Privacy Policy

• Account identity. Name, email, and the role assigned by your builder (builder or homeowner) when the builder invites you to a project.
• Authentication. AWS Cognito holds your email and a hashed credential. The portal does not see or store your password.
• Google sign-in.When a builder signs in with Google Workspace, BuilderView receives the person's name, email, Cognito sub, signed hd hosted-domain claim, and email_verified claim.
• Builder account records. Google sign-in creates a Cognito profile. BuilderView stores a Users row and project membership records in DynamoDB.
• Project content. Project addresses, lot identifiers, milestones, change orders, photos, thread messages, financial entries, and any documents uploaded or shared inside the portal.
• Notifications. Email address is used to deliver invite links, broadcasts, milestone reminders, and signing-in alerts. Mobile phone number is used only to deliver text messages a project manager sends or replies with about the homeowner's build. We do not share, sell, or provide a homeowner's mobile phone number or messaging consent record to third parties or affiliates for marketing or promotional purposes.
• Operational telemetry. Timestamps and anonymous route timings are collected by AWS CloudFront to operate and protect the service. We do not sell or share this data.

We use the information above to:

• Authenticate sign-ins and keep the portal secure.
• Use the Cognito sub as the stable BuilderView account ID for the Users record and project memberships.
• BuilderView uses the signed hd claim to match a builder's Workspace domain to its approved domain list, so an email suffix alone cannot grant access.
• Surface the right project, the right threads, and the right broadcasts to the right user.
• Deliver email and SMS notifications you or your builder triggers.
• Provide the financial summaries that the builder opts to share.
• Diagnose outages, debug crashes, and prevent abuse.

A homeowner agrees to text messages verbally, at the project kickoff call or the contract review, and a number is enrolled only if they say yes. Message frequency varies with the pace of the build. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help.

See also our SMS Messaging Program.

BuilderView is built on infrastructure operated by third parties. The table below lists what we use and what each processor handles. We require each processor to protect your data with the same rigor we apply ourselves, and we never sell your information.

Project content is retained for the lifetime of the build plus ninety days so the homeowner and builder have a transition window after keys are handed over. After that window, the data is archived or deleted according to Stone Brook Homes' internal records policy. Authentication logs (sign-in attempts, IP, user-agent) are retained for thirteen months for security review.

BuilderView removes Google builder profile records, including the Cognito profile, Users row, and project memberships, within 30 days after access ends unless law requires longer.

If you would like your project content retained longer or deleted sooner than the defaults above, contact us using the route in section 8 below.

If you are in the European Economic Area, the United Kingdom, California, or another jurisdiction with a data-protection regime, you have the right to:

• Request a copy of the personal data we hold about you.
• Ask us to correct inaccurate data.
• Ask us to delete data we no longer need.
• Opt out of any sale of personal information (we do not sell information, but you can confirm).
• Withdraw consent where consent is the legal basis for our processing.

Exercising one of these rights does not affect any processing that happened before your request, and we may decline a request where an exception applies (for example, retaining financial records we are legally required to keep).

All traffic to the portal is encrypted in transit (TLS 1.2+). Project content is encrypted at rest on Amazon S3. Access to project data by Stone Brook Homes personnel is logged and limited to the smallest set of people needed to keep the portal running. No system is invulnerable, and we will notify affected users without undue delay if we detect a breach of their personal data.

BuilderView stores a single short-lived session token in your browser's localStorage so the portal knows who you are between page loads. We do not use third-party advertising cookies, tracking pixels, or analytics that follow you across other websites.

To exercise any of the rights in section 5, or for any other privacy question, contact your builder on Stone Brook Homes. Operational requests — login trouble, missing data, update your phone number or email — should be sent to the portal support address listed in your invite.

See also our Terms of Service.