Legal
Privacy Notice
Last updated: September 2026
1. Who we are
BuildCommand is a construction project management service provided by Yaumar Williams, trading as BuildCommand (the "seller", "we", "us"). We act as the data controller for the personal data described in this notice. You can reach us through the contact page on this website.
2. Personal data we collect
Account information: full name, email address, password (stored only as a secure hash), phone number and job title you enter when creating an account. Company information: your company's name, type, size and accounting setup. Content you add: projects, estimates, budgets, daily logs, documents, photos, messages and other records you create in the service. Support messages: details you send when you contact us or request a demo. Technical data: IP address, device and browser type, and basic usage events needed to operate and secure the service. Payment card details are collected and processed by our payment partner, Paddle, and are never stored on our systems.
3. Why we use it and our legal basis
To create and run your account and provide the service (performance of our contract with you). To secure the service, prevent fraud and abuse, and keep audit records (our legitimate interests). To improve and develop the product (our legitimate interests). To respond to your requests and provide support (performance of contract / legitimate interests). To send optional product or marketing messages, which you can opt out of at any time (your consent or our legitimate interests). To meet legal obligations such as accounting and tax records (legal obligation).
4. Who we share it with
We share personal data with: service providers that host and operate the service (cloud hosting, database, file storage and email delivery) under confidentiality obligations; Paddle.com, our Merchant of Record, which processes purchases, subscriptions, payments, tax and invoicing on our behalf and acts as an independent controller for those operations; professional advisers such as accountants and lawyers where needed; and authorities where we are required to by law. We do not sell your personal data.
5. International transfers
Some of our service providers are located outside the UK/EEA. Where data is transferred internationally we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.
6. How long we keep it
We keep your data for as long as your account is active and as needed to provide the service. When it is no longer needed — for example after account closure plus any period required for legal, tax or accounting obligations — we delete or anonymise it.
7. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data; to restrict or object to processing; to receive a portable copy of your data; and to withdraw consent where we rely on it. You can exercise these rights by contacting us, and we will respond within one month. If you are in the UK or EEA you may also complain to your local data protection authority.
8. Security
We use appropriate technical and organisational measures — including encryption in transit, access controls, and row-level access rules that isolate each company's data — to protect your personal data. No system is perfectly secure, and we encourage you to use a strong unique password and keep your credentials confidential.
9. Cookies
We use essential cookies and browser storage to keep you signed in and operate the service. We do not use third-party advertising cookies. You can control or delete cookies through your browser settings, though essential cookies are required for the app to work.
10. Changes
We may update this notice from time to time. Material changes will be flagged on this page with an updated date.