This Privacy Policy explains how True Site Sync (“True Site Sync”, “we”, “us”, or “our”) collects, uses, stores, shares and protects your information when you use our construction-management software available at truesitesync.com, our web application, and our desktop and Android apps (together, the “Service”). By using the Service you agree to this Policy.
On this page
1. What we collect 2. How we use it 3. Where it's stored 4. Sharing & sub-processors 5. Security 6. Retention 7. Your rights 8. Local storage & cookies 9. Children 10. Changes 11. Contact1. Information we collect
a. Account information
When you create an account, we collect your name and email address. If you sign in with Google, we receive your name, email and profile identifier from Google — we do not receive your Google password.
b. Business data you enter
The Service stores the construction-business data you and your team create, including projects, clients and vendors, measurement sheets, abstracts and RA bills, invoices and estimates, purchase records, inventory and materials, labour and attendance, equipment logs, and any drawings or documents you upload.
c. Payment information
Subscription payments are processed by our payment provider, Razorpay. We do not collect or store your full card, UPI or bank details on our servers — those are handled directly by Razorpay under their own privacy policy.
d. Technical & diagnostic data
To keep the Service reliable we collect limited technical information such as app version, browser/device type, and error reports (error message, page, and timestamp) when something goes wrong.
2. How we use your information
- To provide, operate and sync the Service across your devices and your team.
- To authenticate you and secure your account.
- To process subscription payments (via Razorpay).
- To provide support and respond to your requests.
- To detect, diagnose and fix errors and improve reliability.
We do not sell your personal information or your business data, and we do not use it for advertising.
3. Where your data is stored
Your data is stored in the cloud using Supabase (database, authentication and file storage), hosted on Amazon Web Services infrastructure in the Asia-Pacific (Tokyo) region. Each organization's data is isolated at the database level using row-level security, so members of one company cannot access another company's data. For offline use, a copy of your working data is also cached locally on your device.
4. Sharing & sub-processors
We share data only as needed to run the Service. Your business data is visible to the members of your own organization/team whom you invite. We use the following sub-processors:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication, and file storage |
| Optional “Sign in with Google” authentication | |
| Razorpay | Subscription payment processing |
| GitHub Pages | Hosting of the website and web app |
We may also disclose information if required by law, or to protect our rights, users, or the public.
5. Security
We protect your data with encryption in transit (HTTPS), organization-level access controls and row-level security, and authenticated access. No system is perfectly secure, but we take reasonable measures to safeguard your information. Please keep your login credentials confidential.
6. Data retention
We retain your data for as long as your account is active. Deleted records are moved to a Recycle Bin from which you can restore or permanently remove them. If you close your account or ask us to delete your data, we will delete or anonymise it within a reasonable period, except where we must keep it to meet legal or accounting obligations.
7. Your rights
You may access, correct, export or delete your data:
- Access & correct — most data can be viewed and edited directly in the app.
- Export — you can export a full backup of your data from Settings → Backup.
- Delete — you can delete records in-app, or email us to delete your account and associated data.
To exercise any right, contact us at info@truesitesync.com.
8. Local storage & cookies
The Service uses your browser's local storage and IndexedDB to keep your data available offline and to store your authentication session. We do not use third-party advertising or tracking cookies.
9. Children
The Service is intended for business use and is not directed to individuals under 18. We do not knowingly collect data from children.
10. Changes to this Policy
We may update this Policy from time to time. When we do, we will change the “Last updated” date above and, for material changes, notify you within the app or by email.