Privacy Policy

This Policy explains how we collect, use, store, and share personal data when staff members, clients, vendors, subcontractors, and other authorized users access or use the Z Brothers App, its associated website, dashboards, portals, and related services.

This Policy applies to personal data processed through the Z Brothers web application, any associated mobile interface, account administration, project records, financial workflows, schedules, permits, file repositories, communications, approvals, daily logs, notes, audit trails, activity history, technical logs, and any public website operated by Z Brothers that links to this Policy.

This Policy does not apply to third-party websites or services that may be linked from the App. Those services are governed by their own privacy policies.

Z Brothers may act as a data controller or business for personal data that we collect and use for our own operational purposes, including account creation, authentication, platform security, service communications, troubleshooting, product improvement, and legal compliance.

When authorized company users enter project, client, vendor, subcontractor, financial, or other business data into the App, Z Brothers may act as a data processor or service provider, processing that data on behalf of and under the instructions of the company using the App.

The precise characterization of Z Brothers' role for a given dataset depends on the specific customer relationship, contract terms, and applicable law.

Account and profile data

• Full name, job title, role, company affiliation, email address, phone number, username, and account credentials. Passwords are stored in hashed form.
• Profile photo or avatar, if provided.

Authentication and access data

• Login timestamps, session identifiers, permission levels, role-based access assignments, password reset activity, and account recovery activity.

Project, job, client, vendor, and subcontractor data

• Project names, addresses, descriptions, status, schedules, client and contact information, vendor and subcontractor records, insurance records, bid requests and responses, purchase orders, bills, receivables, invoices, budget line items, cost codes, estimates, permits, inspections, leads, daily logs, field notes, and punch list items.

Communications, approvals, files, and audit history

• In-App messages, comments, notes, approval actions, status changes, workflow events, uploaded files, file metadata, version history, access logs, and audit trail records.

Device, browser, technical, cookie, and security data

• IP address, approximate geolocation derived from IP, browser and operating system details, device information, session duration, pages visited, feature usage, error logs, diagnostic information, failed login attempts, and suspicious activity records.
• Essential session cookies and similar technologies used to authenticate users, maintain login state, protect against cross-site request forgery, and support core platform functionality.

The App is not designed to collect sensitive personal information such as government-issued identification numbers, financial account credentials, health or medical data, biometric data, or precise real-time geolocation. Users should limit sensitive data entered into notes, files, or records to what is strictly necessary for project operations.

• Directly from users when they register, log in, create records, upload files, or interact with the App.
• Company administrators who invite users, assign roles, configure project settings, or import data.
• Clients, vendors, subcontractors, and project participants who are invited to access or contribute to the App.
• Spreadsheet templates, CSV files, and other import tools used by authorized users.
• System-generated events, including audit logs, security logs, and platform activity records.
• Third-party integrations, if a company configures the App to connect with external accounting, scheduling, or business systems.

We do not acquire personal data from data brokers or purchase contact lists for use within the App.

• To create and authenticate user accounts, manage role-based permissions, and provide project management, scheduling, daily log, permitting, document management, notification, approval, and reporting features.
• To process and track bids, purchase orders, bills, receivables, financial reports, budgets, cost codes, and related approval workflows.
• To detect and prevent unauthorized access, fraud, misuse, and security threats; monitor system health and performance; and investigate technical issues or support requests.
• To maintain business records required by accounting, tax, contract, legal, regulatory, or security obligations.
• To analyze aggregated or de-identified usage patterns to improve App features and user experience.

We do not use personal project data entered by users for advertising purposes or to train general AI models without separate notice and, where required, consent.

Where GDPR or equivalent data protection law applies, we rely on the lawful bases that fit the specific processing activity, including contract performance, legitimate interests, legal obligations, and consent where applicable. You may withdraw consent at any time where processing is based on consent.

We do not sell personal data. We do not share personal information for cross-context behavioral advertising.

• Within your organization, with authorized company staff, managers, administrators, and project team members who have been granted access through role-based permissions.
• With clients, vendors, subcontractors, and other project participants who are granted access to specific records or portals by company administrators.
• With technology and service providers that host, store, process, transmit, secure, monitor, or support the App, including cloud hosting, database, file storage, email delivery, notification, communication, logging, security, support, and payment processing providers where applicable.
• With attorneys, accountants, auditors, insurers, and financial advisors engaged by Z Brothers in the ordinary course of business.
• With government agencies, courts, law enforcement, or regulators when disclosure is required or permitted by law, legal process, or to protect rights, property, or safety.
• With prospective or actual parties to a merger, acquisition, financing, restructuring, or sale of all or part of the business or assets, subject to appropriate confidentiality obligations.

Z Brothers uses third-party technology providers to host, store, process, transmit, secure, and support the App. These providers are subject to contractual obligations that restrict their use of data to the services they provide to Z Brothers.

A current list of subprocessors and service providers is available upon request. Current infrastructure includes Amazon Web Services (AWS), with application hosting, database, file storage, and load balancing services used to operate the App.

We retain personal data for as long as necessary to operate the App, fulfill the purposes described in this Policy, meet legal and contractual obligations, resolve disputes, and maintain required business records.

• User account data is retained while the account remains active and for a reasonable period after closure to support transition, security, audit, legal, and export needs.
• Project records, financial documents, purchase orders, invoices, and related business records are retained for the period required by applicable accounting, tax, contract, and business record obligations.
• Security events, access logs, and audit trails are retained for a period reasonably necessary to support monitoring, incident investigation, and compliance.
• Backup data may persist for a limited period after deletion from primary systems before being overwritten or purged.
• Where litigation, regulatory inquiry, or other legal process requires, we may retain data beyond standard retention periods.

Where practical and legally permissible, data that is no longer required will be deleted or de-identified rather than retained indefinitely.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, destruction, and loss.

• Role-based access controls and permission management within the App.
• Authentication controls, session management, secure and HTTP-only session cookies in production, and account security monitoring.
• Logging, alerting, and monitoring of security-relevant events.
• Restricted access to application databases, file storage, and infrastructure based on operational need.
• Regular backups to support availability and recovery.
• Encryption in transit using HTTPS/TLS where configured for production traffic, and encryption-at-rest controls provided by cloud infrastructure and storage services where applicable.

No system is completely secure. If a data breach requires notification under applicable law, we will follow incident response procedures and notify affected parties as required.

Z Brothers is based in the United States, and personal data collected through the App is processed and stored primarily in the United States or in countries where our service providers operate. If you access the App from outside the United States, your personal data may be transferred to, processed in, and stored in a jurisdiction whose data protection laws differ from those in your location.

Where required by applicable law, including GDPR, we rely on appropriate safeguards such as data processing agreements, standard contractual clauses, or other lawful transfer mechanisms.

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, port, or withdraw consent for your personal data. You may also have a right not to be discriminated against for exercising privacy rights and a right to lodge a complaint with a privacy regulator.

To exercise a privacy right, submit a written request to info@zbrothersconstruction.com. We may need to verify your identity before processing the request. Some requests may be limited where records must be retained by law, are necessary to complete a business transaction, or affect the rights of other individuals.

If your request concerns data entered by a company using the App, such as your contact information in a vendor or project record, we may refer the request to the relevant company administrator because that company may independently control those project records.

This section applies to California residents where the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to Z Brothers.

We may collect identifiers, commercial information, internet or electronic network activity, professional or employment-related information, communications data, audit data, and documents or files uploaded by users. We collect this information from users, company administrators, project participants, automated system logs, and configured integrations.

We use and disclose this information for the business purposes described in this Policy. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

California residents may have rights to know, access, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and be free from discrimination for exercising these rights. Because we do not sell or share personal information for cross-context behavioral advertising, a sale/sharing opt-out is not presently applicable.

California privacy requests may be submitted by email to info@zbrothersconstruction.com. Authorized agents may submit requests on behalf of California residents, subject to proof of authorization and identity verification.

The App uses essential cookies and session technologies that are strictly necessary for authentication, login state, cross-site request forgery protection, security, and core platform functionality. These essential technologies cannot be disabled without preventing the App from operating properly.

We do not use advertising tracking cookies or serve targeted advertising through the App. If optional analytics, performance monitoring, or other non-essential tracking tools are implemented, we will update this Policy and provide any required notice or choice mechanisms.

The App is a business-to-business platform designed for use by construction professionals, company staff, vendors, subcontractors, and other authorized business users. It is not directed to children under 13 or the applicable age of digital consent, and we do not knowingly collect personal data from children.

If we become aware that a child's data has been submitted to the App, we will take steps to delete that data where required by law.

Companies that subscribe to or use the App through a business account have significant control over user and project data within the platform. Company administrators can invite, configure, suspend, and deactivate user accounts; assign permissions and project access; view, edit, and delete project records; export data; and request account closure or data deletion through applicable business processes.

If you are an individual user, subcontractor, vendor, or contact whose data was entered into the App by a company using our services, your primary point of contact for access or removal requests relating to that company's project records is the company administrator. We will assist in redirecting requests as appropriate.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operations. When we make updates, we will revise the "Last updated" date at the top of this Policy.

For material changes that significantly affect how we collect, use, or share personal data, we will provide notice through the App, by email to registered users, or by other reasonable means prior to the change taking effect where required by law.