Privacy Policy

Product: Building Scheduler  |  Effective Date: May 16, 2026

This Privacy Policy describes how Building Scheduler ("Software", "we", "us") handles information entered into and processed by the Software. By using the Software, you agree to the practices described in this policy.

1. Self-Hosted Software

Building Scheduler is a self-hosted application. All data you enter is stored in a PostgreSQL database that runs on infrastructure you control. We do not operate any central servers, and we do not have access to your data unless you explicitly share it with us for support purposes.

2. Information Collected and Stored

The Software stores only the data you and your team enter directly. This may include:

• User accounts: usernames, bcrypt-hashed passwords, roles, login timestamps.
• Project data: build records, schedule entries, permits, inspections, calendar tasks, and outside job details.
• Investor records: names, company names, phone numbers, email addresses, and notes.
• Uploaded files: documents and photos associated with properties, stored via Dropbox or locally depending on your configuration.
• Activity logs: records of which user performed which actions and when, for auditing purposes.
• Session data: session tokens stored in the database to keep you logged in across restarts.

We do not collect analytics, usage telemetry, crash reports, or any data beyond what you explicitly enter.

3. Passwords

Passwords are never stored in plain text. The Software uses bcrypt hashing before storing any password in the database. We cannot recover or read your passwords.

4. Third-Party Services

The Software integrates with external services at your direction. When you connect these services, data may be transmitted to them according to their own privacy policies:

• Dropbox — for file storage and retrieval. See Dropbox Privacy Policy.
• CompanyCam — for photo documentation. See CompanyCam's privacy policy on their website.
• QuickBooks Online (Intuit) — for accounting integration. See Intuit Privacy Statement.
• Rentcast — for property data lookups. See Rentcast's privacy policy on their website.

These integrations are optional. If you do not connect them, no data is sent to those services.

5. Data Sharing

We do not sell, rent, or share your data with any third party. Because the Software is self-hosted, your data never leaves your own infrastructure except when you choose to use the third-party integrations described above.

6. Data Retention and Deletion

Data is retained in your database for as long as you choose to keep it. You are responsible for managing retention and deletion. Records can be deleted individually through the application interface, or the entire database can be cleared at any time using standard database tools.

7. Security

The Software implements the following security measures:

• Session-based authentication with server-side session storage.
• Role-based access control (admin vs. standard user).
• Bcrypt password hashing.
• CSRF protection via Spring Security.

You are responsible for securing the server, database, and network on which the Software runs. When the application is made available over the public internet, it should be served exclusively over HTTPS and protected by authentication, as is the case for this deployment.

8. Children's Privacy

The Software is intended for business use and is not directed at individuals under the age of 18. We do not knowingly process personal information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of the Software after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact: aleksanderara1@gmail.com