SpecFunnel, LLC ("SpecFunnel," "we," "us," or "our") respects the privacy of our users ("you," "your," "Customer," or "Authorized User"). This Privacy Policy outlines what information we collect, how we use it, and your rights regarding that information.

This Privacy Policy applies to all websites operated by SpecFunnel, and our applications and services (collectively, the "Service" or "Services"), including trial and paid subscriptions. By using our Services, you expressly agree to the collection, storage, use, processing, and disclosure of your information as described in this Privacy Policy.

1. Information We Collect

We collect information to provide, improve, and personalize our Services. Some information is provided by you directly, and some is collected automatically through your use of our Services.

Information You Provide

Account Information: Name, email address, company name, phone number, and other contact data provided during registration.
Credentials: Passwords and authentication information used for account access and security.
Payment Data: Payment instrument information (such as credit card numbers) necessary to process purchases. Payment processing is handled by third-party processors (e.g., Stripe); we do not store full payment card details.
Customer Content: Construction documents, specifications, plans, drawings, inspection reports, and any other content uploaded to the Service.
Communications: Messages, feedback, and support requests you send to us.

Information Collected Automatically

Usage Data: Information about how you interact with our Services, including features used, frequency and duration of use, pages visited, and project activity.
Device Information: IP address, browser type, operating system, device identifiers, and regional/language settings.
Log Data: Server logs recording web requests, timestamps, referring URLs, and performance data.
Location Data: Approximate location inferred from your IP address.

2. Cookies and Tracking Technologies

We use cookies and similar technologies to personalize your experience, analyze usage, and improve our Services. Cookies are small text files stored on your device.

Types of cookies we use:

Necessary Cookies: Required for the Service to function properly (authentication, security, payment processing).
Analytics Cookies: Help us understand how visitors interact with our Services to improve performance and user experience.
Preference Cookies: Remember your settings and preferences.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services.

3. How We Use Your Information

We use the information we collect for the following purposes:

Providing, operating, and maintaining our Services
Processing transactions and managing your account
Improving, personalizing, and developing new features and services
Processing Customer Content through AI services to deliver the features you have requested
Providing customer support and responding to inquiries
Communicating with you about updates, promotions, and service-related notices
Analyzing usage patterns and generating aggregate reporting
Ensuring security and preventing fraud
Complying with legal obligations and enforcing our legal rights

4. How We Use Customer Content

Customer Content (including construction specifications, plans, drawings, and inspection data) uploaded to our Services is used to:

Provide the Services you have requested (e.g., generating ITP logs, extracting test requirements)
Develop new features and services

Customer Content is not used to train, fine-tune, or improve any machine learning models. Customer Content is processed solely to deliver the Services you have requested. You retain ownership of your Customer Content at all times.

5. Third-Party Sub-Processors

To provide our Services, Customer Content and Customer Data may be processed by the following third-party sub-processors. Each sub-processor is bound by contractual obligations to protect your data:

OpenAI — AI processing and natural language analysis of uploaded construction documents. Customer Content (specifications, plans, drawings) is transmitted to OpenAI's API for extraction and analysis.
Supabase — Database hosting, file storage, and backend infrastructure. Customer Content and Customer Data are stored on Supabase infrastructure.
Clerk — User authentication and identity management. Account credentials and session data are processed by Clerk.
Stripe — Payment processing. Payment instrument data is processed by Stripe; SpecFunnel does not store full payment card details.
Render — Application hosting and background processing infrastructure.
PostHog — Product analytics. Collects anonymized usage data to help us improve the Service. No Customer Content is transmitted to PostHog.
Sentry — Error monitoring and application performance tracking.
Resend — Transactional email delivery (account notifications, team invitations).

By using our Services, you acknowledge and consent to the processing of your data by these sub-processors. We will update this list if we add or change sub-processors and will notify you of material changes. Each sub-processor's own privacy policy and terms govern their handling of data.

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Sub-Processors: With the third-party sub-processors listed in Section 5 above, as necessary to provide the Services.
Service Providers: With additional third-party vendors who assist in providing our Services (analytics, customer support), subject to confidentiality obligations.
Legal Compliance: When required by law, regulation, legal process, or governmental request.
Protection of Rights: To protect the rights, property, or safety of SpecFunnel, our users, or the public.
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
Aggregated Data: We may share anonymized and aggregated data that does not identify any individual for analytics, research, and industry insights.

7. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where SpecFunnel, its affiliates, or service providers operate. By using our Services, you consent to such transfers. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

8. Data Retention

We retain your personal information for as long as your account is active, as necessary to provide our Services, or as required to comply with legal obligations, resolve disputes, and enforce our agreements. Upon termination of your account, you will have thirty (30) days to export your Customer Content. After this 30-day period, SpecFunnel will delete Customer Content from production systems within 30 days. Database backups are purged on an automated rolling retention schedule (7 days), resulting in full deletion within approximately 37 days of account termination. When your data is no longer needed, we will securely delete or de-identify it. If we de-identify information, we will not attempt to re-identify it and will maintain and use the information in de-identified form only.

9. Data Breach Notification

In the event of a security breach that results in unauthorized access to, or disclosure of, your personal information, SpecFunnel will notify affected users without unreasonable delay, and in no event later than forty-eight (48) hours after becoming aware of the breach. Notification will be provided via email to the address associated with your account and, where required by applicable law, to the relevant supervisory authorities. The notification will include: (a) a description of the nature and scope of the breach; (b) the categories and approximate number of individuals and records affected; (c) the likely consequences of the breach; (d) the measures taken or proposed to address the breach and mitigate its effects; (e) recommended steps for affected users; and (f) contact information for SpecFunnel's incident response point of contact.

10. Controller vs. Processor

SpecFunnel acts as a data controller when we collect your account information, usage data, and other personal information for our own purposes (providing the Service, marketing, analytics).

SpecFunnel acts as a data processorwhen we process Customer Content on behalf of a Customer (e.g., when a company admin uploads construction documents or adds team members to a project). In these cases, the Customer is the data controller and SpecFunnel processes data according to the Customer's instructions. If your data has been submitted to SpecFunnel by a Customer and you wish to exercise your privacy rights, please contact the Customer directly. We will assist the Customer as needed in responding to your request.

11. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information. SpecFunnel will not discriminate against you for exercising any of these rights.

Right to Access: Request a copy of the personal information we hold about you.
Right to Correction (Rectification): Request correction of inaccurate or incomplete personal information.
Right to Deletion (Erasure): Request deletion of your personal information, subject to legal retention requirements.
Right to Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and request that we transmit it to another service provider where technically feasible.
Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Right to Object: Object to the processing of your personal data where we rely on legitimate interests as the legal basis, based on grounds related to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
AI Training: SpecFunnel does not use Customer Content to train AI models. Your data is processed solely to deliver the Services you have requested.
Right to Opt-Out of Marketing: Opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction.

Exercising Your Rights

To exercise any of these rights, please email info@specfunnel.com. Please include your full name, the email address associated with your account, and a detailed description of your request.

Identity Verification

Before fulfilling your request, we must verify your identity to protect your data from unauthorized access. We will match the information you provide (name, email, account details) against our records. In some cases, we may request additional information to complete verification. If we cannot verify your identity after a good-faith attempt, we may deny the request and explain the basis for the denial.

Authorized Agents

You may designate an authorized agent to submit privacy requests on your behalf. Authorized agents must provide proof of authorization (such as a signed written permission or power of attorney) in their initial communication. We may also require that you directly verify your identity and confirm the agent's authority. We will respond to all verified requests within 30 days.

12. State Privacy Laws

SpecFunnel complies with applicable state privacy laws. If your state provides additional privacy rights (such as the right to know, delete, correct, or opt out of the sale of personal information), we will honor those rights without unreasonable delay. SpecFunnel does not sell or share personal information. To exercise any state privacy rights, please email info@specfunnel.com with the subject line "Privacy Rights Request."

13. Security

We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include encryption, access controls, and regular security reviews. We also contractually require that our sub-processors and service providers protect your data using reasonable security procedures appropriate to the nature of the information.

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for protecting your own login credentials, passwords, and personal devices used to access the Service. If you become aware of any unauthorized use of your account, please notify us immediately.

Vulnerability Reporting

If you discover a security vulnerability in our Service, we encourage responsible disclosure. Please report any vulnerabilities to info@specfunnel.com with the subject line "Security Vulnerability Report." We will acknowledge receipt and investigate promptly.

14. Children's Privacy

Our Services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at info@specfunnel.com.

15. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our Services. The revised policy will be effective immediately upon posting. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

17. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

SpecFunnel, LLC
Email: info@specfunnel.com
Phone: (858) 525-2171