Privacy Policy

1. Welcome & Scope

At CDPT, your privacy and data security are our highest priority. This Privacy Policy details how we collect, store, share, use, and process your business information, personal details, and operative tracking records when you access or interact with the CDPT platform.

This policy applies to all modules of our multi-tenant construction SaaS tool, including the Tenant Admin panel, Project modules, Operative interfaces, GPS tracking mechanisms, and messaging dashboards.

2. Information We Collect

We collect data directly from Tenant Administrators, project managers, and operatives, as well as automatically through platform interactions:

• Account Registration Info: Names, business emails, physical addresses, phone numbers, password hashes, company sizes, and organizational codes.
• Project Management Data: Cost breakdowns, project phases, materials invoices, task details, audit logs, and communication data within chat rooms.
• Uploaded Files & Documents: Construction blueprints, certification records, invoices, spreadsheets, CAD documents, and profile images.
• Usage Data: HTTP headers, browser agents, IP addresses, cookie states, session details, and clickstream logging.

3. GPS & Geolocation Data

A core component of our workforce management dashboard is GPS attendance verification for construction site operatives.

This tracking is necessary to match the operative's location with the project coordinates (geofence) defined by the project manager, preventing timesheet fraud and validating on-site attendance.

4. How We Use Your Information

We process your business and personal data to ensure smooth operations and enhance platform performance:

• Providing and maintaining the multi-tenant routing structure.
• Generating workforce metrics, attendance charts, and project development audits.
• Verifying registration requests and processing security OTP codes.
• Compressing and storing uploaded files, and providing image fallbacks.
• Managing billing, invoices, and payment gateways.
• Enabling real-time chat between operatives and project managers.

5. Sharing & Disclosure

We do not sell, rent, or trade your personal information or business data to third parties. We share data only in the following scenarios:

• Third-Party Vendors: Cloud storage providers (AWS S3), email delivery services (SendGrid/Amazon SES), SMS gateways, and payment processing servers (Stripe).
• Within Tenant Spaces: Operative names, status details, and project notes are shared internally with authorized Tenant managers and admins according to Role-Based Access Control (RBAC).
• Legal Requirements: If requested under statutory authority, subpoena, or to comply with law enforcement requirements.

6. Security & Storage Safeguards

We employ industry-standard technical safeguards to defend your tenant data. This includes:

• Strict multi-tenant database isolation to prevent cross-tenant data leaks.
• Data transmission security using Transport Layer Security (TLS 1.3/HTTPS).
• Encryption of static media assets stored in cloud S3 buckets.
• Salted, secure password hashes using bcrypt algorithms on our backend database.

However, please note that no internet-facing cloud database is 100% secure. You are responsible for shielding your workspace credentials and monitoring admin logs.

7. Retention & Soft-Deletion Controls

We retain your data as long as your tenant subscription is active. In addition, the CDPT database features strict soft-deletion controls:

• Soft-Deleted Entities: When a project manager deletes an operative, task, or time log, it is marked as soft-deleted in the database.
• Data Integrity Filtering: Our backend APIs automatically filter all analytics, hours, and billing reports to exclude soft-deleted records.
• Hard Deletion: Upon subscription termination, all tenant records, including soft-deleted items, are queued for permanent, irreversible deletion after 30 days.

8. User Rights & Choices

Depending on your location and regional laws, you have specific rights regarding your personal information:

• Access & Export: You can request a full copy of your tenant data and profile parameters in JSON format.
• Correction: You can edit profile items, organization data, and phone numbers directly in the Profile Settings panel.
• GPS Opt-out: Operatives may decline to share GPS details by blocking browser/device location prompts. This will, however, prevent clocking in/out.

9. Contact Details

For questions concerning our privacy practices, data deletion requests, or location privacy, please reach out to our Data Protection Officer (DPO):