Privacy Policy | DC Operations

1. Overview

This Privacy Policy explains how DC Operations (“DC Operations,” “we,” “us”) collects, uses, and protects information when you use our construction project-management platform (the “Service”). It applies to the account holders and users of workspaces on DC Operations.

2. Controller and Processor Roles

For the business data you enter into your workspace — such as your customers, jobs, estimates, and employees — you are the data controller and DC Operations acts as a data processor on your behalf, processing that data only to provide the Service. For your own account and how you use DC Operations, we act as the controller.

3. Information We Collect

Account information: your name, email, phone, company name, and password (stored encrypted).
Workspace data you enter: jobs, estimates, invoices, customers, subcontractors, time entries, documents, photos, and messages.
Payment information: processed by Stripe. We do not store full card numbers on our servers.
Usage and technical data: log data, device and browser information, and IP address, used to operate and secure the Service.

4. How We Use Information

To provide, maintain, and improve the Service
To authenticate users and keep each workspace’s data isolated and secure
To process subscriptions and payments
To send transactional messages (for example, invites, password resets, and billing notices)
To provide support and respond to your requests
To comply with legal obligations

We do not sell your personal information or your workspace data.

5. Multi-Tenant Isolation

DC Operations is a multi-tenant service. Each customer’s workspace is logically isolated so that one customer cannot access another customer’s data. Access is scoped to your organization on every request.

6. Service Providers (Sub-processors)

We use trusted third parties to run the Service. Each processes data only as needed to provide their function:

Supabase — database hosting
Vercel — application hosting
Stripe — subscription billing and payment processing
Resend — transactional email delivery
Cloudflare R2 — file and document storage
Pusher — real-time messaging
Anthropic — AI-assisted features (when used)
Intuit QuickBooks — optional accounting sync (only if you connect it)

7. QuickBooks Integration

If you choose to connect QuickBooks Online, DC Operations may access customer and invoice data within your QuickBooks account to synchronize it with your workspace. This data is used only for that synchronization and is handled in accordance with Intuit’s terms. You can disconnect the integration at any time.

8. Data Security

Data is transmitted over HTTPS and stored in a secured PostgreSQL database. Passwords are hashed. Access is restricted and scoped per organization. No method of transmission or storage is completely secure, but we work to protect your information using reasonable safeguards.

9. Data Retention

We retain workspace data for as long as your account is active. After cancellation, we may retain data for a reasonable period to allow export and recovery, then delete or anonymize it, unless a longer period is required by law.

10. Your Rights

Depending on where you are located, you may have rights to access, correct, export, or delete your personal information. Workspace administrators can manage most data directly in the app. For other requests, contact us and we will respond as required by applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact

Questions about privacy? Contact us at support@dcoperations.com.