Privacy Policy

Last updated: September 7, 2026

The short version

Your company's data belongs to your company. Each SelfConstruct customer runs a private, single-tenant instance — your own database, your own file storage, isolated from every other customer. We process your data only to run the service for you. We never sell it, rent it, or use it to train third-party AI models.

What we store

• Business records you enter: customers, jobs, schedules, financial records, documents, and photos your team uploads.
• Account data: names, emails, and hashed passwords for your team's logins.
• Operational telemetry: error logs and instance health metrics (uptime, version, storage) — no content, just vital signs.
• Land Prospecting data: public county parcel records for the county you configure, processed to identify new landowners.

How it's protected

• HTTPS on every connection — our domains refuse unencrypted traffic.
• Passwords stored as salted PBKDF2 hashes; optional two-factor authentication on office logins.
• Offsite backups sealed with public-key encryption — the decryption key is never stored on any server.
• Client, crew, and vendor portals see only what your office explicitly shares.

Who touches your data (subprocessors)

We use a small set of infrastructure providers to run the service — hosting, AI features (your documents are processed to produce the outputs you request), email and SMS delivery, training narration, web research, address lookup, optional accounting sync, and encrypted offsite storage. Each receives only what its function requires.

The complete and current list, naming every provider and what it sees, is on our subprocessors page. That page is the authoritative one and this policy defers to it deliberately: a second list maintained here would drift out of date, and an incomplete list of who receives your data is worse than a pointer to a complete one.

Retention and deletion

Your data persists while your subscription is active. If you leave, you receive a complete export — database and files — and we delete your instance and its storage. Encrypted offsite backups age out of retention automatically afterward.

Breach notification

If we confirm unauthorized access to your data, we will notify you promptly — our target is within 72 hours — with what happened, what was involved, and what we did about it.

This website

If you request a walkthrough, we store the contact details you submit solely to respond to you. This marketing site sets no tracking cookies and runs no third-party analytics. It keeps a simple first-party page counter: your browser sends the path of the page you viewed, with no cookie, identifier, or fingerprint, and rate limiting uses a salted hash of your IP address that is purged hourly and never stored raw. The live demo is a fictional dataset; anything you view there involves no real company's information.

The assistant. If you type a question into the Ask box on this site, that question is sent to Anthropic, which operates the model that writes the reply, along with passages from these public pages for it to answer from. Because it holds a conversation, the earlier questions and answers of that conversation are sent with it, so a follow-up makes sense; the conversation is held in your browser tab only, is never stored by us, and is gone when you close the tab. Nothing else goes with it: no cookie, no identifier, and not your IP address. We do not keep your question or the answer. The only records we keep are counts — how many questions were asked, how many were answered, and what the model cost — and the same salted hourly hash of your IP address described above, used to limit how many questions one visitor can ask in an hour. Please do not type anything confidential into it. If you would rather reach a person, write to hello@selfconstruct.app.

Contact

Privacy questions: hello@selfconstruct.app.