Privacy policy
Projlog is a tool that service companies use to communicate with their customers. Companies own the data they put in. We don't sell anyone's personal information, we don't show ads, and we only use your data to run the service. When a contractor invites you to a project portal, that contractor controls your project data; we process it on their behalf.
- 01Who we are
- 02Our two roles
- 03Information we collect
- 04How we use information
- 05When we share information
- 06Service providers
- 07Text messages
- 08Cookies & tracking
- 09Data retention
- 10Security
- 11Your rights & choices
- 12Children
- 13International users
- 14Changes to this policy
- 15Contact us
Who we are
Projlog is operated by Project Log LLC ("Projlog," "we," "us"). We provide a customer communication platform for service companies: project portals, messaging, photo sharing, estimates, invoicing, scheduling, and related tools, available at projlog.app and through our applications (together, the "Service").
This policy explains what personal information we collect, how we use it, and the choices you have. It applies to visitors of our website, the companies that subscribe to Projlog ("Companies"), their staff and crews ("Users"), and the customers those companies invite into project portals ("Customers").
Our two roles
We handle personal information in two distinct capacities, and your rights differ depending on which applies:
- Projlog as a controller. For information about website visitors, demo requests, and Company account holders, we decide how and why the data is used. This policy governs that data directly.
- Projlog as a processor.For project data inside the platform (Customer names, addresses, messages, photos, estimates, payment records), the Company you hired is the controller. We process that data on the Company's instructions under our agreement with them. If you are a Customer and want your project data corrected or deleted, the fastest path is to ask your contractor; we support them in honoring those requests.
Information we collect
Information you provide
- Account information. Name, email address, phone number, company name, and password (stored as a salted hash) when a Company creates an account or a User is added to one.
- Project data. Content that Companies and Customers put into the Service: messages, project details, property addresses, access notes, photos and documents, estimates, invoices, and payment records.
- Customer onboarding data. Information Customers provide during their guided first visit: contact details, property information, and notification preferences.
- Demo and support requests. Name, company, trade, email, phone, and anything you include in a message to us.
Information collected automatically
- Usage data. Log data such as IP address, browser and device type, pages viewed, and actions taken in the Service, used for security, debugging, and improving the product.
- Device data for notifications. Push subscription tokens and delivery status, so we know whether a notification reached you and when to fall back to a text message.
Information from third parties
- Sign-in providers. If you sign in with Google or Microsoft, we receive your name, email address, and profile identifier from that provider. We do not receive your password or your files.
- Payment processor. Stripe provides us with payment status and the last four digits of a card. Full card numbers never touch our servers.
How we use information
- To provide, maintain, and improve the Service.
- To deliver messages and notifications you or your contractor send through the platform.
- To process payments and maintain billing records.
- To respond to support requests and demo inquiries.
- To secure the Service: detecting fraud, abuse, and unauthorized access.
- To comply with legal obligations.
- To send Companies service announcements and, with consent, product news. We do not send marketing to Customers.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
When we share information
- Within a project. Project data is visible to the Company that owns the project and the Customers invited to it. That's the point of the product.
- Service providers. Vendors listed in Section 06, bound by contracts that limit their use of your data to providing services to us.
- Legal requirements. When required by law, subpoena, or court order, or to protect the rights, safety, and property of Projlog, our users, or the public.
- Business transfers. If Projlog is involved in a merger, acquisition, or sale of assets, your information may transfer with the business; this policy would continue to apply.
Service providers
| Provider | What they do | What they handle |
|---|---|---|
| Stripe | Payment processing | Payment card details, billing name and address |
| SMS carrier partner | Text message delivery | Phone numbers, message content for delivery |
| Cloud hosting provider | Infrastructure and storage | All Service data, encrypted at rest |
| Email delivery partner | Transactional email | Email addresses, message content for delivery |
A current list of subprocessors is available on request at privacy@projlog.app.
Text messages
The Service sends a small number of text messages: an invitation when a contractor sets up your project, and fallback alerts when something critical would otherwise go unseen. Message and data rates may apply.
- Consent.Companies are responsible for having their Customers' consent to receive these texts, and agree to that in our Terms of Service and Acceptable Use Policy.
- Opting out. Reply STOP to any text from the Service to stop receiving texts. Reply HELP for help. Opting out of texts does not close your portal; in-portal and push notifications continue per your preferences.
Cookies & tracking
We use cookies and similar technologies that are essential to the Service: keeping you signed in, remembering preferences, and protecting against request forgery. We use privacy-respecting, first-party analytics to understand aggregate usage of our website. We do not use third-party advertising cookies or tracking pixels.
Data retention
- Account data is kept while the account is active and deleted or anonymized within 90 days of account closure, except where law requires longer retention.
- Project datais retained under the Company's control. When a Company deletes a project or closes its account, associated data is deleted from production systems within 90 days and from backups within 180 days.
- Billing records are retained as required by tax and accounting law (typically 7 years).
- Log data is retained for up to 12 months for security purposes.
Security
We protect your information with industry-standard measures: encryption in transit (TLS) and at rest, hashed and salted passwords, two-factor authentication for Company accounts, least-privilege access controls, and logging of access to production systems. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify affected parties and regulators as required by law.
Your rights & choices
Depending on where you live (including California, Colorado, Connecticut, Texas, Utah, Virginia, and other states with privacy laws, the EEA, and the UK), you may have the right to:
- Access the personal information we hold about you, and receive a portable copy.
- Correct inaccurate personal information.
- Delete your personal information.
- Object to or restrict certain processing.
- Not be discriminated against for exercising any of these rights.
To exercise these rights, email privacy@projlog.app. We respond within the time required by applicable law (generally 30 to 45 days) and may need to verify your identity first. If you are a Customer and your request concerns project data, we may refer the request to the Company that controls it, and we will help them fulfill it. You may also appeal a decision by replying to our response, and you may lodge a complaint with your local supervisory authority.
Children
The Service is for business use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
International users
We are based in the United States and process data there. If you access the Service from outside the U.S., you understand that your information will be transferred to and processed in the U.S. Where required, we rely on appropriate safeguards such as standard contractual clauses for transfers from the EEA and UK.
Changes to this policy
When we make material changes, we will update the date at the top, notify Companies by email or in-product notice at least 30 days before the change takes effect, and keep prior versions available on request.
Contact us
Project Log LLC
Email: privacy@projlog.app
Support: support@projlog.app