Privacy policy

SANCA is construction management software for general contractors. This policy covers the SANCA mobile app for iOS and Android, the SANCA web dashboard at sancapro.com, and the client portals we host under it.

Who the information belongs to

Almost everything in SANCA is a contractor's business record. A daily log, a timesheet, a client's address, an invoice — the contracting company that signed up owns that, decides what goes in it and how long it is kept. We hold it on their behalf and use it to run the service for them.

If you are a worker using the mobile app, the company that gave you your login is the one to ask about your records. We will help you reach them, and we will act on their instructions. If you are that company and you need something exported or deleted, write to privacy@sancapro.com.

What we collect

Your account

The mobile app signs you in with your phone number and a code sent by text. The dashboard signs you in with an email address and a password or an email code. Your name, your job title, your phone number and your email address are in your account because your employer put them there or because you edited your own profile. You can add a profile photo; nothing requires one.

The work you file

Daily logs, timesheets, expenses, photos of the job site, notes, change orders, estimates, contracts and invoices. Who filed each one and when is part of the record, because that is what makes it a record.

Site photos and profile photos are resized and re-encoded on your phone before they are uploaded, which drops the camera metadata the original file carried. They are stored with the job they belong to.

Location

The app does not ask for your location and does not collect it. There is no location permission in the app, no background tracking and no geofence on a timesheet. If that ever changes, the app will ask first and this policy will say so before it ships.

On your device

A log or a timesheet you file with no signal is stored on your phone until it reaches us, so a job site with no bars does not cost you the entry. Your session token is held in the phone's secure storage. Both are cleared when you sign out.

How the app is used

We measure which parts of the app get opened and whether filings arrive, because a field app that quietly stops being used is the failure we most need to see. What that means in practice:

• Screen views, app opens and backgrounds, and counts of filings queued, sent and retried — including how long a filing waited for a signal.
• You are counted under an internal account identifier. Your name, email address and phone number are not sent to our analytics provider. Your company is attached as a group so a contractor's usage reads as one account.
• Taps are not recorded. An automatically captured tap carries the label of whatever it hit, and the labels on these screens are job names, company names and people's names. That capture is turned off on purpose.
• There is no session recording, no advertising identifier and no third-party advertising or tracking network in the app.

Crashes and errors

When the app breaks we report that it broke. The report carries the function names in our own code and either a short machine code for the failure or a scrubbed, truncated version of the message — email addresses, phone numbers, links, identifiers and capitalised names are stripped before it leaves the phone, and a server's explanation of a refusal is never forwarded word for word. The sentence you read on screen stays on your phone.

The website and the dashboard

The dashboard sets the cookies it needs to keep you signed in and to remember which company you are working in. This public site sets no advertising or tracking cookies.

What we do with it

• Run the service — show the work, sync it between the office and the field.
• Sign you in and keep your account secure, including sending the codes you log in with.
• Send the service emails the work generates — invites, estimates for signature, invoices, receipts.
• Take payment for a subscription.
• Find bugs, fix them, and decide what to build next.
• Meet a legal obligation, or answer a lawful request we are required to answer.

We do not sell personal information, and we do not share it for advertising. We do not use the work a contractor files to train machine learning models.

Who we share it with

Service providers who run parts of the product for us, under contract, and only for that purpose:

• Clerk — accounts and sign-in, including the phone number the app signs in with.
• Convex — the database and the file storage the records and photos live in.
• PostHog — product analytics and error reports, as described above.
• Stripe — subscription billing. Card details go to Stripe and we never hold them.
• Resend — the emails the service sends.
• Expo — app builds and over-the-air updates.
• Intuit QuickBooks — only when a contractor connects their own QuickBooks company, and only the invoices, payments and expenses that sync.

We also share a record with whoever it is addressed to — a client who opens a proposal, an estimate or an invoice sees what was sent to them. If the business is ever sold, the records go with it and this policy travels until it is replaced.

Where it is held, and for how long

Our providers run in the United States. A contractor's records are kept for as long as their account is open, because a daily log is a business record whose whole value is that it is still there in two years. When an account closes we delete or anonymise what we hold within 90 days, except what we have to keep for tax, accounting or a legal claim.

Deleting your account

You can ask us to delete your SANCA login, and the mobile app is getting a control that does it without asking anyone. Deleting it stops you signing in. The filings you already made stay with the company that owns them, because a daily log naming who was on site in February is the contractor's record of February. The deletion page spells out how to ask and what gets destroyed.

Your rights

Depending on where you live you can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to a use of it. Write to privacy@sancapro.com and we will answer within 30 days. If the records belong to a contractor who uses SANCA, we will pass the request to them and help them answer it. You will not be treated differently for asking.

Children

SANCA is for people at work and is not for anyone under 16. We do not knowingly collect information from children. If you believe a child has an account, write to privacy@sancapro.com and we will remove it.

Changes

When this policy changes we update the date at the top. If a change affects what we collect or who we send it to, we will say so in the app or by email before it takes effect.

Contact

Privacy: privacy@sancapro.com
Anything else: support@sancapro.com