Privacy Policy for WSJ+ Construction Management

Last Updated: October 1, 2025
Effective Date: October 1, 2025

1. Introduction

Welcome to WSJ+ Construction Management ("we," "our," or "the App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. This policy applies to all users of the WSJ+ Construction Management mobile application (the "Service").

By using our App, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

This Privacy Policy is designed to comply with:

• Apple App Store Guidelines
• Google Play Store Developer Policy
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable data protection laws

2. Information We Collect

2.1 Personal Information You Provide

Account Information:

• Email address (required for account creation and authentication)
• Full name (for user identification within the App)
• Password (encrypted and stored securely)
• Company affiliation (if applicable)
• Job title/role (for permission management)
• Phone number (optional, for contact purposes)

2.2 Project and Work-Related Data

Construction Project Data:

• Project names, descriptions, and details
• Daily reports and field notes
• Task assignments and schedules
• Equipment logs and tracking information
• Team member assignments
• Progress updates and status reports
• Comments and annotations

2.3 Photos and Media Files

Camera and Photo Library Access:

• Construction site photos
• Blueprint and drawing images
• Equipment photos
• Document scans and photos
• Before/after progress photos
• Photo metadata (date, time, dimensions)

2.4 Location Data

Location Information:

• Project site locations (optional)
• Geocoding data for project addresses
• Location data embedded in photos (if enabled on your device)

3. How We Use Your Information

3.1 Core Service Delivery

• Account Management: Create, maintain, and authenticate user accounts
• Project Collaboration: Enable team members to collaborate on construction projects
• Data Synchronization: Sync your data across multiple devices
• Content Delivery: Display projects, photos, documents, and reports
• Communication: Send you notifications about project updates and assignments

3.2 Security and Authentication

• Identity Verification: Verify your identity when you log in
• Session Management: Maintain secure user sessions
• Access Control: Enforce permission-based access to projects and data
• Fraud Prevention: Detect and prevent unauthorized access

4. How We Share Your Information

4.1 With Project Team Members

• Authorized Users: Information is shared with other users who have access to the same projects
• Visibility: Your name, email, and role are visible to project team members
• Project Data: Photos, documents, reports, and comments are visible to project collaborators
• Control: Project administrators control who has access to project data

4.2 Service Providers

We use minimal third-party services:

• NextAuth.js: Open-source authentication library (runs on our servers)
• Nominatim (OpenStreetMap): For geocoding and address lookups

4.3 We DO NOT:

• ✗ Sell your personal information to third parties
• ✗ Share your data with advertisers
• ✗ Use your information for marketing without consent
• ✗ Share your photos or documents outside of project teams
• ✗ Provide access to your data to anyone not authorized by you

5. Data Storage and Security

5.1 Where We Store Data

• On-Premises Servers: Data stored on our own physical servers at our secure facility
• Database: Encrypted PostgreSQL database on our local infrastructure
• File Storage: Photos and documents on our own secure file servers
• Geographic Location: All server infrastructure physically located in Lafayette, Alabama, USA

5.2 Security Measures

We implement industry-standard security measures:

• Encryption in Transit: TLS/SSL encryption for all data transmission
• Encryption at Rest: Sensitive data encrypted in our databases
• Password Security: Passwords hashed using bcrypt with salt
• Network Security: Firewalls and intrusion detection systems
• Physical Security: Servers housed in secure, access-controlled facility

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access Your Data: Request a copy of personal information we hold about you
• Correct Your Data: Update or correct inaccurate information
• Delete Your Data: Request deletion of your account and associated data
• Export Your Data: Request a portable copy of your data
• Restrict Processing: Request limitation on how we use your data

6.2 Device Permissions

You can control app permissions through device settings:

6.3 Account Deletion

To delete your account:

1. Contact us at chapman@wsjbuild.com
2. Request account deletion with your registered email
3. We will delete your account within 30 days
4. Some information may be retained for legal compliance

Note: Account deletion is permanent and cannot be undone. All your personal data will be deleted, but project data may be retained for other team members.

7. Children's Privacy

The WSJ+ Construction Management App is NOT intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at chapman@wsjbuild.com. We will take steps to delete such information from our systems.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do NOT sell your personal information
• Right to Non-Discrimination: No discriminatory treatment for exercising your rights

9. European Privacy Rights (GDPR)

If you are located in the EEA or UK, you have rights under GDPR:

• Right of Access: Request access to your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Data Portability: Receive your data in portable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

For GDPR-related inquiries, contact our Data Protection Officer at lferris@wsjbuild.com

10. Contact Us

11. Consent

By using the WSJ+ Construction Management App, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Thank you for trusting WSJ+ Construction Management with your data. Your privacy is important to us.