Data Privacy Policy

1 Overview & Scope

ConstructionOS is an evidence-led construction operating platform designed to streamline project tracking and contractor verification. This privacy policy details how we handle personal data, compliance documentation, and telemetry metadata uploaded by clients, contractors, and field operators during verify and site operations.

2 Information We Process

To perform verification, compliance checks, and logging operations, the platform collects the following datasets:

• For Clients (Consumers): Names, email addresses, project descriptions, and structural drawings or plan uploads.
• For Subcontractors (Contractors): Business trading names, Companies House Registration Numbers (CRN), VAT numbers, public liability cover limits, insurance certificates, trade competency cards (CSCS), and answers to regulatory compliance questions.
• For Site Operators (Supervisors): Time logs, progress descriptions, and site photograph evidence.
• Telemetry Metadata: Device parameters, operating system types, browser version headers, and GPS geofence coordinates mapped dynamically on photos to verify location authenticity.

3 How We Store and Secure Data

Your data is processed in a secure sandboxed cloud ecosystem:

• Compliance registries, details, and logs are written securely to Google Sheets databases.
• Uploaded documents, files, drawings, and progress photos are stored in dedicated Google Drive folders with restricted link-sharing permissions.
• Submissions are routed through SSL/TLS-encrypted connections to prevent interception.

4 Artificial Intelligence Analysis

ConstructionOS uses the Gemini API engine to run compliance audits. Uploaded contractor parameters, answers, and insurance limits are analyzed by Gemini to generate automated risk flag determinations (Green, Amber, Red, or Grey). AI models do not retain or train on your private compliance data; it is processed solely for your project's evaluation ledger.

5 Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you possess rights regarding your data, including:

• The right to access and extract your data profile.
• The right to rectify inaccurate or incomplete records.
• The right to request erasure of your data ("right to be forgotten") when it is no longer required for regulatory compliance or active audit trail validation.
• The right to withdraw processing consent at any time.

For any data requests, deletion inquiries, or consent revocations, please contact verify@constructionos.co.uk.