Privacy Policy

Who We Are
What Data We Collect
Legal Basis for Processing
How We Use Your Data
Who We Share Your Data With
How Long We Keep Your Data
Your Rights Under UK GDPR
How We Protect Your Data
Cookies
Changes to This Policy
Contact Us

This Privacy Policy applies to ConstructCam — the construction site management platform operated by Airborne Construction Ltd. It explains how we collect, use, store and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

Detail	Information
Company	Airborne Construction Ltd (trading as ConstructCam)
Registered in	England and Wales
ICO Registration	Pending — registration in progress
Privacy email	privacy@constructcam.app
General email	hello@constructcam.app
Website	https://constructcam.app

2. What Personal Data We Collect

Data Type	What We Collect
Account & Identity	Name, email address, password (encrypted), job title, role, company name
Worker Data	Full name, date of birth, National Insurance number, nationality, right to work expiry, passport expiry, trade, emergency contact details
Location Data	GPS coordinates captured when signing in to a site or uploading a site photo
Site Access Data	Sign-in and sign-out times, visitor type, company, reason for visit, device information
Project Data	Project names, addresses, photos, documents, walkthrough reports, variations, forms
Technical Data	IP address, browser type, device identifiers, app usage logs
Payment Data	Billing information processed via Stripe — we never store card numbers
AI Interaction Data	Conversations with CAMI including questions asked and documents generated

3. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases:

Contract performance — processing necessary to provide the ConstructCam service you have signed up for
Legitimate interests — to improve our platform, ensure security and prevent fraud
Legal obligation — where required by law (e.g. HMRC requirements, H&S records)
Consent — for optional features such as marketing communications. You can withdraw consent at any time.

4. How We Use Your Data

To provide, operate and maintain the ConstructCam platform
To create and manage your account and company account
To process site sign-ins, walkthrough reports, variations and compliance documents
To send transactional emails (account creation, invites, variation approvals, reports)
To power CAMI, our AI site manager — your data provides context but is not used to train external AI models
To monitor platform security and prevent unauthorised access
To comply with legal obligations including ICO registration requirements
To improve the platform based on aggregated, anonymised usage patterns

5. Who We Share Your Data With

We do not sell your personal data. We share data only with trusted third-party processors:

Processor	Purpose	Location
Supabase Inc	Database, authentication and file storage	EU West (Ireland)
Netlify Inc	Web hosting and serverless functions	USA (EU safeguards)
Anthropic Inc	CAMI AI assistant processing	USA (EU safeguards)
Resend Inc	Transactional email delivery	USA (EU safeguards)
Stripe Inc	Payment processing — card data never reaches us	USA (EU safeguards)

6. How Long We Keep Your Data

Data Type	Retention Period	Reason
Account data	Duration of account + 30 days	Service provision
Worker data (NI, RTW)	7 years after last engagement	Employment records legal obligation
Site sign-in records	3 years	H&S compliance
Project photos & documents	7 years after project completion	Construction defect liability
Variation records	7 years after project completion	Contract dispute limitation period
Payment records	7 years	HMRC requirement
CAMI conversations	90 days	Service improvement then deleted

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to access — request a copy of all data we hold about you (Subject Access Request). We respond within 30 days.
Right to rectification — ask us to correct inaccurate or incomplete data
Right to erasure — request deletion of your data where we no longer have a legal reason to hold it
Right to restriction — ask us to stop processing while a complaint is resolved
Right to portability — receive your data in CSV or JSON format
Right to object — object to processing based on legitimate interests or direct marketing
Right to withdraw consent — withdraw consent at any time without affecting prior processing
Right to complain — lodge a complaint with the ICO at ico.org.uk or 0303 123 1113

To exercise any of these rights, email privacy@constructcam.app. We will respond within 30 days.

8. How We Protect Your Data

All data encrypted in transit using TLS 1.3 (HTTPS enforced on all URLs)
All data at rest encrypted using AES-256
Passwords hashed using bcrypt — we cannot see your password
Row Level Security enforced in the database — companies can only access their own data
Platform admin area requires secret URL + PIN + login (three-factor protection)
Primary database hosted in EU West (Ireland) — data does not leave the EU by default
Regular security audits conducted on the database and application code

9. Cookies

ConstructCam uses minimal cookies to operate the service. We do not use advertising cookies or sell data to advertisers.

Cookie	Type	Purpose	Duration
supabase-auth-token	Essential	Keeps you logged in. Session expires on inactivity.	7 days
constructcam-session	Essential	Session preferences and last visited project.	Session
analytics	Optional	Anonymous usage analytics. No personal data.	1 year

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by displaying a notice in the app. The version date at the top of this document shows when it was last updated.

11. Contact Us

Privacy queries: privacy@constructcam.app
General support: hello@constructcam.app
ICO (complaints): ico.org.uk · 0303 123 1113

Questions about your data?

We take your privacy seriously. If you have any questions about how we handle your personal data, get in touch.

privacy@constructcam.app

Contents