Privacy Policy

Account Information

• Name, email address, phone number, and company name
• Business address and professional role or title
• Account credentials and authentication information
• Billing and payment information (processed securely through Stripe)

Project Data

• Project documents, plans, specifications, and drawings
• Bid submissions, cost estimates, and financial project data
• Permit applications and correspondence with jurisdictions
• Team communications, RFIs, change orders, and meeting notes

Usage Analytics

• Pages visited, features used, and actions taken on the Platform
• Session duration, click patterns, and navigation paths
• Error logs and performance data

Device Information

• Browser type and version, operating system, and device type
• IP address and general geographic location
• Screen resolution and language preferences

Service Delivery

• Providing, operating, and maintaining the Kealee Platform and its features
• Processing permit applications, bids, and project documents
• Facilitating team collaboration and stakeholder communication
• Processing payments and managing subscription billing

Communication

• Sending service-related notifications, updates, and alerts
• Responding to support requests and inquiries
• Sending marketing communications (with your consent; you may opt out at any time)

Improvement

• Analyzing usage patterns to improve features and user experience
• Developing new products, features, and services
• Conducting research and generating aggregated, anonymized analytics

Compliance

• Complying with legal obligations and regulatory requirements
• Enforcing our Terms of Service and preventing fraud or abuse
• Protecting the rights, safety, and property of Kealee and our users

Third-Party Service Providers

We share information with trusted service providers who assist in operating the Platform:

• Stripe — for secure payment processing and billing management
• Supabase — for database hosting, authentication, and file storage
• Cloud infrastructure providers for hosting and content delivery
• Analytics providers for understanding platform usage

Legal Requirements

• When required by law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of Kealee, our users, or the public
• To enforce our Terms of Service or investigate potential violations

Business Transfers

• In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction
• We will notify you of any such transfer and any choices you may have regarding your information

What We Do Not Do

• We do not sell your personal information to third parties
• We do not share your project data with competitors or unrelated businesses
• We do not use your information for purposes beyond what is described in this policy

Encryption

• All data transmitted between your device and the Kealee Platform is encrypted using TLS 1.2 or higher
• Data stored on our servers is encrypted at rest using AES-256 encryption
• Payment information is processed in compliance with PCI DSS standards through Stripe

Access Controls

• Role-based access controls limit data access to authorized personnel only
• Multi-factor authentication is available for all accounts
• Employee access to user data is logged and restricted on a need-to-know basis

Regular Audits

• We conduct regular security assessments and vulnerability testing
• Our infrastructure is continuously monitored for potential security threats
• We maintain an incident response plan and will notify affected users of any data breach in accordance with applicable law

Active Account Data

• Account and profile data is retained for the duration of your active account
• Project data is retained for 7 years after project completion for regulatory compliance
• Payment and billing records are retained as required by tax and financial regulations

Deleted Account Cleanup

• Upon account deletion, personal data is removed within 30 days
• Anonymized usage data may be retained for analytics and service improvement
• Certain records may be retained longer when required by law or for legitimate business purposes (such as resolving disputes)

Available Rights

• Access — Request a copy of the personal information we hold about you
• Correction — Request that we correct inaccurate or incomplete personal information
• Deletion — Request that we delete your personal information, subject to legal retention requirements
• Portability — Request your data in a structured, machine-readable format for transfer to another service
• Opt-out — Unsubscribe from marketing communications at any time using the link in any marketing email or through your account settings

How to Exercise Your Rights

• Contact us at privacy@kealee.com with your request
• Use the data management tools available in your account settings
• We will respond to verified requests within 30 days

Analytics

• We use analytics cookies to understand how users interact with the Platform
• Analytics data is aggregated and does not identify individual users

Preferences

• Functional cookies remember your settings, preferences, and login state
• Essential cookies are required for the Platform to function and cannot be disabled

Marketing

• Marketing cookies are only placed with your explicit consent
• You can manage your cookie preferences at any time through your browser settings or our cookie preference center
• Disabling non-essential cookies will not affect core Platform functionality