Conduit Conduit
Terms of Service Privacy Policy SMS Consent Consent Proof

Privacy Policy

Last updated: March 20, 2026

This Privacy Policy describes how Conduit for Contractors LLC ("Conduit," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you use our website at conduitforcontractors.com, our mobile applications for iOS and Android, and all related services (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

If you do not agree with this Privacy Policy, please do not use the Service.

1. Information We Collect

We collect information in the following categories:

1.1 Account and Profile Information

When you create an account, we collect your name, email address, and password. If you create a company profile, we also collect your company name, phone number, business address, trade type, and timezone preferences.

1.2 Billing and Payment Information

When you subscribe to a paid plan or process payments through the Service, payment information (credit card numbers, bank account details) is collected and processed directly by our payment processor, Stripe, Inc. We do not store your full payment card or bank account details on our servers. We receive only a tokenized reference, the last four digits of your card or account, card brand, and expiration date for display purposes.

1.3 Business Data You Provide

Through your use of the Service, you may store and manage customer information, job details, project records, bids, invoices, time entries, material usage, messages, photos, documents, plans, RFIs, submittals, change orders, and other business records. This data is stored solely to provide the Service's functionality and remains under your control.

1.4 Your Customers' Information

When you add customers to the Service, you provide us with their names, email addresses, phone numbers, and mailing addresses. We process this information on your behalf to enable features such as invoicing, bid delivery, appointment reminders, and SMS notifications. You are responsible for ensuring you have appropriate consent from your customers to store and use their information through our Service.

1.5 SMS and Telecommunications Data

When you or your customers interact with our SMS messaging features, we collect and process:

  • Phone numbers (sender and recipient)
  • Message content (for delivery and record-keeping)
  • Message delivery status (queued, sent, delivered, failed)
  • Opt-in and opt-out preferences
  • Timestamps of messages sent and received

Important: We do not sell, share, or use phone numbers, message content, or opt-in/opt-out data for advertising, marketing to unrelated third parties, or any purpose unrelated to the Service. SMS data is used exclusively to deliver messages you initiate through the platform (such as invoice notifications, appointment reminders, and job status updates) and to maintain compliance with telecommunications regulations.

1.6 Device and Usage Information

We automatically collect information about how you access and interact with the Service, including:

  • IP address and approximate geographic location
  • Browser type and version
  • Operating system and device type (desktop, mobile, tablet)
  • Device identifiers (for mobile applications)
  • Pages visited, features used, and actions taken within the Service
  • Date and time of access, session duration
  • Referring URL or source
  • Crash reports and performance diagnostics

1.7 Location Information

Our mobile applications may request access to your device's location services for features such as clock-in/clock-out verification and job site navigation. Location data is only collected when you have granted permission through your device settings and is not continuously tracked. You can revoke location permissions at any time through your device's settings.

1.8 Camera and Photo Library

Our mobile applications and web platform may request access to your device's camera and photo library to enable job site photo documentation, profile photos, document uploads, and AI-powered photo scanning (such as importing customer lists from handwritten notes). Photos and images are only accessed and uploaded when you explicitly initiate these actions. We do not access your camera or photo library in the background. When you use the photo scanning feature, your image is sent to a third-party AI service (Anthropic) for text extraction — see Section 2.1 for details.

1.9 Cookies and Local Storage

We use session cookies for authentication and local storage for user preferences (such as theme settings and view modes). We do not use third-party advertising or tracking cookies. We do not participate in cross-site tracking or targeted advertising.

1.10 Push Notifications

If you enable push notifications on our mobile applications, we collect your device's push notification token to deliver alerts about job updates, messages, and other time-sensitive information. You can disable push notifications at any time through your device's settings.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and operate the Service — including job management, invoicing, time tracking, project management, and all core platform features
  • Process payments — manage subscriptions, process customer payments, issue refunds, and handle ACH and credit card transactions through Stripe
  • Send transactional communications — deliver account confirmations, password resets, payment receipts, invoice notifications, bid deliveries, appointment reminders, and job status updates via email and SMS
  • Provide customer support — respond to your inquiries and resolve technical issues
  • Maintain security — monitor for unauthorized access, detect fraud, enforce account lockout policies, and protect the integrity of the Service
  • Improve the Service — analyze usage patterns, diagnose errors, and develop new features
  • Comply with legal obligations — meet applicable legal, regulatory, and tax requirements
  • Power AI-assisted features — generate bid descriptions, draft customer messages, provide in-app business assistance, and extract customer information from uploaded photos and images using third-party AI services (see Section 2.1 below)

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

2.1 AI-Powered Features and Data Processing

Certain features of the Service use artificial intelligence (AI) provided by Anthropic, PBC to process your data. These features include:

  • Photo scanning for customer import: When you upload a photo of a handwritten or printed customer list, the image is sent to Anthropic's API for text extraction. The extracted text (customer names, phone numbers, emails, addresses) is returned to you for review before any data is saved.
  • Bid description generation: Line item details and project information you provide may be sent to Anthropic's API to generate scope-of-work descriptions.
  • Customer message drafts: Invoice or bid details may be sent to generate a brief customer-facing message.
  • AI business assistant: Messages you send to the in-app assistant are processed by Anthropic's API to provide responses.

Important disclosures about AI data processing:

  • Data sent to Anthropic is transmitted securely over encrypted connections (HTTPS/TLS).
  • Anthropic does not use data submitted through its API to train or improve its AI models.
  • Anthropic may retain API inputs and outputs for up to 30 days for trust and safety purposes, after which they are deleted. See Anthropic's Privacy Policy for details.
  • AI-generated outputs (such as extracted customer data or generated text) may contain inaccuracies. You are responsible for reviewing all AI-generated content before using it.
  • Photos uploaded for customer import scanning are not stored by Conduit after processing is complete. They are sent to Anthropic's API in real time and discarded from our servers immediately after the response is received.

3. SMS Messaging Policy

Conduit enables businesses to send SMS messages to their customers for legitimate business purposes. This section describes our SMS practices in detail.

3.1 Types of Messages

Messages sent through Conduit include:

  • Invoice delivery notifications with payment links
  • Payment confirmations and receipts
  • Bid/estimate delivery notifications
  • Appointment reminders and scheduling updates
  • Job status updates (en route, completed)
  • Overdue payment reminders

3.2 Consent and Opt-In

SMS messages are only sent to customers whose phone numbers have been added to the Service by the business account holder. By providing a customer's phone number and initiating an SMS-based action (such as sending an invoice or appointment reminder), the business account holder represents that they have obtained appropriate consent from the recipient to receive such messages.

3.3 Opt-Out

Recipients may opt out of SMS messages at any time by replying STOP to any message received from Conduit. Once a recipient opts out, their opt-out status is recorded and no further SMS messages will be sent to that number through our platform. Business account holders can also manually mark customers as opted out within the Service.

3.4 Message Frequency

Message frequency varies based on business activity. Messages are only sent when triggered by specific business actions (e.g., sending an invoice, scheduling a job). Conduit does not send marketing messages, promotional content, or automated recurring messages unrelated to active business transactions.

3.5 Carrier Disclosure

Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. Messages are sent from Conduit's registered business phone number. For questions about SMS messaging, contact support@conduitforcontractors.com.

3.6 SMS Data Protection

Phone numbers, message content, and opt-in/opt-out information are:

  • Never sold to third parties
  • Never shared with third parties for marketing or advertising purposes
  • Never used for purposes unrelated to the Service
  • Transmitted securely via encrypted connections
  • Stored only as long as necessary for service delivery and compliance

No mobile information sharing: The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Mobile information and SMS consent data will not be shared with or sold to third parties or affiliates for marketing or promotional purposes.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We share information only in the following limited circumstances:

4.1 Service Providers

We use third-party services to operate the platform. These providers only access the minimum data necessary to perform their services and are bound by contractual obligations to protect your data:

  • Stripe — Payment processing, subscription billing, and Stripe Connect for contractor payouts. Subject to Stripe's Privacy Policy.
  • Twilio — SMS message delivery and phone number verification. Subject to Twilio's Privacy Policy.
  • Resend — Transactional email delivery (invoices, receipts, notifications).
  • Google Cloud Platform — File storage for photos, documents, and plan uploads.
  • Railway — Application hosting and infrastructure.
  • Sentry — Error monitoring and crash reporting for application stability.
  • Firebase Cloud Messaging — Push notification delivery for mobile applications.
  • Anthropic — AI-powered features including business assistance, bid description generation, and image-to-text extraction for customer list imports. Data sent to Anthropic is processed in accordance with Anthropic's Privacy Policy. Anthropic does not use your data to train its AI models.

4.2 Your Customers

When you send bids, invoices, completion receipts, or project information through the Service, the recipients will see your company name, contact information, and the content you choose to include. Payment links may also display your company's branding.

4.3 Cross-Company Features

If you use Conduit's sub-contractor management features, limited project information (such as project name, address, and scope of work) may be shared between general contractors and sub-contractors who are both on the platform. This sharing only occurs when explicitly initiated by the general contractor through bid requests or project assignments.

4.4 Legal Requirements

We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, the safety of others, investigate fraud, or respond to a government request.

4.5 Business Transfers

If Conduit is involved in a merger, acquisition, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Service of any change in ownership or uses of your personal information.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption in transit (HTTPS/TLS) for all connections
  • Encrypted passwords using bcrypt hashing (passwords are never stored in plain text)
  • PCI-DSS compliant payment processing through Stripe — payment card data never touches our servers
  • Content Security Policy (CSP) headers to prevent cross-site scripting attacks
  • Account lockout after repeated failed login attempts
  • Session timeout after 8 hours of inactivity
  • API authentication via secure tokens for mobile applications
  • Role-based access controls within company accounts
  • Regular security updates and dependency patching

While we take reasonable precautions to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide you the Service. Specific retention periods include:

  • Account data: Retained for the duration of your active account plus 90 days after account deletion to allow for reactivation
  • Business records (invoices, jobs, bids): Retained for the duration of your account; you may export data at any time
  • SMS message logs: Retained for up to 2 years for compliance and dispute resolution purposes
  • Payment records: Retained as required by applicable tax and financial regulations (typically 7 years)
  • Server logs: Retained for up to 90 days for security monitoring and debugging

You may request deletion of your account and all associated data by contacting us at support@conduitforcontractors.com. We will process deletion requests within 30 days, except where retention is required by law.

7. Your Rights and Choices

7.1 All Users

Regardless of your location, you may:

  • Access and update your account information at any time through the Service
  • Request a copy of the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and personal data
  • Opt out of non-essential communications
  • Disable push notifications through your device settings
  • Revoke camera, photo library, and location permissions through your device settings

7.2 California Residents (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Right to Know: You may request the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes, and the categories of third parties with whom we share it.
  • Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
  • Right to Correct: You may request correction of inaccurate personal information.
  • Right to Opt Out of Sale/Sharing: We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at support@conduitforcontractors.com. We will verify your identity before processing your request and respond within 45 days.

7.3 European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including:

  • The right to access, rectify, or erase your personal data
  • The right to restrict or object to processing
  • The right to data portability
  • The right to withdraw consent at any time
  • The right to lodge a complaint with a supervisory authority

Our legal basis for processing your personal data includes: performance of a contract (providing the Service), legitimate interests (improving the Service, security), compliance with legal obligations, and your consent where applicable.

8. Mobile Applications

Our mobile applications for iOS (Apple App Store) and Android (Google Play Store) may collect additional information as described below. The practices in this Privacy Policy apply to data collected through our mobile applications in the same manner as data collected through our website.

8.1 Permissions

Our mobile applications may request the following device permissions:

  • Camera: To take photos for job documentation
  • Photo Library / Storage: To upload existing photos and save downloaded documents
  • Location: To support clock-in verification and navigation to job sites (optional)
  • Push Notifications: To receive real-time alerts about job updates and messages
  • Internet Access: Required for all Service functionality

All permissions are optional and can be managed through your device's settings. The Service will function with reduced capabilities if certain permissions are denied.

8.2 App Tracking and Advertising

We do not track you across other companies' apps or websites for advertising purposes. We do not use Apple's IDFA (Identifier for Advertisers) or Google's Advertising ID for ad targeting. We do not participate in ad networks or display third-party advertisements within our applications.

8.3 Analytics and Crash Reporting

Our mobile applications may collect anonymized crash reports and performance data to help us identify and fix bugs. This data does not include personally identifiable information and is used solely for improving application stability and performance.

8.4 Data Stored on Device

Our mobile applications may store authentication tokens, user preferences, and cached data on your device for performance purposes. This data is stored securely and is cleared when you log out or uninstall the application.

9. Third-Party Links

The Service may contain links to third-party websites or services (such as Stripe payment pages or map providers). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

10. Children's Privacy

The Service is designed for business use and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take immediate steps to delete such information. If you believe a child under 18 has provided us with personal information, please contact us at support@conduitforcontractors.com.

11. International Data Transfers

Conduit is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify you by email or through a prominent notice within the Service
  • Where required by law, obtain your consent to the changes

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Conduit for Contractors LLC

Email: support@conduitforcontractors.com

Arvada, Colorado, United States

We will respond to all privacy-related inquiries within 30 days.

© 2026 Conduit for Contractors LLC · support@conduitforcontractors.com