Firmabuilt is software for running construction jobs: budgets, schedules, receipts and crew timecards. This page covers the Firmabuilt website, the app at firmabuilt.com, and the Firmabuilt app for iPhone, which opens the same app. It says what Firmabuilt keeps, why, who else handles it, who in your company can see it, and how to get a copy or have it deleted.
- Firmabuilt keeps what you and your company put in, so you can run your jobs.
- No ads. No tracking. We don't sell or rent anyone's information.
- Other companies never see your records. Inside your company, most of what each person sees depends on their role.
- Your location is saved only at the moment you do something, like clocking in. Never in the background.
What Firmabuilt keeps
Your account. Your name, email address, your role in your company, and your display settings.
Pay. The hourly rate, labor burden and payroll ID your company enters for you. Each shift keeps the rate that was in force when it was worked, so a raise never changes what past work cost.
Hours. When you clock in and out, your breaks, the task you worked, your notes, and any request to fix a shift with its reason.
Location. Firmabuilt asks your phone where it is only at the moment you do one of these: clock in or out, take a job site photo, hand in a receipt from the crew screen, attach a photo to an issue report, or set a job site's boundary from where you're standing. What's saved:
- the coordinates, with the punch or photo
- the street a clock-in or clock-out landed on, looked up once (see OpenStreetMap below)
- whether a clock-in was away from the job site, and the note you gave
Your location is never tracked in the background. If you say no to location, clocking in still works, and the punch is saved without one.
Photos and files. Job site photos, receipt photos and what was read from them, photos on issue reports, and plan sheets with the measurements and drawings made on them.
Jobs and money. Budgets, expenses, contracts and change orders, reimbursements, schedules and tasks, deals, store lists, rentals (units, leases, rent, property costs and values), and notes.
People you add. A subcontractor's name and phone number on a trade or contract, a tenant's name on a lease, and the name, email, role and pay rate of someone you invite. Only add what you have the right to share.
Billing. Your company's plan and subscription status, and the customer and subscription IDs Stripe gives us. Not card numbers.
Alerts. If an owner turns on notifications, the push address and keys their browser hands over. If you use the iPhone app and allow notifications, the address Apple gives that phone, so an alert can reach it; it goes when you turn notifications off on that phone, when Apple tells us the app is gone from it, or when your account is deleted. A record of the days alerts were sent to each owner.
AI use. A record each time AI reads a receipt, compares two receipts or drafts scope wording: who asked, when, and how much it used. That's how the monthly allowance is counted.
Early access list. If you join it on the website, your email address, and your company name if you give it.
On your device. Cookies that keep you signed in and remember the last job you opened, and your display settings saved in the browser. No advertising or analytics cookies.
Hosting logs. Vercel and Supabase keep logs of requests, such as IP address, time and the page asked for, for a limited time. They're used to keep Firmabuilt running and to track down problems.
Firmabuilt doesn't read your phone's contacts and doesn't use your microphone.
What it's used for
- Running Firmabuilt: showing your jobs, putting hours on the job at what they cost, flagging a clock-in away from the site, filling in expenses from receipts, and sending owners the daily alert email.
- Billing your company for its plan.
- Keeping Firmabuilt working and secure, and answering you when you write in.
- Counting how much each company uses Firmabuilt, like its people, jobs, shifts clocked and AI use, to keep AI within its monthly allowance and to see what each company costs to run.
That's all. No ads, no tracking across other apps or websites, and no selling or renting anyone's information.
Who in your company sees what
What you put in belongs to your company. The database itself keeps each company's records apart from every other company's.
- Owners see everything in the company, including every person's pay rate, hours and punch locations.
- A project manager on a job sees that job's money, including the pay rate on each shift worked there and what it cost, and the hours and punch locations of everyone who worked it.
- A crew lead on a job sees the hours and punch locations of everyone who worked it, and no money.
- Crew see their own hours and punch locations, and the jobs they're on with those jobs' photos, receipts and issue reports, including where each photo was taken. They don't see pay rates.
Whoever manages your company's team sets each person's role and jobs, and can give someone more than their role allows, like seeing everyone's pay rates.
Everyone in a company, whatever their role, can see:
- the name, email address, role and payroll ID of each person in it, and the name and email address of each person invited
- the company's stored photos, receipts and plan sheets. The screens show crew only the ones on their own jobs, but anyone with a sign-in at the company can open any of them.
The people who run Firmabuilt have an operator page. It shows each company's name, plan and billing status, its owner's email address, how many people and jobs it has, how much AI it used, and how many shifts its people clocked. Every visit to that page is logged. We look at your jobs, photos or money only when you ask us to help, or when we have to in order to fix a problem or keep Firmabuilt secure.
Who else handles it
Firmabuilt runs on these services, and each one gets only what its part of the work needs. Supabase, Vercel, Stripe, Resend and Anthropic handle it under agreements with Firmabuilt that bind them to protect it at least as well as this policy does, and to use it only for that work.
- Supabase stores Firmabuilt's database, photos and files, and runs sign-in, including sign-in links and password resets. The data is stored in Oregon, in the United States.
- Vercel runs the website and the app, and keeps the hosting logs above.
- Stripe handles subscription payments. When an owner picks a plan, the card is typed into Stripe's own page, and card details never reach Firmabuilt. We send Stripe the owner's email address and an ID for the company.
- Resend sends Firmabuilt's email, such as the daily alert email to owners, and a note to us when someone joins the early access list.
- Anthropic, the maker of Claude, is the AI. It gets:
- receipt photos, with your company's list of cost codes, to read the vendor, date, total and lines. That happens when someone photographs a receipt into an expense, and when someone who files receipts opens the Receipts page with receipts waiting to be read.
- two receipt photos, when someone asks whether they're the same purchase.
- a scope's name, notes, tasks, budget line descriptions and quantities, and its subcontracts' names and descriptions, when a manager asks for a draft of the scope in words. Budget and contract amounts are left out, but notes and descriptions go as they were typed, including any figures in them.
- OpenStreetMap:
- Firmabuilt's server sends a punch's coordinates to OpenStreetMap's Nominatim service to look up the street, when someone first opens that shift's location. It also sends an address a manager types in to find a job site.
- Maps in Firmabuilt load their pictures straight from OpenStreetMap, which sees your device's internet address and the area on the map.
- OpenStreetMap is a free public service with no agreement with Firmabuilt, so it handles what it gets under the OpenStreetMap Foundation's own privacy policy. Firmabuilt's lookups send only the coordinates or the address typed, never a name, a company or a job.
- Your browser's push service. If an owner turns on notifications, alerts travel through the push service run by the browser's maker, such as Apple, Google or Mozilla. The message is encrypted, so the push service can't read it.
- Apple. If you allow notifications in the iPhone app, alerts travel through Apple's Push Notification service to reach your phone. What we send is the alert itself, so Apple sees it on its way through.
We don't share your information with anyone else, unless the law requires it.
How long it's kept
- Your company's records stay until someone deletes them, and that includes archived jobs.
- A job an owner deletes waits in Deleted jobs for 30 days, where it can be restored. After that it's deleted for good, with its photos and plan sheets.
- When someone leaves a company, the company switches off their account. Their hours, receipts and photos stay, because they're the company's pay and cost records.
- Vercel and Supabase keep hosting logs for a limited time.
Getting a copy, or having it deleted
A copy. Owners, project managers and crew leads can download hours as a spreadsheet from Exports, and owners and project managers can download expenses. For anything else, or a copy of what Firmabuilt holds about you, email daniel@firmabuilt.com.
Your account. You can delete your account in Firmabuilt: open the menu in the top right and choose Delete account. The page says what goes and what stays before you confirm, and asks for your password or a code we email you. Your name, email, phone, the places you clocked in and out, your photos, your issue reports and your place on jobs are deleted. Your hours and the receipts you handed in stay with your employer, because they are that company's pay and cost records; they read as “Former crew member” afterwards. If you're the only owner of a company, the same page closes the company instead: it stops the billing, gives you the records to download first, and everything is deleted 30 days later.
A job. Owners can delete a job. It's gone for good 30 days later.
Location. You can turn off location for Firmabuilt in your phone or browser settings at any time. Clocking in keeps working.
Notifications. Turn them off in Settings, under Notifications, and on an iPhone in the phone's own settings for the Firmabuilt app.
Early access list. Email us and we'll take you off it.
Keeping it safe
Each company's records are kept apart by rules in the database itself, not just by the screens. Photos, receipts and plan sheets are kept in private storage that opens only for people on that job, not for everyone in the company, and the links the app shows them through expire within an hour. A receipt you handed in stays yours to open. An account switched off on the Team page opens nothing at all. Card details never reach Firmabuilt.
Children
Firmabuilt is a work tool for construction businesses. It isn't meant for children under 13, and we don't knowingly collect information from them. If you think a child has an account, email daniel@firmabuilt.com and we'll delete the account and the information it added.
Changes to this policy
When this policy changes, the date at the top changes with it. For a change that matters, like a new service handling your information, we'll also tell company owners by email.
Contact
Questions about this policy or your information: daniel@firmabuilt.com. For help with the app, see Support.