Privacy Policy¶
Effective date: 2026-06-23 · Policy version: 1
This policy explains what personal data ConstructiVision (operated by SimpleStruct) collects, why, the legal basis for each use, who processes it on our behalf, and the choices and rights you have. It is written to align with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Who we are¶
ConstructiVision is a tilt-up concrete detailing product. For your account, billing, and usage data, SimpleStruct is the data controller. For the content of blueprints you upload for processing, SimpleStruct acts as a data processor on your behalf — you remain the controller of that content.
What we collect and why¶
What |
Why we use it |
Legal basis |
|---|---|---|
Email and password |
Create and secure your account; sign you in |
Performance of your contract with us |
Phone number (only if you enable SMS two-factor) |
Deliver one-time security codes |
Your consent |
Social sign-in profile (name, email, photo) |
Let you sign in with a connected account |
Your consent |
Subscription and payment details |
Process payments and meet tax/record-keeping duties |
Contract, and legal obligation |
Usage and metering events |
Operate billing and improve the product |
Contract, and our legitimate interest |
Error and performance telemetry |
Keep the app reliable and secure |
Our legitimate interest — and only if you accept telemetry |
Uploaded blueprint content |
Extract panels and dimensions for you |
We process this on your instruction as your processor |
Essential data — your account, your saved projects (kept in your browser), and your active sign-in — is necessary to provide the service and is always in use. Optional telemetry is collected only after you choose Accept telemetry in the privacy banner; choosing Essential only means no telemetry is sent, and you can change your mind at any time.
How long we keep it¶
We keep personal data only as long as needed for the purpose it was collected, then delete or anonymize it. Account data is removed after you close your account (subject to a short window for completing data-subject requests). Financial records are retained for the statutory period required by tax law. Operational logs and error data are kept for a bounded retention period and then rotated out. Uploaded blueprint content is deleted after extraction unless you ask us to retain it.
Who processes data for us (sub-processors)¶
We use a small set of trusted providers to run the service. Each is bound by a data-processing agreement and processes data only on our instructions:
Provider |
What they handle |
|---|---|
Supabase |
Account, identity, project metadata, and file storage |
Stripe |
Subscription billing, payment processing, and sales-tax/VAT calculation |
Sentry |
Error and performance telemetry (with personal data scrubbed; EU-region data residency) |
Social sign-in, if you choose it |
|
Amazon Web Services |
Content delivery and file storage |
Some providers operate in the United States; where data leaves your region we rely on Standard Contractual Clauses and equivalent safeguards. Our full, dated sub-processor list — with processing locations and transfer mechanisms — is published at Sub-processors. Business customers can request our Data Processing Agreement.
Your choices and rights¶
Depending on where you live, you have the right to access, correct, export, or delete your personal data, to object to processing based on our legitimate interest, and to withdraw any consent you have given. Where a use depends on your consent, you can withdraw it as easily as you gave it — for example, by removing a two-factor phone number in your account settings, unlinking a social sign-in, or choosing Essential only in the privacy banner.
Some records we are legally required to keep (such as financial records) cannot be erased before their statutory period ends; in that case we delete everything else and retain only the legally mandated record.
To exercise any right, contact us at the address below. We respond within the timeframes required by law.
How we protect data¶
We encrypt data in transit and at rest, isolate tenants with row-level security, scrub personal data out of error reports, and limit access to the minimum needed to operate the service.
Changes to this policy¶
If we change this policy in a way that affects choices you have made, we will update the policy version and ask you to review your privacy choices again.
Contact¶
Questions or requests about this policy and your data: privacy@simplestruct.com.