Your content remains yours.
Your project records, uploaded files, budgets, line items, change orders, billings, signatures, and related documents remain your data. Buildwell uses that information to provide, maintain, secure, and improve the service.
We do not sell your personal information.
Buildwell does not sell your personal information to third parties. We may share information with project collaborators you invite, service providers needed to operate the product, or where required by law.
Billings are records, not payment capture.
Buildwell can help you prepare and share billing records with customers or participants you invite. Payment is handled off platformthrough the project's existing process. Buildwell isn't a payment processor and isn't replacing your bank or lender funding process.
Security basics.
Buildwell uses technical and organizational measures to protect information, including encryption of data in transit and at rest, secure authentication with session management, access controls, audit logging, monitoring, and security assessments.
No internet service can guarantee absolute security. The goal is to use appropriate safeguards and be clear about how project access works.
Customer links are designed for low-friction approval.
Buildwell approval links let customers and participants complete simple actions without creating an account. Each link uses one of two patterns depending on the action:
- Opaque, server-validated tokens — short random tokens stored in our database (e.g., billing review links, change-order approval). Verifying a link requires a server lookup, so revoking the row revokes the link instantly.
- HMAC-signed payload tokens— used where a link needs to carry minimal context with it (e.g., bid requests, T&M update links, document upload links). The payload is URL-safe encoded and signed with a server secret; tampering is detected on verification.
Both patterns scope the link to a specific action or project, carry an expiration, and can be revoked or regenerated by the owner at any time. They're designed for one-tap actions and should only be sent to people who should review, sign, or complete the related project item.
Participants only see what they are invited to access.
Project collaborators, contractors, and customers see the project information and actions they were invited to access. Buildwell makes it clear who is being invited, what they can do, and what they can see — both at invite time and inside the project.
Uploaded documents are used to provide the service.
Uploaded files such as receipts, photos, PDFs, estimates, and project documents are used to help provide Buildwell features like change documentation, billing support, audit packets, and project collaboration.