Last updated: October 20, 2026
Builder Worldwide LLC, a Colorado limited liability company ("Builder Worldwide," "we," "us," or "our"), provides construction scheduling and project management software for home builders, remodelers, and their trade partners. We respect your privacy and are committed to protecting it.
This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with our website at BuilderWorldwide.com (the "Website"), our iOS and Android mobile apps and web app (the "Apps"), and the related features, emails, notifications, and support we provide (together with the Website and the Apps, the "Service").
This Privacy Policy explains:
By using the Service, you acknowledge that you have read this Privacy Policy. Our Terms of Service, which incorporate this Privacy Policy, govern your use of the Service.
This Privacy Policy applies to the following people:
This Privacy Policy does not cover homeowners or other clients of our customers, because the Service does not currently offer them a login or portal. If we add one, we will update this policy. It also does not cover information about our own job applicants, employees, or contractors.
We play two different roles depending on the information involved.
Each builder that holds an Account decides what information to put into the Service about its projects, its staff, its trade partners, and the people it works with, and decides who in its company can see it. This information is "Account Data." For Account Data, we act as a service provider (sometimes called a "processor") to the builder. We process Account Data only to provide the Service to that builder, following its instructions and our agreement with it.
For example, if a builder enters a trade partner's name, email address, and phone number so that the trade partner receives task reminders, the builder is responsible for that information and for having the right to share it with us. The builder's own privacy notice, not this one, governs how the builder uses it.
If you want to access, correct, or delete Account Data about you, please contact the builder that entered it. If you contact us instead, we will refer your request to that builder and help them respond.
We decide how and why information is used (sometimes called acting as a "controller") for: account sign-up, login, and profile information; billing and subscription information; trade partner login subscriptions; Website visits and form submissions; support and feedback messages; security and diagnostic logs; and our communications with you. This Privacy Policy fully applies to that information.
We need certain personal information to provide the Service. If you choose not to provide it, we may not be able to create your login, provide certain features, send notifications, or process payments.
We do not ask for or collect Social Security numbers, dates of birth, driver's license or passport numbers, or other government identifiers. We do not collect your precise location. We do not collect biometric data: if you use Face ID, Touch ID, or fingerprint or face unlock, the check happens entirely on your device and we never receive your biometric information (see Section 11). We do not access your phone's contacts. We do not use advertising identifiers.
Please do not upload sensitive personal information (such as government ID numbers, bank account numbers, or health information) into notes, documents, or photos unless it is necessary for your business. If you do, it becomes part of your Account Data.
We use personal information to:
We do not use your Account Data, including your schedules, notes, photos, documents, or financial records, to train artificial intelligence or machine learning models. We do not use personal information to make automated decisions that produce legal or similarly significant effects about you, and we do not use it to profile you for advertising.
We may create de-identified or aggregated information from personal information, for example, the average number of tasks per project across all Accounts. Such information does not identify you or your company. We maintain and use it only in de-identified form and will not attempt to re-identify it, except as permitted by law.
Because Builder Worldwide is a shared workspace, some of your information is visible to other users. Access is enforced by the database itself (row-level security), not only by the Apps' screens.
We do not sell personal information. We do not share personal information with third parties for cross-context behavioral advertising or targeted advertising. We do not use advertising networks, tracking pixels, or data brokers, and we do not buy personal information about you from other sources to market to you.
We share personal information with the service providers that run the Service, only as needed for them to provide their services to us. They are contractually required to protect it and may not use it for their own purposes.
| Service provider | What they do for us | Information involved |
|---|---|---|
| Supabase | Database, authentication, file storage, server functions, and hosting | All information in the Service |
| Stripe | Payment processing and subscription billing | Billing contact, plan, amounts, payment details you enter into Stripe |
| Resend | Sending emails (notifications, invitations, password resets, billing notices, form messages) | Recipient name and email address, email content |
| Expo, Apple (APNs), and Google (FCM) | Delivering push notifications to mobile devices | Push token, notification content |
| Cloudflare (Turnstile) | Spam and bot protection on Website forms | IP address, browser signals |
We may change service providers from time to time. We will update this list when we do.
Service communications are messages that are part of providing the Service, such as invitations, password resets, security notices, trial and billing notices, task reminders, delay alerts, approval requests, and signature requests. You cannot opt out of essential account, security, and billing messages while you have a login. You can change your notification times and advance reminder options in the Apps, and your company's admins may adjust notification settings for trade partners who do not have a login.
Trade partners receive task reminders and delay alerts because a builder assigned them work. To stop receiving these, contact the builder, who can change or remove the assignment.
We do not currently send marketing emails. If we do in the future, we will send them only as permitted by law, every marketing email will include an unsubscribe link, and we will honor your request promptly. We keep a record of your unsubscribe request so that we do not email you again.
The Service does not currently send text messages. The "tap to text" buttons in the Apps open your own phone's messaging app; those messages are sent by you from your phone, and we never see or store them. If we send text messages in the future, we will do so only with your consent. Message and data rates may apply; you may reply STOP to opt out or HELP for help. We will never share mobile phone numbers or text messaging opt-in data or consent with third parties or affiliates for their marketing purposes.
You can turn push notifications on or off at any time in your device's settings, and change notification times in the Apps.
We use only the storage technologies needed to make the Service work. We do not use analytics cookies, advertising cookies, or tracking pixels, and we do not track you across other websites. Because of this, you will not see a cookie consent banner on our Website.
| Technology | Where | Why | How to control it |
|---|---|---|---|
| Sign-in session | Web app (browser storage) | Keeps you signed in | Sign out, or clear your browser's site data |
| Secure session storage | Mobile apps (iOS Keychain, Android Keystore) | Keeps you signed in securely; supports biometric unlock | Sign out, or turn off biometric login |
| Offline data | Mobile apps (on-device database) | Lets you view recent schedules, tasks, and contacts without a connection, and holds changes made offline until they sync | Cleared automatically when you sign out |
| Preferences | Browser or device storage | Remembers display choices, such as the calendar view you last used | Clear site data or reinstall the app |
| Cloudflare Turnstile | Website forms | Strictly necessary spam and bot protection; may set a security cookie | Blocking it prevents form submission |
Global Privacy Control and Do Not Track. We honor the Global Privacy Control (GPC) signal as a request to opt out of the sale or sharing of personal information. Because we do not sell or share personal information or track you across websites, receiving a GPC or Do Not Track signal does not change how the Service works for you.
We do not collect your location. Photos taken on phones can contain embedded information, such as the time and GPS coordinates where a photo was taken. Before upload, the Apps resize and re-save each photo, which removes this embedded information; a photo that cannot be re-saved this way is not uploaded. We do not read or use location data from photos. If you prefer, you can turn off location tagging in your camera settings.
Photos are stored privately. They are displayed only to users who can access the project, through links that expire after a short time.
On iOS and Android, you may choose to unlock the Apps with Face ID, Touch ID, or your device's fingerprint or face unlock. This feature is off until you turn it on. The biometric check is performed entirely by your device's operating system. We never receive, store, or have access to your fingerprint, face data, or other biometric information; the device only tells the App whether the check succeeded. Your password is never stored on your device. If biometrics fail or are turned off, you sign in with your email and password.
We keep personal information only as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Service, meet legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. To decide how long to keep information, we consider its nature and sensitivity, the risk of harm from unauthorized use or disclosure, why we process it, and applicable legal requirements.
| Information | How long we keep it |
|---|---|
| Account Data for active projects | While the Account is active, or until the builder deletes it |
| Completed projects | Completion and daily log photos: deleted 21 days after the project is marked complete, unless the builder chooses a longer period or keeps the project. All other project data: deleted 13 months after the project is marked complete, unless the builder chooses a longer period or keeps the project. Signed documents stay in the builder's Account, and sales contracts stay with the sale. |
| Your login and profile after you delete your login | Sign-in is disabled immediately, and your profile details are cleared. Records you created inside a company's Account (such as tasks, notes, photos, and documents) belong to that company and remain in its Account. |
| Signed documents and certificates of completion | As long as the Account keeps the document. Signed documents are not deleted with a completed project. |
| Audit, schedule change, and notification records | As long as the related project is kept |
| Support, feedback, and contact messages | 24 months after the conversation ends |
| Server and security logs | Up to 7 days, as kept by our hosting provider |
| Marketing opt-out records | As long as needed to honor your request |
When we no longer need personal information, we delete it or de-identify it.
Builders can choose longer periods in Settings, or keep any project from deletion. Builders should export any records they need to keep for longer, such as for warranty or legal purposes, before they are deleted. Builder Worldwide is not a records archive.
We use administrative, technical, and physical safeguards designed to protect personal information, including:
No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You can help by keeping your password private, not sharing your login, using biometric unlock on your phone, signing out on shared computers, and telling us immediately at [email protected] if you suspect unauthorized access to your login.
We are not responsible for information you choose to share outside the Service (for example, a report you export and email), for third-party websites or services we do not control, or for unauthorized access resulting from a compromised password or device that we could not reasonably prevent.
Security incidents. If we learn of a security breach affecting your personal information, we will notify affected individuals and customers, and regulators where required, without unreasonable delay and within the time required by law (for Colorado residents, no later than 30 days after we determine that a breach occurred).
Depending on where you live, and subject to exceptions under applicable law, you may have the right to:
Email [email protected] with the subject line "Privacy Request," or write to the address in Section 20. Tell us what you are asking for and which email address you use with the Service.
If we decline your request, you may appeal by replying to our decision or emailing [email protected] with the subject line "Privacy Appeal." We will respond in writing within 45 days (or the time required by law) and explain our decision. If your appeal is denied, you may contact your state attorney general; Colorado residents may contact the Colorado Attorney General at coag.gov.
The Service is a business tool intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. We do not sell or share the personal information of anyone under 18. If you believe a child has provided us with personal information, please contact us at [email protected] and we will delete it.
Builder Worldwide is based in the United States, and the Service is operated and hosted in the United States. If you use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate, which may have data protection laws different from those where you live. Where required, we rely on appropriate safeguards for these transfers, such as the Standard Contractual Clauses approved by the European Commission (and the UK Addendum) included in our service provider agreements.
The Service may link to or connect with third-party websites and services, such as Stripe's checkout pages, the Apple App Store, and Google Play. This Privacy Policy does not apply to them, and we are not responsible for their privacy practices. Please review their privacy policies.
If you have a disability and need this Privacy Policy in a different format, please contact us at [email protected] and we will provide it in a format you can access.
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or the law. We will post the updated policy on the Website and update the "Last updated" date. If we make material changes, we will notify Master Admins and Admins by email, and where practical in the Apps, at least 30 days before the changes take effect. Your continued use of the Service after the effective date means you acknowledge the updated policy.
If you have questions about this Privacy Policy or our privacy practices, or want to exercise your rights, contact us at:
Email: [email protected]
This Part B adds to Part A. If anything in Part B conflicts with Part A, Part B controls for residents of the location it describes.
Several U.S. states have comprehensive privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia. If you live in one of these states, you may have the rights described in Section 14.2, subject to the requirements and exceptions of your state's law.
Builder Worldwide is based in Colorado. Colorado residents have the rights described in Section 14.2 under the Colorado Privacy Act, including the right to appeal (Section 14.4) and to contact the Colorado Attorney General if an appeal is denied. We honor universal opt-out mechanisms, such as the Global Privacy Control, where Colorado law requires.
This section applies to California residents and provides the disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the "CCPA").
In the preceding 12 months we have collected the following categories of personal information. For each category, the sources are described in Section 4, the purposes in Section 5, and the categories of recipients in Section 7. Retention periods are described in Section 12.
| CCPA category | Examples | Disclosed for a business purpose to | Sold or shared? |
|---|---|---|---|
| Identifiers | Name, email address, phone number, IP address, login ID | Service providers; other users as described in Section 6 | No |
| Customer records (Cal. Civ. Code 1798.80(e)) | Name, phone number, limited payment card details held by Stripe | Service providers | No |
| Commercial information | Plan, subscription, and billing history | Service providers | No |
| Internet or network activity | Log data, use of Service features, audit records | Service providers | No |
| Audio, electronic, or visual information | Task completion and daily log photos; drawn signatures | Service providers; other users as described in Section 6 | No |
| Professional or employment information | Company, role, trade category | Service providers; other users as described in Section 6 | No |
| Sensitive personal information | Login credentials (email and password) | Service providers (authentication) | No |
We do not collect geolocation data, biometric information, or inferences about you. We use sensitive personal information only for purposes permitted by the CCPA (such as providing the Service and ensuring security), and not to infer characteristics about you, so the right to limit its use does not apply.
We have not sold or shared (for cross-context behavioral advertising) personal information in the preceding 12 months, and we do not do so. We have no actual knowledge of selling or sharing the personal information of consumers under 16.
Nevada residents may submit a request directing us not to sell certain covered information. Although we do not sell covered information, you may submit a request to [email protected] with the subject line "Nevada Opt-Out Request."
If you are in the European Economic Area, the United Kingdom, or Switzerland, the following also applies to personal information for which we act as controller (Section 2.2).
Builder Worldwide