Privacy Policy

Last updated: August 23, 2026

This Privacy Policy describes how ConstructiveCore, LLC (“ConstructiveCore,” “we,” “us,” or “our”) collects, uses, and shares information when you use the ConstructiveCore construction management platform — including the web application at login.constructivecore.app, the Field Ops mobile app for iPhone and Android, the Field Ops mobile web application, and this website (together, the “Service”).

By using the Service, you agree to the practices described in this policy.

Who We Are

ConstructiveCore, LLC is a Georgia, USA company. ConstructiveCore is business software: our customers are construction companies (“Customers”) who use the Service to manage their projects, schedules, field operations, and accounting. Much of the data in the Service is entered and controlled by the Customer organization you belong to.

Information We Collect

Account information. Name, email address, phone number, role, and sign-in identifiers for people invited to a Customer’s organization.

Sign-in via Google or Microsoft. If you sign in with Google or Microsoft, we receive your name and email address from that provider to create and authenticate your account. We never see or store your Google or Microsoft password.

Business records your organization enters. Projects, jobs, schedules, estimates, purchase orders, invoices, bills, payments, vendor and client records, budgets, and related accounting data. This may include vendor tax identification numbers, which we encrypt at rest.

Field data. Photos, notes, documents, and form responses submitted from job sites through the Field Ops app; time clock punches; and, where your employer uses the Field Ops time clock, device GPS location as described in “Location Tracking in the Field Ops App” below.

Payment information. If your organization pays invoices online, card and bank details are collected and processed directly by Stripe, our payment processor. We do not store card numbers on our servers.

Usage and log data. IP address, browser and device information, pages viewed, and actions taken, used for security, debugging, and improving the Service. We use session cookies to keep you signed in; we do not use third-party advertising cookies.

Location Tracking in the Field Ops App

If your employer uses ConstructiveCore’s Field Ops time clock, and you install the Field Ops mobile app, your device’s GPS location may be recorded while you are clocked in to a shift.

What we collect. While you’re on the clock, the app periodically records your device’s location — latitude, longitude, GPS accuracy, and a timestamp. On iPhone and Android, if you grant “Always” location access, this continues in the background while your phone is locked or the app isn’t in the foreground, so a full shift’s route is captured even if you don’t keep the app open the whole time. If you only grant “While Using,” or if you decline location access altogether, punches and time entries still work — your location is instead recorded roughly every five minutes while the app is open, instead of continuously in the background.

Why we collect it. This location data is used to verify time worked at a job site — confirming that a clocked-in shift actually happened at the job location it’s billed to — and to help your employer reconstruct mileage and travel between sites. It also lets your crew lead see where the crew worked that day. We do not use it for anything beyond your employer’s own time-tracking and job-costing records.

When it stops. Location recording is tied directly to your clock status: it starts when you clock in and stops automatically the moment you clock out or start a break. Nothing about your route is recorded or uploaded while you’re off the clock. Closing the app does not stop it — on both iPhone and Android the app restarts itself in the background and keeps recording until you clock out, so a shift’s route stays complete even when the app isn’t open and even if it was swiped closed. The first time background tracking would start, the app shows you an explainer and asks you to confirm before turning it on; declining never blocks you from clocking in or out, it simply falls back to your location being recorded roughly every five minutes while the app is open, instead of continuously in the background.

Clock-in reminders. On days your crew has work assigned, the app can remind you to clock in when you arrive at one of those job sites. To do that, it asks your phone to watch for arrival at those specific sites, which means your device’s operating system is monitoring for them even while you are off the clock. Nothing about your location is recorded, stored, or sent to us during that time — arriving triggers a notification on your own device and nothing else, and your employer is not told where you were or when you got there. The reminders are optional: they need notification permission, and declining leaves the rest of the app working exactly as before.

How long we keep it. Raw location points are kept for 90 days and then automatically and permanently deleted. The computed summaries derived from that data — for example, which job site you were at and for how long during a given shift — are retained as part of your normal timeclock and payroll record, the same as any other time entry, so your pay and job-costing history stay accurate after the 90-day window closes.

Who can see it. Only supervisors and administrators within your employer’s own ConstructiveCore account can see your location data, as part of the timeclock and schedule information they already have access to. It is never visible to other companies using ConstructiveCore, and ConstructiveCore staff do not access it except as needed to operate, secure, or support the Service (see “Security,” below).

No sale, no advertising. We do not sell location data, and we do not use it for advertising, targeting, or any purpose outside operating the time-tracking features described above.

Questions about location data collected about you specifically should go to your employer, who controls this data as described in “Workers and Field Employees,” below. For anything else, contact us at support@constructivecore.app.

QuickBooks Online Integration

If an administrator of your organization connects the Service to QuickBooks Online (an Intuit Inc. service):

• We access and synchronize only the accounting records needed for the sync your organization configures — such as bills, bill payments, invoices, invoice payments, customers, vendors, items, and account mappings.
• QuickBooks data is used solely to provide the synchronization features your organization has enabled. We do not sell QuickBooks data, use it for advertising, or share it with any third party except as required to operate the Service.
• The OAuth tokens that authorize the connection are stored encrypted (AES-256) at rest and are never exposed in our user interface.
• Your organization can disconnect QuickBooks at any time from the Service’s settings, which revokes our access. Upon disconnection or written request, we will delete stored QuickBooks tokens and, on request, synchronized QuickBooks data that is not otherwise part of your organization’s own records.
• Your use of QuickBooks Online remains subject to Intuit’s privacy statement.

How We Use Information

We use the information we collect to:

• Provide, operate, secure, and support the Service;
• Synchronize data with services your organization connects (such as QuickBooks Online and Stripe);
• Send transactional email and, where you opt in, push notifications (for example, schedule changes or payment receipts);
• Monitor performance, prevent abuse, and debug problems;
• Comply with legal obligations.

We do not sell personal information, and we do not use your data for third-party advertising.

How We Share Information

We share information only with:

• Your organization. Data you enter is visible to other members of your Customer organization according to the roles and permissions your administrators configure.
• Service providers that host and operate the Service on our behalf: Amazon Web Services (hosting and email delivery, United States), MongoDB Atlas (database hosting, United States), Stripe (payments), and — only when your organization connects them — Intuit (QuickBooks Online), Google and Microsoft (sign-in).
• Legal requirements. When required by law, subpoena, or to protect the rights, safety, or property of ConstructiveCore, our Customers, or others.
• Business transfers. If ConstructiveCore is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction under this policy’s protections.

Workers and Field Employees

If you use the Service as an employee or crew member of a ConstructiveCore Customer, your employer controls the business records about you in the Service (including time clock and pay data). Requests to access, correct, or delete that data should go to your employer; we support them in fulfilling such requests.

Security

We protect information with TLS encryption in transit, encryption at rest for sensitive fields (such as integration tokens and tax identification numbers), role-based access controls, and network isolation. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard practices.

Data Retention

We retain information while your organization’s account is active. When an account is closed, or upon verified written request, we delete or de-identify personal information within a commercially reasonable period, except where retention is required by law or for legitimate business records (such as billing history). Residual copies may persist in encrypted backups for a limited time before being aged out.

Your Choices and Rights

You may access and update your account information in the Service. Depending on where you live, you may have rights to request access to, correction of, or deletion of your personal information. Contact us at the address below and we will respond consistent with applicable law. Push notifications can be disabled in your browser or device settings at any time.

Children

The Service is business software and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this policy from time to time. We will post the updated version at this page and revise the “Last updated” date. Material changes will be communicated to Customer administrators.

Contact Us

ConstructiveCore, LLC Email: support@constructivecore.app