personal identifiers are removed within 30 days.

Site photos, work reports, and attendance records are retained for the period set by your organisation's subscription. Logs and audit trails may be kept for up to 2 years for legal and compliance purposes.

7.Your rights

You have the right to:

• Access: request a copy of the personal data we hold about you.
• Correction: update inaccurate or incomplete data from your profile settings.
• Deletion: request deletion of your account. Your organisation administrator can deactivate it from the web dashboard, or email us for data removal.
• Portability: request an export of your data in a machine-readable format.
• Grievance: raise a complaint with our Grievance Officer if you believe your data has been mishandled.

To exercise any of these rights, email support@constructflo.in. We will respond within 30 days.

8.Security

We protect your data using industry-standard measures: TLS encryption in transit, AES-256 encryption at rest on AWS S3, JWT-based authentication with short-lived access tokens, and Row-Level Security at the database layer so data stays isolated per organisation.

No method of transmission or storage is fully secure. If you suspect a security incident, contact us immediately at support@constructflo.in.

9.Children's privacy

The Platform is intended for professionals aged 18 and above. We do not knowingly collect data from minors.

10.Changes to this policy

We may update this policy from time to time. We will post the updated version at this URL and, where appropriate, notify you in the app. Continued use of the Platform after changes take effect means you accept the updated policy.

11.Contact us

For privacy questions or to reach our Grievance Officer, contact: