Template — this document is a starting point and has not been reviewed by legal counsel. Have it reviewed before relying on it in production.
1. What this covers
This policy explains what data EDC Built collects, how we use and protect it, how long we keep it, and the choices you have. It applies to the EDC Built platform (the “Service”).
2. What we collect
- Account information — your name, email, and preferences.
- Your organization’s work — the projects, specifications, drawings, approvals, procurement, billing documents, photos, and files you and your team create or upload.
- Usage and diagnostics — limited technical logs and error reports we use to keep the Service reliable and secure.
We do
not store payment card details. When paid plans are enabled, payments are handled by our payment processor; we keep only a customer reference and your subscription status.
3. How we use it
We use your data only to provide and operate the Service for you — hosting your work, delivering documents and notifications you send, enforcing your plan, and keeping the Service secure and working. We do not sell your data, and we do not use your project content for advertising.
4. Keeping organizations separate
Each organization’s data is isolated from every other organization at the database level. Members of one organization cannot access another organization’s data.
5. Service providers
We rely on a small number of trusted providers to run the Service — for hosting and database (which store your content), for sending email on your behalf, for error monitoring, and, when paid plans are enabled, for payment processing. These providers process data only to provide their service to us.
6. How long we keep your data
- While your subscription is active, we keep your organization’s data so you can work with it.
- If a subscription lapses, your workspace becomes read-only, but your data is retained so you can resolve billing and resume — or export it and leave.
- When you ask us to delete your organization, we erase its data (see below).
- We keep a minimal audit record that a deletion happened (which organization, when) — but not the deleted content itself.
- Backups are retained for a limited window; if you request deletion, we ensure it is applied even after any backup restore within that window.
7. Your choices and rights
- Get a copy of your data (portability). You can request a complete, machine-readable export of your organization’s records and files.
- Delete your data (erasure). You can request permanent deletion of your organization. This removes its records and uploaded files and cannot be undone; we recommend exporting first.
- Access and correction. You can view and update your account information in Settings at any time.
To make a portability or deletion request, contact us (below). Deleting an organization does not delete a person’s user account if they belong to other organizations.
8. Security
We protect your data with access controls, database-level isolation between organizations, encrypted connections, and least-privilege access for our systems. No service can promise perfect security, but we work to protect your data and to respond quickly to issues.
9. Children
The Service is intended for business use and is not directed to children.
10. Changes to this policy
We may update this policy. When we make a material change, we will revise the effective date above and, where appropriate, notify you.
11. Contact
Questions about this policy, or to make a data request, can be directed to EDC Built at
hello@edcbuilt.com.
See also our Terms of Service.