Privacy Policy
Last updated 25 September 2026
Stainback Build is job-site software used by Stainback Construction and its team, subcontractors and clients. This policy covers the website at build.stainbackconstruction.com and the Stainback Build mobile app.
What we collect
Your account. Your name, email address and a password. The password is never stored — only a scrypt hash of it, which cannot be reversed into the password you chose.
Your work. The job sites, schedules, tasks, notes, messages, daily logs, selections and documents you or your team enter. This is the point of the product; it is your company’s business record.
Files and photos. Documents and photographs uploaded to a job, including photos taken through the app’s camera for a daily log. Photos are resized on your device before upload. Files carry whatever information is in them, including any location data your camera records.
Contacts you enter. Names, phone numbers and email addresses for subcontractors, vendors and clients, entered by your team or imported from a file you provide.
Technical. A session identifier so you stay signed in, and ordinary server logs (IP address, request time, error detail) kept for security and troubleshooting.
What we do not do
- No advertising, and no advertising identifiers.
- No analytics or tracking scripts. The site loads no third-party code.
- We do not sell, rent or share your data with anyone for their own purposes.
- We do not track you across other apps or websites.
- We do not use your data to train machine-learning models.
Who can see what
Access follows your role, and it is enforced on the server rather than hidden in the app. An owner, administrator or project manager sees the whole workspace. Field crew see live job sites. A subcontractor sees only the job they were invited to, its schedule and the files shared with their trade — never internal notes, financial information or team messages. A client sees their own build.
Where it is kept
The application and its database run on Fly.io in Dallas, Texas. Uploaded files are stored in Amazon S3 in Ohio (us‑east‑2). Outbound email, when enabled, is sent through Amazon SES. All traffic is encrypted in transit. Everything is held in the United States.
Cookies
Three, all necessary for the site to work, none used for tracking or advertising: sb_session keeps you signed in,sb_company remembers which workspace you are viewing, andsb_view_as holds the role-preview setting available to administrators. There are no analytics or advertising cookies to consent to.
The mobile app
The app asks for the camera and photo library only when you add photographs to a daily log, and only for that. It does not use location services, contacts, the microphone or your calendar. Your sign-in token is kept in the device keychain. Signing out removes it, along with any files cached for offline use.
How long we keep it
Your company’s job records are kept for as long as the workspace exists, because a build’s history is the reason the record is made. A web session expires after 30 days, a mobile session after 90, and signing out ends it immediately.
Deleting your account
Write to us at the address below and we will delete your account immediately: your email address, name and password are erased, and every signed-in device is logged out. The mobile app will also offer this directly, under Account, once that release is out.
Work you authored stays on the job, attributed to “Former team member”. A daily log is the record of what happened on a site on a given day — it belongs to the build rather than to the person who typed it, and removing it would erase the project’s history along with your account. If you need something you wrote removed as well, write to us and we will do it.
Security
Passwords are hashed with scrypt. Session tokens are stored only as SHA‑256 hashes, so a copy of the database hands out nothing usable. Files are served through short-lived signed links rather than public URLs.
Children
Stainback Build is a tool for construction professionals. It is not directed at children and we do not knowingly collect information from anyone under 16.
Your rights
You can ask for a copy of your personal information, ask us to correct it, or ask us to delete it. Write to the address below and we will respond within 30 days. If you are a subcontractor or a client, the builder who invited you controls the job records you appear in; we will put you in touch with them.
Changes
If this policy changes we will update the date at the top. Anything that materially changes how your information is used will be notified in the app before it takes effect.
Contact
Stainback Construction
Dallas, Texas
info@stainbackconstruction.com