Privacy Policy

Account information. When you or your company registers, we collect your name, email address, phone number (optional), role, and company name.

Customer Data. The content you and your users create in the ordinary course of using the Service — projects, daily logs, RFIs, submittals, punch list items, budgets, change orders, contracts, vendor and customer records, employee/crew names and hours, drawings, and photos.

Field app. If your company uses the AdvantaBuild mobile app, we also collect: the mobile number your company adds for you, used to text you sign-in codes; your device's precise location at the moment you (or your field lead) clock in or out, so your timecard shows you were on the job site — the app does not track your location at any other time or in the background; photos you take or choose for a job; the hours you clock and the job and cost code they're for; your answer to "Were you injured today?" when you clock out, which goes to your company's administrators and the job's project managers; and basic device details (device name, platform, and app version) for your sign-in. This information is Customer Data that belongs to your company.

Payment information. If you subscribe to a paid plan, our payment processor, Stripe, collects your billing details (such as card number and billing address) directly. We receive limited information back from Stripe — such as your subscription status, plan, and invoice history — but we do not receive or store your full card number.

Usage and device data. We use Google Analytics on our public marketing pages to understand aggregate traffic (such as pages visited, browser type, and general location derived from IP address). We do not run analytics inside the signed-in application.

QuickBooks Online data. See Section 3 below.

• To provide, operate, and maintain the Service you request;
• To authenticate you and secure your account (e.g., emailed sign-in codes);
• To process payments and manage subscriptions through Stripe;
• To provide optional integrations you choose to enable, such as QuickBooks Online;
• To send you service-related communications (e.g., sign-in codes, invitations, billing receipts, and important notices about the Service);
• To respond to support requests;
• To monitor, maintain, and improve the security and performance of the Service; and
• To comply with legal obligations.

We do not sell your personal information or Customer Data, and we do not use Customer Data to serve you advertising.

AdvantaBuild offers an optional, opt-in integration with QuickBooks Online, provided by Intuit Inc. You control whether to connect it, and it is disconnected by default.

What we access. If you connect QuickBooks Online, you authorize us through Intuit's OAuth authorization flow to read your Vendors, Customers, Projects (QuickBooks sub-customers/jobs), and Bills. You separately choose which specific records to import using an in-app picker — nothing is imported automatically or in bulk.

What we do not do. The integration is pull-only. We never write, modify, or delete anything in your QuickBooks Online company. We do not use QuickBooks data for advertising or marketing purposes, we do not sell it, and we do not share it with any third party except as necessary to provide the Service (for example, our database and hosting infrastructure) or as required by law.

Storage and retention. Imported records are stored in our database as ordinary Customer Data and are retained as described in Section 7. Your QuickBooks Online access token is stored so we can perform the sync operations you request, and is deleted immediately when you disconnect the integration from Settings. Disconnecting does not delete records you already imported — those remain in AdvantaBuild as your own Customer Data unless you delete them.

You may disconnect the QuickBooks Online integration at any time from Settings → QuickBooks. You can also manage or revoke AdvantaBuild's access directly from your Intuit account.

Subscription payments are processed by Stripe, Inc. Stripe acts as an independent controller of the payment information you provide to it, subject to Stripe's Privacy Policy. We receive and store subscription status, plan, billing dates, and invoice metadata from Stripe so we can manage your account.

We share information only in the following circumstances:

• Within your company account. Customer Data is visible to other users in your company according to the roles and permissions your administrators configure.
• Service providers. We use a limited number of vendors to operate the Service: Stripe (payments), Intuit/QuickBooks Online (only if you connect it), an email delivery provider (for sign-in codes and transactional email), and Twilio (to text sign-in codes to field-app users). These providers are authorized to use your information only as necessary to provide their service to us.
• Legal and safety. We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith it is necessary to protect the rights, property, or safety of Tanstone Technologies, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy of which you will be notified.

We use essential cookies to keep you signed in and to remember basic preferences (such as light/dark theme). Our public marketing pages use Google Analytics cookies to measure aggregate traffic; the signed-in application does not. You can control cookies through your browser settings, though blocking essential cookies may prevent you from signing in.

We retain Customer Data for as long as your account is active, and for a reasonable period afterward in case you reactivate or as needed for legal, accounting, or dispute-resolution purposes. You may request deletion of your account and associated Customer Data at any time by contacting us (see Section 11); we will delete or anonymize it within a commercially reasonable time, except where we are required or permitted to retain it (for example, financial records needed for tax purposes, or backups that age out on a routine schedule). How to ask for your account or field-app data to be deleted, and what is kept, is on our account deletion page.

We use administrative, technical, and physical safeguards designed to protect your information, including encrypted connections (HTTPS/TLS), access controls limiting who at Tanstone Technologies can access production data, and role-based permissions within the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can access, correct, or delete most Customer Data directly within the Service. Depending on where you live, you may have additional rights under applicable law — such as the right to request access to, correction of, or deletion of your personal information, or to object to certain processing. To exercise these rights, contact us at the email address in Section 11; we will respond consistent with applicable law. Company administrators are responsible for coordinating deletion or access requests from their own employees where the company, rather than Tanstone Technologies, controls that data.

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

Questions about this Privacy Policy, or requests regarding your information, can be sent to [email protected].

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice, such as by email or an in-app notice, before the changes take effect. The "Last updated" date above reflects the most recent revision.