Privacy Policy

Who we are

InfraPro is a construction project management service for contractors and trades. It is operated by the operator of the InfraPro service. For privacy questions, contact us at [email protected].

Primary governing jurisdiction for this policy and the related Terms is Saskatchewan, Canada.

What we collect

• Account: name, email, hashed password, optional department, account role, and plan (Free or Pro), including complimentary Pro trial end date when applicable.
• Security: email verification, password-reset, and optional MFA codes and tokens.
• Work data: workspaces, projects, schedules, financials, field logs, documents/photos (links or uploads when storage is configured), change logs, risks, lessons, invites, notifications, and related records you or your team enter.
• Billing (Pro): subscription status and provider identifiers when Pro checkout is enabled (for example Stripe). We do not store full card numbers in InfraPro.
• Optional ads and analytics: only after you choose Accept all in the cookie banner (or enable them in Settings). Free accounts may show labeled advertisements when ads are configured; optional analytics measure product funnels.

Why we use it (PIPEDA purposes)

We use personal information to:

• Create and run your account and sign-in.
• Provide project tools, invites, and notifications.
• Send account/service email (verification, sign-in codes, password reset, invite links, billing notices such as payment failed, and optional complimentary Pro trial tip emails you can stop anytime) — not a marketing newsletter.
• Process Pro billing when you upgrade.
• Show Free-plan ads and run optional analytics only if you accept those cookies and those features are configured.
• Maintain security, prevent abuse, and improve reliability.

Guests only see and use what their project membership allows (for example Financials for their own invoices). InfraPro is not directed at children under 13.

Consent and your choices

Creating an account requires agreeing to the Terms of Service and this Privacy Policy. Advertising and analytics cookies are off until you Accept all (or turn them on in Account settings). You can switch to Essential only anytime.

You can review and update your name, email, and password in Account settings. For access or correction requests beyond self-serve, email support.

Access, export, and deletion

In Account settings (Danger zone) you can:

• Export a copy of your account data (profile, memberships, owned-project summary, guest invoices when applicable, and your notifications) as JSON.
• Delete your account after confirming your email. We remove your memberships, tokens, notifications, and subscription records; projects where you are the sole owner (and empty workspaces you solely own) are deleted. Platform admin accounts cannot self-delete.

Copies may remain for a limited time in encrypted backups or logs needed for security and legal obligations, then are removed in the ordinary backup cycle.

Email (CASL)

We send commercial electronic messages as needed to operate your account: verification, MFA codes, password reset, invite emails, billing-related notices (for example payment failed), and optional short account tip emails during a complimentary Pro trial (first-job reminder and trial-ending notice). You can stop tip emails anytime from Settings → Privacy or the link in those emails. We do not run a separate newsletter or marketing blast from InfraPro.

Cookies and similar technology

• Essential: sign-in session, your cookie preference, and theme or similar UI state needed for the app to work.
• Advertising: Google AdSense on Free placements when you accept advertising cookies and AdSense is configured. Ads are labeled and disclose that they support Free plans.
• Analytics: optional Plausible or PostHog (when configured) only if you accept analytics cookies.

Service providers

We use processors to host and run the product, including database hosting (Neon), application hosting (Render), transactional email (Resend, or Gmail SMTP when configured that way), and — when enabled and accepted — Stripe for Pro billing, Google AdSense for Free ads, and Plausible or PostHog for analytics. They process data only to provide those services.

Where data is processed

InfraPro is offered to users in Canada (and may be used from the United States). Our processors may store or process data in the United States and other countries where they operate (for example Neon, Render, Stripe, Resend, and Google). When data leaves Canada, it is protected by the contracts and safeguards those providers offer, and by the security measures described below. By using InfraPro you understand that your information may be processed outside your province or country.

Retention and security

We keep account and project data while your account exists and as needed to provide the service, resolve disputes, and meet legal obligations. Passwords are stored hashed. Access to project data is limited by membership and role. No method of transmission or storage is 100% secure; we take reasonable safeguards appropriate to the service.

Typical short-lived records:

• Email verification tokens — about 24 hours, then unused tokens expire.
• Password-reset tokens — about 60 minutes.
• MFA one-time codes — a few minutes; stored hashed with attempt limits.
• Project and guest invite tokens — until accepted, revoked, or expired per invite rules.
• Billing records — kept as long as needed for the subscription, tax, and accounting with Stripe.

United States / California notice

At collection we use the categories above for the purposes listed. We do not sell personal information for money. Sharing with ad or analytics providers happens only after you Accept all (or enable those categories in Settings). California residents may opt out of that sharing by choosing Essential only or changing preferences in Account settings. Contact us using the address above for questions about this notice.

Changes

We may update this policy when the product changes. The “Last updated” date at the top will change. Continued use after a material update means you should review the new version; significant changes may also be called out in the product when practical.