Privacy Policy

1) Scope

This Privacy Policy applies to build-folio.com and any products, widgets, and services we provide (collectively, the “Services”), including our free contractor financing widget, texting tools, and future payments features.

Not legal advice. This page describes our practices; it is not a contract with consumers. See our Terms & Conditions for your contract with us.

2) Information we collect

Information you provide

• Contact and business info (name, email, phone, company, website, industry).
• Form responses, support messages, and feedback.
• SMS opt-in confirmations and message content where applicable.

Information collected automatically

• Device, browser, and network metadata.
• Usage, referral URLs, and UTM parameters for analytics/advertising.
• Widget interactions (e.g., “financing button clicked”).

Information from third parties

• Advertising & analytics partners (e.g., Google Analytics/Ads) for campaign performance.
• Communication providers (e.g., Twilio for messaging, Resend/Postmark for email) for delivery status and logs.

3) How we use information

• Provide, maintain, and improve the Services, including fraud prevention and quality assurance.
• Send transactional communications (e.g., widget code, account notices, support).
• Enable contractors to capture leads, reply via SMS (with consent), and view aggregated metrics.
• Analyze performance and optimize our website and campaigns.
• Comply with law and enforce our Terms.

Legal bases for processing (EEA/UK): performance of a contract; legitimate interests (product improvement, fraud prevention); consent (marketing/SMS where required); compliance with legal obligations.

4) How we share information

We do not sell personal information. We share data with:

• Vendors / processors that help run the Services (e.g., Cloudflare, Supabase or other databases, Fly.io, Vercel, Twilio, Resend/Postmark, Google Analytics/Ads).
• Contractors (your provider) when a homeowner interacts with their widget or contacts them—so the contractor can follow up.
• Law, safety, and rights when required by law or to protect the Service and users.

5) Cookies & analytics

We use cookies and similar technologies to remember preferences, measure usage, and improve performance. We may associate ad campaign parameters (e.g., gclid, utm_*) to evaluate effectiveness.

You can manage cookies in your browser settings. For Google Ads and Analytics controls, visit Google’s Ad Settings. Some features may not function without cookies.

6) SMS & communications

We only send SMS when you or your customers provide appropriate consent. Message frequency varies. Message & data rates may apply. Reply STOP to cancel, HELP for help.

See our SMS Terms for full details, including opt-in/opt-out procedures and examples of consent language.

7) Security & retention

We use administrative, technical, and organizational measures appropriate to the risk of the data we process. No method of transmission or storage is 100% secure.

We retain information for as long as necessary to provide the Services and meet legal obligations, then delete or de-identify it.

8) Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or restrict certain processing, as well as data portability and the right to object. You can also opt out of marketing at any time.

For California residents, we handle personal information in accordance with the CCPA/CPRA. We do not sell or share personal information for cross-context behavioral advertising as defined by CPRA.

To exercise your rights, contact us at support@build-folio.com. We may need to verify your request.

9) International transfers

We may process and store data in the United States or other countries. Where required, we rely on appropriate safeguards (e.g., standard contractual clauses).

10) Children’s privacy

Our Services are not directed to children under 13 (or under 16 in the EEA). If we learn we have collected such information, we will delete it.

11) QuickBooks Integration Privacy

Data We Collect from QuickBooks

When you connect your QuickBooks account to Build-Folio, we access and sync the following data:

• Customer Information: Names, addresses, phone numbers, email addresses, and company details
• Invoice Data: Invoice numbers, line items, amounts, dates, payment status, and terms
• Payment Records: Payment transactions, amounts, dates, and payment methods
• Account Information: Chart of accounts, account balances, and settings
• Company Settings: Business name, address, tax ID, and preferences

How We Connect to QuickBooks

Important: We use OAuth 2.0 authentication to connect to QuickBooks. This means:

• We do NOT store your QuickBooks username or password
• You authorize access through Intuit’s secure login page (not our website)
• We receive a secure token that can be revoked at any time
• All communication with QuickBooks happens through Intuit’s encrypted APIs
• Tokens expire automatically and must be refreshed with your permission

How We Use QuickBooks Data

We use your QuickBooks data solely to:

• Sync customers from Build-Folio leads to QuickBooks automatically
• Create and update invoices in QuickBooks when you generate them in Build-Folio
• Record payments and update invoice status
• Display your QuickBooks data within Build-Folio for unified workflow
• Prevent duplicate data entry between systems

We do NOT:

• Share your QuickBooks data with any third parties (except Intuit)
• Use QB data for marketing or analytics beyond our service
• Access QB data after you disconnect the integration
• Sell or monetize your QuickBooks data

QuickBooks Data Security

We protect your QuickBooks data with:

• Encryption in transit: All data transmitted via TLS 1.2+ (HTTPS)
• Encryption at rest: OAuth tokens stored encrypted in our database
• Secure APIs: All QuickBooks access via official Intuit APIs only
• Access controls: Only your authorized Build-Folio account can view your QB data
• Token expiration: Tokens automatically expire and require re-authorization
• Audit logging: All QB sync activity is logged for security monitoring

Your Control Over QuickBooks Data

You have complete control:

• Disconnect anytime: Go to Settings > Integrations > Disconnect QuickBooks
• Immediate revocation: OAuth tokens are revoked instantly when you disconnect
• Data deletion: Your QB data in Build-Folio is deleted within 30 days of disconnection
• QB data remains: Previously synced data stays in QuickBooks (we don’t delete from QB)
• Re-connect option: You can reconnect QuickBooks at any time

QuickBooks Data Retention

We retain QuickBooks data as follows:

• While connected: Data syncs continuously and is kept current
• After disconnection: QB data in Build-Folio deleted within 30 days
• OAuth tokens: Immediately revoked upon disconnection
• Backup copies: Removed from backups within 90 days
• Aggregated data: Anonymous usage statistics may be retained for analytics

Compliance with Intuit Requirements

Our QuickBooks integration complies with:

• Intuit Developer Terms of Service
• QuickBooks API security requirements
• OAuth 2.0 security standards
• Data protection regulations (GDPR, CCPA)
• Financial data privacy requirements

Questions About QuickBooks Integration?

For questions specific to QuickBooks data handling, contact us at: privacy@build-folio.com

12) Changes to this Policy

We may update this Privacy Policy from time to time. We will post the updated date at the top of this page, and when required, provide additional notice.

13) Contact us

Email: support@build-folio.com