Privacy Policy

OverSite Manager is a construction project intelligence platform. We understand that privacy matters, especially when your data includes site imagery, project timelines, and team member information. This Privacy Policy explains how we collect, use, store, and protect information when you use our website and platform (the “Service”).

By accessing or using the Service, you acknowledge that you have read and understood this policy. If you do not agree, please do not use the Service.

OverSite Manager is the data controller for information collected through our website and platform. When you use the Service to manage data about your own team, subcontractors, or projects, you are the controller of that data, and we act as a processor on your instructions.

For any privacy-related question, contact us at privacy@oversitemanager.com.

Information you provide directly:

• Account information — name, email address, company name, job title, phone number, and billing details.
• Project data — project schedules, timelines, progress updates, status reports, issue tracking, daily logs, and quantity surveys.
• Media files — site photographs, drone imagery, and other visual documentation you upload to the platform.
• User-generated content — comments, notes, and other content you create within the Service.
• Communications — messages sent to our support team, feedback, and survey responses.

Information collected automatically:

• Log data — IP address, browser type, operating system, device information, date/time stamps, and pages accessed.
• Usage data — feature usage, session duration, click patterns, and performance metrics.
• Location data — approximate location based on IP address or device settings, where permitted.

Information from third parties:

• Authentication providers — if you sign in with a third-party service, we receive basic profile information from that provider.
• Payment processors — we receive limited transaction information from our payment partners. We do not store full payment card details.

• Provide, operate, and maintain the Service.
• Process your account and manage billing.
• Send service-related communications and notifications.
• Provide customer support and respond to inquiries.
• Analyze usage patterns to improve the Service’s features and performance.
• Process site imagery for progress tracking and reporting.
• Detect, prevent, and address technical issues or security incidents.
• Comply with legal obligations and enforce our agreements.

If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal data on the following legal bases:

• Contract — processing necessary to provide the Service you have requested.
• Legitimate interests — improving the Service, preventing fraud, and ensuring security.
• Consent — where you have explicitly agreed to certain processing, such as marketing communications.
• Legal obligation — where processing is required by applicable law.

We do not sell your personal data. We share information only in the following circumstances:

Service providers

We work with trusted third-party providers who help us deliver the Service. These providers are contractually bound to protect your information and use it only for the purposes we specify:

• Infrastructure & hosting — cloud hosting and storage providers.
• Analytics — product analytics to understand usage patterns.
• Communications — email and SMS delivery providers for notifications.
• AI processing — when you use AI-powered features, relevant data may be processed by our AI partners. We do not train AI models on your data.
• Payment processing — certified payment operators who comply with PCI DSS standards.

Legal requirements

We may disclose information when required by law, such as in response to a court order, subpoena, or other legal process, or to protect our rights, property, or safety.

Business transfers

If OverSite Manager is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you of any change in ownership or control.

OverSite Manager uses AI to enhance certain features, such as progress analysis and material classification from site imagery. When you use these features:

• Your data may be processed by our AI service providers to generate results.
• We do not use your data to train AI models, and we contractually require our providers not to do so.
• AI processing follows the same security standards as the rest of the platform.

We retain your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete or anonymize your personal data within a reasonable period, unless we are required to retain it for legal, tax, or regulatory purposes.

Project data and media files may be retained for the duration of your subscription and for a reasonable period thereafter to allow for export or recovery.

We implement industry-standard technical and organizational measures to protect your information, including:

• Encryption in transit (TLS) and at rest.
• Access controls and authentication for our systems.
• Regular security reviews and monitoring.
• Employee training on data protection.

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

Depending on your location, you may have certain rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data, subject to legal retention requirements.
• Restriction — request that we limit processing of your data.
• Portability — request a copy of your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@oversitemanager.com.

We use cookies and similar technologies to operate the Service, remember your preferences, and understand how the platform is used. You can control cookies through your browser settings, but disabling certain cookies may affect functionality.

We use analytics to understand aggregate usage patterns. We do not use cookies to serve targeted advertising.

Your information may be transferred to and processed in countries other than your own. When we transfer data internationally, we take steps to ensure it receives an adequate level of protection, including using standard contractual clauses or other approved mechanisms.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the Service. The “Last updated” date at the top of this page reflects the most recent revision.

Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.