1. Introduction
AECify ("we," "our," or "us") provides an AI-powered construction inspection and project management platform for the Architecture, Engineering, and Construction (AEC) industry. This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use our services at aecify.com (the "Service").
By using the Service, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, phone number, company name, job title
- Project data: Project names, addresses, inspection records, documents, photos
- Communications: Messages sent through the platform, form submissions
- Payment information: Processed securely by Stripe — we never store credit card numbers on our servers
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, timestamps
- Device information: Browser type, operating system, screen resolution
- Location data: GPS coordinates when you use location features (with your permission)
- Log data: IP addresses, error reports, performance metrics
3. How We Use Your Information
- Provide, maintain, and improve the Service
- Process transactions and manage your subscription
- Send transactional emails (account confirmations, password resets, project notifications)
- Provide AI-powered features (photo analysis, code compliance, document analysis)
- Monitor and improve security, detect fraud and abuse
- Comply with legal obligations
4. How We Share Your Information
We do not sell your personal information. We share data only with:
- Service providers: Supabase (hosting/database), Stripe (payments), Vercel (web hosting), Resend (email), OpenAI (AI features), Mapbox (maps)
- Your organization: Other members of your organization can see shared project data according to their permission level
- Project collaborators: Stakeholders you invite to projects can access project-specific data
- Legal requirements: When required by law, court order, or to protect our rights
5. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Row Level Security (RLS) on all database tables for multi-tenant isolation
- Multi-factor authentication (TOTP) support
- Regular security audits and vulnerability scanning
- Strict access controls and principle of least privilege
- SOC 2 compliance program
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we permanently remove your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., audit logs retained for 2 years per compliance requirements).
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data (available via Profile > Security > Export Your Data)
- Deletion: Request permanent deletion of your account and data (available via Profile > Security > Delete Account)
- Correction: Update your personal information via your profile settings
- Portability: Export your data in a machine-readable JSON format
- Objection: Object to certain processing activities by contacting us
To exercise these rights, use the self-service tools in your account settings or contact us at privacy@aecify.com.
8. Cookies and Tracking
AECify uses essential cookies and local storage for authentication and session management. We do not use third-party advertising cookies or tracking pixels. Analytics data is collected through our own logging infrastructure and is not shared with third-party analytics providers.
9. Children's Privacy
The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through an in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at: