Privacy Policy

Last Modified: March 18, 2026

inBuild, Inc. (“inBuild,” “we,” “our,” or “us”) provides a cloud-based financial workflow automation platform for the construction industry, available at https://www.inbuild.ai and through our related mobile applications and integrations (collectively, the “Service”). Our customers are businesses — general contractors, subcontractors, owners, and their teams — and this Privacy Policy reflects that reality.

This Privacy Policy (“Policy”) describes how we collect, use, and share information in connection with the Service. It covers two distinct categories of data: (1) personal information of individual users and contacts, and (2) Customer Data — the business and project data that customers submit to the Service. This Policy is incorporated into and subject to our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

1. Key Definitions

Customer: The business entity (e.g., a construction company) that has agreed to our Terms of Service and is authorized to use the Service.

Authorized User: An individual employee, contractor, or agent of a Customer who is authorized by that Customer to access the Service.

Customer Data: All information, data, and content submitted to the Service by or on behalf of a Customer or Authorized User, including project details, vendor information, invoice data, financial records, contracts, and documents. Customer Data is owned by the Customer, not by inBuild.

Aggregated Statistics: Data derived from Customer usage of the Service that has been anonymized, de-identified, such that it cannot reasonably identify any Customer, Authorized User, or individual. Aggregated Statistics are owned by inBuild.

Personal Information: Information that identifies or is reasonably linkable to an individual Authorized User or contact, such as name, email address, or device identifiers.

2. Information We Collect

2.1 Customer Data

The primary data that flows through the Service is Customer Data submitted by Customers and Authorized Users. This includes:

•         Project information: project names, locations, contract values, cost categories, and status

•         Vendor and subcontractor details: names, addresses, contact information, payment terms, and lien records

•         Financial documents: invoices, purchase orders, receipts, lien waivers, and related PDFs

•         Workflow data: approval histories, payment statuses, and audit trails

•         Integration data: information synced from connected platforms such as Procore, QuickBooks, Sage, or Outlook

As stated in our Terms of Service, Customers own their Customer Data. inBuild’s rights to use Customer Data are limited to those described in this Policy and the Terms of Service.

2.2 Personal Information of Authorized Users

When individuals register for or use the Service on behalf of a Customer, we collect:

•         Account information: name, business email address, job title, and company name

•         Authentication credentials (stored in encrypted form)

•         Contact preferences and communication settings

•         Billing contacts and payment information for account administration

2.3 Automatically Collected Technical Data

When Authorized Users access the Service, we and our service providers may automatically collect:

•         Device and browser identifiers, IP address, and operating system

•         Log data: pages visited, features used, timestamps, and session duration

•         Performance and error data used to maintain and improve the Service

•         Email interaction data (e.g., whether a notification email was opened or clicked)

2.4 Integration and Third-Party Source Data

If a Customer connects the Service to a third-party platform (such as Procore, QuickBooks, or Outlook), we receive data from that platform as authorized by the Customer. The Customer controls which integrations are enabled and what data is shared. Each connected platform’s own terms and privacy policies govern that platform’s data practices.

2.5 Cookies and Tracking Technologies

We use cookies and similar technologies to support authentication, remember user preferences, and analyze Service usage. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect Service functionality. For more information, contact us at support@inbuild.ai.

3. How We Use Information

3.1 To Provide and Operate the Service

We use Customer Data and Personal Information as necessary to deliver the Service, including:

•         Processing, displaying, and managing invoices, documents, and financial workflows

•         Enabling integrations with connected third-party platforms

•         Authenticating users and managing account access

•         Providing customer support, maintenance, and technical assistance

•         Sending transactional and administrative communications related to the Service

3.2 Aggregated Statistics and Service Improvement

We analyze de-identified, aggregated usage data (Aggregated Statistics) to understand how the Service is used, identify areas for improvement, and develop new features. Aggregated Statistics cannot reasonably be used to identify any Customer, Authorized User, or individual, and inBuild owns all rights in Aggregated Statistics as described in the Terms of Service.

3.3 AI and Machine Learning

Important notice regarding AI and your data: Please read this section carefully.

The Service is fundamentally powered by artificial intelligence and machine learning. AI processing is not an optional feature — it is integral to how the Service works, and the Service cannot be provided without it. The following describes how Customer Data is processed in connection with AI.

•         Service delivery: Customer Data is processed by AI systems to perform core Service functions, including extracting structured data from invoices and documents, automating and routing workflows, learning account-specific preferences, and generating financial insights. This processing occurs as a standard part of Service operation.

•         AI model training: inBuild uses third-party AI service providers to deliver these capabilities. These providers are subprocessors operating under their own terms of service and privacy policies. inBuild does not control, and cannot guarantee or warrant, the data practices of these third-party providers, including whether they may use data submitted to their platforms for purposes of training or improving their AI models, including foundational models. Customers should be aware that industry-standard AI providers may, under their own terms, retain or use submitted data for model improvement unless enterprise data processing agreements are separately negotiated with those providers.

•         No Cross-Customer Data Exposure: inBuild does not intentionally use Customer Data in a manner that would expose one Customer's confidential information to another Customer's account or Service outputs.

•         Acknowledgment: By using the Service, Customer acknowledges that AI processing of Customer Data — including processing by third-party AI providers — is a necessary condition of service delivery, and that inBuild cannot guarantee the downstream data practices of those third-party providers. If you have questions about which AI providers inBuild uses, please contact us at support@inbuild.ai.

3.4 Marketing and Communications

We may use the contact information of Authorized Users to send product updates, promotional materials, and industry communications. You may opt out of promotional messages at any time (see Section 8, Your Choices). We will continue to send transactional and administrative communications regardless of marketing preferences.

3.5 Legal and Security Purposes

We may use information to detect, investigate, and prevent fraud, unauthorized access, or violations of our Terms of Service; to comply with applicable legal obligations; and to protect the rights, property, and safety of inBuild, our customers, and the public.

4. How We Share Information

We do not sell Customer Data or Personal Information. We may share information in the following circumstances:

•         Subprocessors and Service Providers: We engage third-party vendors to help operate the Service, including cloud hosting providers, payment processors, analytics platforms, and AI service providers. These subprocessors are contractually required to protect your data and process it only as directed by inBuild. A list of our current subprocessors is available upon request at support@inbuild.ai.

•         Third-Party Integrations: When a Customer enables an integration (e.g., Procore, QuickBooks), data is shared with that platform as directed by the Customer. Such sharing is governed by the Customer’s agreement with that third party.

•         Aggregated Statistics: We may share anonymized, aggregated data with partners, investors, or the public for business and marketing purposes. This data cannot identify any Customer or individual.

•         Business Transfers: In connection with a merger, acquisition, financing, or sale of assets, Customer Data and Personal Information may be transferred to a successor entity. We will provide reasonable advance notice and, where required by law, obtain consent.

•         Legal Compliance: We may disclose information when required by applicable law, court order, or governmental authority. Where permitted by law, we will notify the affected Customer before disclosing their data.

•         Protection of Rights: We may disclose information to protect the security or integrity of the Service, enforce our agreements, or prevent fraud or harm.

5. Customer Data: Ownership and Responsibilities

As between inBuild and the Customer, the Customer owns all right, title, and interest in its Customer Data, including all intellectual property rights therein. inBuild’s license to use Customer Data is limited to what is necessary to provide the Service and as otherwise described in this Policy and the Terms of Service.

Customers are responsible for:

•         Ensuring they have the right to submit Customer Data to the Service, including any personal information of third parties (e.g., subcontractor employees, vendors)

•         Obtaining any required consents from individuals whose personal information is included in Customer Data

•         The accuracy, quality, and legality of Customer Data

•         Configuring Authorized User access and permissions appropriately

Upon termination or cancellation of a Customer’s account, inBuild will make Customer Data available for export or download for ninety (90) days, consistent with our Terms of Service. After that period, inBuild may delete Customer Data unless prohibited by law.

6. Data Security

We maintain commercially reasonable administrative, physical, and technical safeguards designed to protect the security, confidentiality, and integrity of Customer Data and Personal Information. These measures are designed to protect against unauthorized access, disclosure, alteration, and destruction.

In the event of a confirmed security breach affecting Customer Data, we will notify affected Customers without undue delay and in accordance with applicable law, and will take reasonable steps to investigate and mitigate the impact. Customers are also responsible for maintaining the security of their own systems, networks, and access credentials.

If you become aware of any security vulnerability or incident related to the Service, please contact us promptly at support@inbuild.ai.

7. Data Retention

We retain Customer Data for as long as a Customer’s account is active and for ninety (90) days following termination or cancellation, after which it is deleted unless we are required by law to retain it longer. We retain Aggregated Statistics indefinitely, as they do not contain personally identifiable information.

We retain Personal Information of Authorized Users for as long as their account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

8. Your Choices

8.1 Account Information

Authorized Users may update or correct their account information through their account settings at any time. Customers may also contact us at support@inbuild.ai to access, amend, or request deletion of Personal Information we hold about them.

8.2 Marketing Communications

To opt out of promotional communications, follow the unsubscribe instructions in any marketing email, or contact us at support@inbuild.ai. Please allow up to ten (10) business days to process your request. Transactional and administrative messages related to your account will continue regardless of marketing preferences.

8.3 Integration Controls

Customers control which third-party integrations are enabled on their accounts and may disconnect integrations at any time through their account settings. Disconnecting an integration stops future data sharing with that platform but does not automatically delete data previously shared.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). Note that many of these rights apply to Personal Information of individual Authorized Users; Customer Data rights are primarily governed by the Terms of Service.

•         Right to Know: Request information about the categories and specific pieces of personal information we have collected, and how we use and share it.

•         Right to Delete: Request deletion of your personal information, subject to certain exceptions.

•         Right to Correct: Request correction of inaccurate personal information we hold about you.

•         Right to Opt Out of Sale/Sharing: We do not sell personal information or share it for cross-context behavioral advertising. If our practices change, we will update this Policy and provide an opt-out mechanism.

•         Right to Limit Use of Sensitive Personal Information: Request that we limit our use of sensitive personal information to what is necessary to provide the Service.

•         Right to Non-Discrimination: We will not discriminate against you for exercising your California privacy rights.

To submit a request, contact us at support@inbuild.ai. We will verify your identity before processing your request and respond within 45 days as required by law.

10. Nevada Privacy Rights

Nevada residents may opt out of the sale of their personal information. inBuild does not sell personal information. Nevada residents may nonetheless submit opt-out requests to support@inbuild.ai.

11. International Users

The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, subject to applicable US law.

The Service is not directed to individuals or businesses located in the European Economic Area (EEA), the United Kingdom, or Switzerland, and inBuild does not knowingly collect personal data from individuals in those regions. If you are located in the EEA, UK, or Switzerland, please do not use the Service.

12. Third-Party Links and Integrations

The Service may contain links to or integrations with third-party websites, applications, or platforms. We are not responsible for the privacy or security practices of those third parties. We encourage you to review the privacy policies of any third-party services you connect to or access through the Service, including integration partners such as Procore, QuickBooks, and Outlook.

13. Children’s Privacy

The Service is designed for use by business professionals and is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will promptly delete it. Please contact us at support@inbuild.ai if you have concerns.

14. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, or legal requirements. A revised version will become effective and binding the next business day after it is posted to https://www.inbuild.ai/privacy/. We will notify Customers of any revision by email to the address associated with their account or by in-app notification. If you do not agree with a modification, you must notify us in writing within thirty (30) days after we send notice of the revision; if you do, the prior version of this Policy will continue to govern until your next renewal date, after which the then-current version will apply. Your continued use of the Service after the effective date of any modification without timely written objection constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically.

INBUILD, INC. | (970) 450-5186 | support@inbuild.ai