Privacy
SiteWorks is construction project management software. This page describes what the application collects, who processes it on our behalf, and what we do not do with it.
What we collect
Your account. The email address and name you sign up with, and the workspaces and projects you belong to. Passwords are stored and verified by Supabase Auth; we never see them.
What you put in a project. Drawings, photos, RFIs, submittals, schedules, day logs, markups, budgets, contacts and anything else you or your team upload or type. This is your work product. We store it so the application can show it back to you and the people you share a project with.
AI usage. When you use an AI feature we record what it cost, so the metering you see in the app is accurate and so we can bill credit correctly.
What we do not do
We do not sell your data, and we do not use your project content to train AI models. There is no analytics, advertising, or session-replay software in this application at all — no trackers, no ad pixels, no third-party scripts watching what you click. The only cookies we set are the ones that keep you signed in; preferences like panel widths live in your own browser and are never sent to us.
Who processes data for us
We use a small number of service providers, each for one job:
- Supabase — the database, file metadata and sign-in.
- Cloudflare — stores your uploaded files (drawings, photos, attachments) and delivers images.
- Anthropic — runs the optional AI features. Content is sent only when you use one of them.
- Stripe — takes payment for AI credit. Card details go straight to Stripe and never touch SiteWorks.
- SendGrid — sends the email we send you: invitations, sign-in and password-reset mail.
- Vercel — hosts and serves the application.
The AI features, specifically
The AI features are optional and metered. When you use one, the relevant project content — the drawing, the RFI, the document you asked about — is sent to Anthropic to produce an answer. If you never use an AI feature, none of your project content is sent to an AI provider. Your content is not used to train models.
Things you connect yourself
SiteWorks can connect to Procore and to Microsoft accounts. These are off unless you turn them on, they use each provider's own authorisation, and we access only what that authorisation grants. You can disconnect either at any time from Settings.
Projects can also receive email at a project address. Mail sent to one is stored with the project so the team can see the correspondence a question came from.
Keeping and deleting it
We keep your project content for as long as your account is open, because the point of the application is that a job's record is still there next year. If you want your data exported or deleted, email us and we will do it.
Contact
Questions about any of this, or a request about your data: support@siteworks.app