Privacy Policy

1. Introduction

This Privacy Policy describes how Sandspit ("Sandspit," "we," "us," or "our") collects, uses, and protects information when you access or use our software platform (the "Service").

By using the Service, you agree to the collection and use of information as described in this policy.

2. Information We Collect

2.1 Information You Provide

We may collect information you voluntarily provide, including:

• Name, email address, and company name
• Account credentials and authentication tokens
• Feedback, messages, or support requests

2.2 Project & Workflow Data

When you connect Sandspit to third-party platforms (such as Procore), we may process:

• Project metadata
• Submittals, RFIs, and related workflow records
• User names, roles, and assignments associated with those records

This data is referred to as Customer Data.

2.3 Automatically Collected Information

We may collect limited technical information such as:

• IP address
• Browser type and device information
• Log data related to feature usage and performance

This information is used solely to operate and improve the Service.

3. How We Use Information

We use collected information to:

• Provide and operate the Service
• Synchronize and display project data
• Improve product performance and usability
• Respond to support requests
• Monitor security and prevent abuse

We do not use your data for advertising or resale.

4. Procore & Third-Party Integrations

Sandspit integrates with third-party services such as Procore.

You acknowledge that:

• Data access is governed by permissions you grant
• Third-party services operate under their own privacy policies
• Sandspit is not responsible for third-party data practices

Sandspit does not access data beyond what is required to provide the Service.

5. Data Ownership

• You retain ownership of all Customer Data
• Sandspit acts as a data processor, not a data owner
• We use Customer Data only to provide the Service

We do not claim ownership of your project or construction data.

6. Data Sharing

We do not sell personal or project data.

We may share information only:

• With service providers who help operate the Service (e.g., hosting, monitoring)
• When required by law or legal process
• To protect the rights, safety, or security of Sandspit or users

All vendors are required to maintain appropriate confidentiality and security controls.

7. Third-Party Service Providers

Sandspit uses trusted third-party service providers to operate, maintain, and improve the Service. These providers process data solely on our behalf and in accordance with this Privacy Policy.

Our current service providers include:

• Cloudflare – CDN, DNS, and web security
• Axiom – application performance monitoring and logging
• Neon – primary application database and data storage
• PostHog – product analytics and usage insights
• Railway – application hosting and infrastructure
• Sentry – error tracking and monitoring

8. Data Security

Sandspit implements reasonable administrative, technical, and physical safeguards designed to protect information from unauthorized access, loss, or misuse.

However, no system can be guaranteed 100% secure.

9. Data Retention

• We retain Customer Data while your account is active
• Upon account termination, data may be deleted after a reasonable retention period
• Backup copies may persist temporarily for operational or legal reasons

10. Cookies & Analytics

Sandspit may use cookies or similar technologies to:

• Maintain user sessions
• Understand feature usage
• Improve product performance

We do not use third-party advertising cookies.

11. Your Rights & Choices

Depending on your location, you may have rights to:

• Access or correct your personal information
• Request deletion of your data
• Object to certain processing activities

Requests can be made by contacting us at the email below.

12. Children's Privacy

Sandspit is not intended for use by children under 13. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by updating the "Last Updated" date.

Continued use of the Service constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

[email protected]