Privacy Policy

Spec Sheet Builder is a tool for trade professionals — builders, general contractors, remodelers, and related trades — to create finish schedules and spec sheets and share them with clients. This policy covers:

• Account information about you, the account holder; and
• Project content you create in the Service, which may include information about your own clients and projects.

You are responsible for the information you enter about your clients. See Section 11.

Information you provide when you create and use an account

• Your email address and password, used to authenticate you. Passwords are handled by our authentication provider and are stored only in hashed form; we never see or store your plaintext password.
• Profile and branding details you choose to add, such as your company name and uploaded company logo.
• Your in-app preferences, including AI feature settings.

Content you create in the Service

• Projects, sections, line items, finish selections, manufacturers, models/SKUs, quantities, units, allowances, prices, statuses, dimensions, notes, and any images you upload to line items.
• Client and project details you choose to enter, such as a client's name, email address, and project address.

Payment information

When you subscribe to a paid plan, payment is processed by Stripe. We do not collect or store your full card number or card security details. We store a Stripe customer identifier and subscription status so we can manage your plan and entitlements.

Information collected automatically

Standard technical data generated when you use a web application, such as log and device information processed by our hosting and infrastructure providers for security and reliability. We do not use advertising or third-party analytics trackers (see Section 6).

We use information to:

• Provide, operate, and maintain the Service and your account;
• Generate, store, and display your spec sheets and related documents;
• Power optional AI features you choose to use (see Section 4);
• Process subscriptions, billing, and plan entitlements through Stripe;
• Send transactional emails you would expect, such as sign-in codes, password resets, and documents you send to your clients;
• Secure the Service, prevent abuse, and troubleshoot problems; and
• Comply with our legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

Some features are powered by third-party AI providers and are only active when you use them:

• AI chat builderuses Google's Gemini models to help you scaffold and draft spec content from your descriptions.
• AI quick-template builderuses Anthropic's Claude models to generate a starting project scaffold.

When you use these features, we send the provider the text you enter plus a limited snapshot of your project needed to fulfill the request — for example, section titles and item names. We do not send your account password or your stored payment information to AI providers.

AI providers process this data to return a result to you. We rely on these providers' commitments that data submitted through their business APIs is not used to train their models; their handling is governed by their own terms, and we encourage you to review them. AI output is generated automatically and may be inaccurate or incomplete — see our Terms of Service for the important disclaimer about relying on it.

We share information only with service providers ("subprocessors") that help us run the Service, and only as needed for them to perform their function:

• Supabase — database, authentication, and file storage.
• Vercel — application hosting and delivery.
• Stripe — payment processing and subscription management.
• Resend — sending transactional email.
• Google (Gemini) — AI chat features you initiate.
• Anthropic (Claude) — AI quick-template features you initiate.

When you paste a product link to import details, our servers fetch that page and extract product metadata (such as name, brand, model, and price) to pre-fill a line item.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets, in which case we will continue to protect your information consistent with this policy.

We use only the cookies and storage necessary to operate the Service:

• Authentication cookies that keep you signed in.
• Offline storage on your device (a service worker cache and a local database) so the app can work when your connection drops and sync your changes when you reconnect.

We do not use advertising cookies, cross-site tracking, or third-party analytics trackers.

We keep your information for as long as your account is active or as needed to provide the Service. You can delete your account at any time. Deleting your account permanently removes your account and your associated data, including your projects, spec items, AI conversations, the files you uploaded (such as logos and item images), and generated PDF documents. Residual copies may remain in our encrypted backups for a limited period before they are overwritten. We may retain limited records where required for legal, tax, accounting, or fraud-prevention purposes.

We use industry-standard safeguards, including encryption in transit and at rest provided by our infrastructure providers, row-level database security that isolates each account's data, and hashing of sensitive tokens such as client share links. No system is perfectly secure, but we work to protect your information and to limit access to it.

• Access and update your account and content at any time within the app.
• Export your project data in CSV or JSON format.
• Delete your account and content as described in Section 7.
• Manage email: transactional emails are part of the Service; we do not send marketing email by default.

Depending on where you live, you may have additional rights described below.

If you are a California resident, you have the right to know what personal information we collect and how we use and share it (described in this policy), to request access to or deletion of your personal information, to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell or "share" personal information for cross-context behavioral advertising. To make a request, contact us using Section 14.

When you enter information about your own clients (such as their name, email, or project address) or share a spec sheet with them, you are responsible for that information: for having the right to provide it, for the accuracy of it, and for using the Service in a way that respects your clients' privacy. With respect to that client information, you act as the controller and we act as a processor handling it on your behalf to provide the Service.

Spec sheets you choose to share are made available through a read-only link secured by a unique token. You control whether to create or revoke a share link.

The Service is operated from the United States, and your information is processed and stored in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.

The Service is intended for business use by individuals who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

Questions about this policy or your information? Contact us at:

Grup Holdings LLC — Spec Sheet Builder
info@specsheetbuilder.com

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.