Privacy Policy

1. Introduction

SpecInspect LLC (“SpecInspect,” “we,” “us”) operates a construction specification intelligence platform at specinspect.com. This Privacy Policy explains how we collect, use, and protect information from users of our web app, iOS app, and API. By creating an account or using the service, you agree to this policy.

2. Data We Collect

• Account information: Your email address, name, and password (stored as a bcrypt hash — we never store your plaintext password) when you register.
• Usage data: Search queries, pages visited, products saved to projects, and feature usage — used to improve the service and product database.
• Payment method type: Stripe processes all card transactions. We receive a payment method type (e.g., “Visa ending in 4242”) and subscription status — your card number never touches our servers.
• Device and browser info: IP address, browser type, and operating system, collected via server logs for security and debugging purposes.
• Location: If you use the weather / apply-check feature, your ZIP code or GPS coordinates are sent to retrieve weather data. We do not store precise location beyond the duration of the request.

3. Cookies

We use a single session cookie named si_token to keep you authenticated. It is:

• HttpOnly — cannot be accessed by JavaScript running in your browser.
• Secure — transmitted only over HTTPS in production.
• SameSite: Lax — protects against cross-site request forgery.
• Expires on logout — or after 30 days of inactivity.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Local preferences (recent searches, compare tray) are stored in your browser's localStorage and never leave your device.

4. Third-Party Services

• Stripe — payment processing for Pro subscriptions. Stripe's privacy policy is available at stripe.com/privacy.
• Cloudflare — CDN and DDoS protection. Traffic routes through Cloudflare's network. See their privacy policy at cloudflare.com/privacypolicy.

We do not sell your data to or share it with any other third parties for marketing purposes.

5. How We Use Your Data

• Account authentication and security.
• Delivering and improving the product search, compare, and submittal features.
• Improving product database accuracy and coverage based on aggregate usage patterns.
• Sending transactional emails: password resets, subscription receipts, and important account notices. We do not send marketing emails without your explicit opt-in.

6. Data Retention

Account data (name, email, projects, saved specs) is retained while your account is active. Server logs are retained for 90 days. If you delete your account, your personal data and projects are deleted within 30 days. Anonymized, aggregated usage statistics may be retained indefinitely.

7. Your Rights

• Access: View your account information on the Account page.
• Deletion: Delete your account in Account settings — this removes your data within 30 days.
• Correction: Contact privacy@specinspect.com to correct any inaccurate data.
• Portability: Contact us to request an export of your account data.

8. Children

SpecInspect is not directed at users under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email and/or by posting a prominent notice on the site at least 14 days before the change takes effect. Continued use of the service after that date constitutes acceptance of the updated policy.

10. Contact

Questions or requests regarding this policy: privacy@specinspect.com