Privacy Policy

Last updated: June 24, 2026

Template for development. Have an attorney review and finalize this (and your subprocessor list and any DPA) before launch.

1. Who we are

DrawFort ("we") provides progress-billing software for subcontractors. This policy explains what we collect and how we use it.

2. Information we collect

Account data: name, company, email, password hash.
Business data you enter: projects, clients (GCs), schedules of values, pay applications, invoices, change orders, lien waivers.
Billing data: handled by Stripe; we store a customer/subscription identifier, not full card details.
Usage & device data: logs, IP address, and basic analytics to operate and secure the Service.

3. How we use it

To provide, maintain, and improve the Service.
To process payments and manage subscriptions.
To send transactional email (verification, receipts, documents you send).
To secure the Service and comply with legal obligations.

4. Subprocessors

We share data with vendors who help us run the Service, under contract: payment processing (Stripe), email delivery (Resend), hosting/database, and error monitoring. We do not sell your personal information.

5. Data retention

We retain your data while your account is active and as needed to comply with legal obligations. You can delete your account and request deletion of your data (see Your rights).

6. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise these rights.

7. Security

We use industry-standard measures (encryption in transit, hashed passwords, access controls). No system is perfectly secure; we cannot guarantee absolute security.

8. Contact

Privacy questions or requests: privacy@drawfort.app