Privacy Policy

Overview

Build Tack (“Build Tack”, “we”, “us”, “our”) is a construction management platform operated by Kshetrapal Infra Project Pvt. This policy explains what personal and business data we collect through our website and CRM product, why we collect it, how it is stored and protected, and the choices you have over it.

This policy applies to visitors of our marketing website (buildtack.com), to the tenant companies and their users who use our CRM (client.buildtack.com and related subdomains), and to anyone who submits an enquiry or demo request to us.

Data we collect

Information you give us

• Contact and enquiry data — name, company name, work email and phone number, when you book a demo, register, or contact support.
• Account data — name, email address, mobile number, role and password (stored as a salted hash, never in plain text) for anyone with a login on the CRM.
• Business data you upload — project details, employee and attendance records, material and purchase registers, tasks, financial documents and other content your company enters into the CRM. This data belongs to your company, not to us — see “Your rights” below.

Information collected automatically

• Usage data — pages visited, actions taken inside the CRM, login timestamps and IP address, used for security (e.g. rate-limiting login attempts) and to diagnose problems.
• Cookies — used to keep you signed in and remember basic preferences. See the Cookies section below.

How we use it

• To provide, maintain and secure the CRM for your company (each company's data is kept in its own isolated database — it is never mixed with another company's data).
• To authenticate logins, including sending one-time verification codes by SMS where phone-based login is enabled.
• To respond to demo requests, support queries and account-related communications.
• To send onboarding emails (e.g. your client code and initial credentials) when your account is created.
• To improve the product and diagnose technical issues.
• To meet legal, tax and accounting obligations.

We do not sell your personal data, and we do not use your business data (projects, attendance, financial records, etc.) to train third-party AI models or share it with other tenant companies.

Sharing & subprocessors

We share data only with service providers who help us run Build Tack, under obligations to keep it confidential and secure:

Purpose	Provider	Data involved
Hosting & infrastructure	Hostinger (VPS)	All application data, encrypted in transit (HTTPS)
Transactional email	Gmail / Google Workspace	Name, email address, onboarding/notification content
SMS / OTP delivery	2Factor.in	Mobile number, one-time verification code

We may also disclose data where required by law, to enforce our Terms of Service, or to protect the rights, property or safety of Build Tack, our customers, or others.

Cookies

We use a small number of cookies, all necessary for the site and CRM to function:

• Session cookies — keep you signed in to the CRM after login.
• “Remember me” cookies — optionally remember your client code and login identifier on this device for 30 days, only if you tick “Remember me” at login.

We do not use third-party advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings, but doing so will prevent you from staying signed in.

Security

• Passwords are stored as salted hashes, never in plain text.
• Each tenant company's data lives in a separate, isolated database.
• Login attempts are rate-limited, and optional phone-based two-factor verification is available.
• Data is transmitted over HTTPS.

No system is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify affected tenant administrators without undue delay.

Retention

We retain account and business data for as long as your company's subscription is active, and for a reasonable period afterward to comply with legal, tax and accounting obligations or to resolve disputes. You may request deletion of your account data at any time, subject to those obligations — see “Your rights” below.

Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. For users in India, these rights are consistent with the Digital Personal Data Protection Act, 2023.

Business data entered into the CRM (projects, employees, financial records, etc.) belongs to the tenant company that entered it. Requests to access, export or delete that data should generally go through your company's Build Tack administrator; we will also assist directly where appropriate. To exercise any of these rights, contact us using the details below.

Children's privacy

Build Tack is a business tool intended for use by adults in a professional capacity. We do not knowingly collect personal data from children under 18.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated “Last updated” date at the top of this page. Continued use of Build Tack after changes take effect constitutes acceptance of the revised policy.

Contact us