Privacy Policy

1. Who we are

Won2Build (“Won2Build,” “we,” “us”) operates the Won2Build Hub and its connected applications: Time Budge, Bid Track, CO Hub, and Takeoff (collectively, the “Services”). This policy explains what information we collect when you use our websites and apps, how we use it, and the choices you have.

2. Information we collect

• Account information. Name, email address, phone number, employer/company, role, and the credentials you use to sign in.
• Company & project data. Companies, projects, jobs, workers, bids, change orders, time entries, takeoffs, and other operational records you create in the Services.
• Time & attendance data (Time Budge). Clock-in and clock-out events, breaks, job site assignments, notes, and any time-card edits or approvals.
• Location data (Time Budge). When you punch in or out, we capture the device’s GPS coordinates to verify you are inside the assigned job site’s geofence. Location is only collected at the moment of a punch or while a punch session is active. We do not track your location in the background outside of work events.
• Documents & media. Plans, drawings, photos, attachments, and files you upload to bids, change orders, or projects are stored with the associated record.
• Billing information. Subscription plan, billing contact, and payment metadata. Card details are handled directly by our payment processor; we never see full card numbers.
• Device & usage information. Device type, operating system, app version, language, IP address, crash logs, and basic usage analytics to keep the Services stable and improve features.
• Communications. Messages you send to support and any feedback you submit.

3. How we use information

• Provide, operate, and maintain the Services and your account.
• Sync your company, team, and subscription entitlements across connected apps (e.g. the Hub pushing access to Time Budge).
• Record and report hours, bids, change orders, and takeoffs for payroll, billing, and project management.
• Enforce geofence rules and other workplace policies set by your employer.
• Process payments, send invoices, and manage your subscription.
• Send transactional email and SMS such as invitations, password resets, billing receipts, schedule reminders, and product notices.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations and enforce our Terms.

4. Who can see your data

Data you create in the Services is visible to authorized members of your company according to your roles and permissions. Won2Build personnel may access data only as needed to operate the Services, troubleshoot, or comply with the law. We do not sell your personal information.

5. Third-party services

We use trusted vendors to operate Won2Build:

• Stripe — processes subscription payments. Stripe receives payment-card details directly; we never see full card numbers.
• Twilio — delivers SMS notifications such as schedule reminders.
• OneSignal — assists with messaging and engagement delivery.
• Lovable — provides the cloud platform, database, authentication, and hosting infrastructure that powers the Services.
• Cloud hosting & database providers — store and serve the application data under industry-standard security controls.

These providers process information only on our behalf, under contractual obligations consistent with this policy.

6. Data retention

We retain account and company data for as long as your subscription is active, plus the period required for payroll, tax, and legal record-keeping. Support audit logs are retained for 90 days. After cancellation, we retain records for a reasonable period to satisfy legal, tax, and accounting requirements, then delete or anonymize them. You may request deletion at any time (see Section 9).

7. Security

Data is transmitted over HTTPS and stored with encryption at rest. Access to the database is gated by row-level security so that one company cannot read another’s data. No system is perfectly secure, but we work continuously to protect your information.

8. Children

Won2Build is a workplace tool for adults. It is not directed to children under 13, and we do not knowingly collect data from them.

9. Your choices & rights

• Update your profile and notification preferences inside the Services.
• Unsubscribe from non-essential email via the link in each message or your settings.
• Revoke location or photo permissions in your device settings (some features will stop working).
• Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Contact us at the email below to make a request.

10. Changes

We may update this policy from time to time. Material changes will be highlighted in-product or by email. The “Effective” date at the top shows the latest revision.

11. Contact

Questions or requests: hello@won2build.com.