Back home

Privacy Policy

Last updated: May 19, 2026

This Privacy Policy explains how ConPM LLC ("ConPM LLC", "we", "us", or "our") collects, uses, discloses, retains, and protects information in connection with the ConPM platform, websites, mobile applications, APIs, and related services (the "Service"). By using the Service you consent to the practices described here. If you do not agree, do not use the Service.

1. Scope and Roles

With respect to Customer Data submitted to the Service by a paying customer organization (your employer or client), that organization is the "controller" (or "business") and ConPM LLC acts as a "processor" (or "service provider") under applicable data protection laws. We process such data only on the instructions of the controller and as described in these terms. With respect to account registration data, billing data, usage analytics, and the public marketing site, ConPM LLC acts as the controller.

2. Information We Collect

  • Account Information: name, email address, profile photo, company affiliation, role, and authentication identifiers (managed by Clerk, our identity provider).
  • Customer Data: projects, drawings, specifications, files, photos, messages, AI prompts, and other content you or your team upload or generate in the Service.
  • Billing Information: company billing address, plan, seat count, invoices, and limited payment-card metadata. Full payment card numbers are processed and stored exclusively by Stripe, Inc. — we never see or store them.
  • Usage and Telemetry: log records, IP address, browser/device type, pages visited, API calls, feature usage, AI token consumption, storage and bandwidth usage, error reports, and timestamps.
  • Cookies and Similar Technologies: session cookies and local storage required to operate the Service, plus first-party analytics cookies. We do not use third-party advertising cookies.
  • Communications: messages you send to support, feedback, survey responses.

3. How We Use Information

  • To operate, maintain, secure, and improve the Service;
  • To authenticate users and protect against fraud, abuse, and unauthorized access;
  • To bill accurately, collect payment, and prevent payment fraud;
  • To send transactional communications (account, billing, security, product changes);
  • To respond to support requests and enforce our Terms;
  • To generate aggregated, de-identified analytics that do not identify you or your organization;
  • To comply with legal obligations and respond to lawful requests; and
  • With your consent, to send product announcements and marketing (which you may opt out of at any time).

4. AI Processing

When you use AI Features, the content you submit (your prompt, attached files, and relevant context) is transmitted to our AI service provider(s) (currently Anthropic, OpenAI, and/or other providers selected by ConPM LLC) to generate a response. ConPM LLC contractually requires its AI providers not to retain Customer Data beyond what is necessary to generate the response and not to use Customer Data to train their foundation models. ConPM LLC does not sell Customer Data and does not use Customer Data to train any third-party AI foundation model.

5. How We Share Information

We share information only as follows:

  • Within your organization: Customer Data is visible to other Authorized Users within your company account according to the permissions and roles configured by your administrators.
  • Subprocessors: trusted service providers that help operate the Service, currently including Clerk (authentication), Stripe (payment processing), Replit, Inc. (hosting, infrastructure, and object storage), and Anthropic / OpenAI (AI inference). Each is contractually bound to confidentiality and appropriate security standards.
  • Legal and safety: when we believe disclosure is required by law, subpoena, or legal process, or necessary to protect the rights, property, or safety of ConPM LLC, our customers, or the public.
  • Business transfers: in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or substantially all of our assets, subject to the acquirer honoring this Privacy Policy in all material respects.

We do not sell or rent personal information and we do not share personal information for cross-context behavioral advertising.

6. Data Retention

We retain Customer Data for the duration of your active account plus a recovery window of thirty (30) days after termination, after which it may be permanently deleted from active systems. Backups may persist for up to ninety (90) additional days before overwrite. We retain billing records, audit logs, and other records as required for tax, accounting, fraud-prevention, and legal-compliance purposes. You may request earlier deletion of your personal data by submitting a request through the Help & Support form in the ConPM application, subject to our legal retention obligations.

7. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit (TLS) and at rest, role-based access controls, audit logging, and regular security review. No system is perfectly secure, and we cannot guarantee absolute security. In the event of a personal-data breach materially affecting you, we will notify the controller without undue delay and consistent with applicable law.

8. International Transfers

ConPM LLC is based in the United States, and information we collect is processed and stored in the United States and other countries where our subprocessors operate. By using the Service you consent to such transfers. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms.

9. Your Privacy Rights

Depending on your jurisdiction, you may have rights to access, correct, port, restrict processing of, or delete your personal information, and to object to certain processing. To exercise these rights, submit a request through the Help & Support form in the ConPM application from the account associated with your request. We will verify your identity and respond within the time required by applicable law. If you are an Authorized User of a customer organization, please direct requests regarding Customer Data to your organization's administrator; we will assist them in responding.

California Residents (CCPA/CPRA)

California residents have additional rights, including the right to know what personal information we collect and how we use it, the right to delete, the right to correct, and the right to opt out of "sales" or "sharing" of personal information. ConPM LLC does not sell or share personal information as defined by the CCPA/CPRA.

EEA/UK Residents (GDPR/UK GDPR)

Our lawful bases for processing include performance of a contract (Art. 6(1)(b)), legitimate interests in operating and securing the Service (Art. 6(1)(f)), legal obligation (Art. 6(1)(c)), and consent where required (Art. 6(1)(a)). You have the right to lodge a complaint with your supervisory authority.

10. Children's Privacy

The Service is intended solely for business users aged eighteen (18) or older. The Service is not directed to children, and we do not knowingly collect personal information from anyone under the age of 16. If you believe a minor has provided us personal information, submit a request through the Help & Support form in the ConPM application and we will delete it.

11. Marketing Communications

Transactional emails about your account, security, and billing cannot be opted out of while you maintain an account. You may opt out of marketing emails at any time using the unsubscribe link or through the Help & Support form in the ConPM application.

12. Third-Party Sites and Integrations

The Service may link to or integrate with third-party services, including future construction-industry integrations (ProjectSight, Procore, Autodesk, Primavera P6, Microsoft Teams, SharePoint, and similar). Those services have their own privacy practices, and ConPM LLC is not responsible for them. Review their policies before connecting your account.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated in-product or by email and will be effective on the date posted. Continued use after the effective date constitutes acceptance.

14. Contact

For privacy questions, to exercise your rights, or for legal notices, submit a request through the Help & Support form inside the ConPM application.

Questions? Use the Help & Support form in the app.