Privacy Policy

1. About this policy

Tribuild Consultancy LLC and its affiliated Tribuild entities (collectively, "Tribuild," "we," "us," or "our") respect your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information in connection with:

• Our websites, including tribuildconsultancy.com and tribuildconsultancy.pk;
• Tribuild Schedule, including its web application and its iOS and Android mobile apps;
• Client accounts, trial runs, inquiries, call bookings, and project communications;
• Our estimating, takeoff, drafting, submittal, bid administration, and related support services; and
• Applications submitted through our careers website.

"Personal information" means information that identifies, relates to, or can reasonably be linked to an individual. Project and company information may contain personal information, even when it is supplied for business purposes.

For client relationships, the Tribuild entity named in your service agreement or invoice is responsible for its own processing. For recruitment, the entity recruiting for the position is responsible. Contact us using Section 16 if you need help identifying the responsible entity. The Tribuild Schedule iOS app is published on the App Store by our technology partner, Boltout LLC, on Tribuild's behalf; Tribuild remains responsible for the personal information processed through the app. Processing of Tribuild's own employees' information is covered by separate employee notices where applicable.

2. Information we collect

The information we collect depends on how you interact with us and which features you use.

Contact, account, and company information

We collect information you provide when you contact us, request a trial run, book a call, use an account we create for you, or engage our services. This may include your name, business email, telephone number, job title, company name, business address, login credentials, account role and permissions, and preferences.

Tribuild Schedule accounts are created by Tribuild administrators. There is no public sign-up.

Project, scheduling, and service information

We collect information you or your organization submit, or authorize us to access, so we can perform the services. This may include project names and locations, bid dates, deadlines, schedules, assignments, project contacts, scope requirements, drawings, specifications, addenda, takeoffs, estimates, pricing, proposals, submittals, attachments, comments, messages, review records, and deliverables.

We also keep service usage and account administration records, such as project counts, square-footage allocations, time records, assigned capacity, delivery status, revisions, approvals, and billing-related usage.

Messages and files in Tribuild Schedule

Tribuild Schedule includes chat between your team and Tribuild. We store the messages you send, the chat rooms you belong to, read status, and files you attach. Files attached in chat are stored in Tribuild's Dropbox business account.

Billing and transaction information

We collect billing contacts, invoice information, transaction references, payment status, and information needed to reconcile payments. Where you pay through a payment provider such as Stripe, that provider collects and processes the payment details you enter under its own privacy notice, and we receive only the transaction and billing information needed to administer your account. Do not send complete card numbers, security codes, or online banking passwords to Tribuild by email or through project messages.

Communications and support information

We collect inquiries, feedback, support requests, email correspondence, and information you provide during service discussions. If you book a call through our website, we create a calendar invitation and video meeting link with Google Calendar and Google Meet. If a call or meeting will be recorded, we give notice and obtain consent where required.

Device, activity, and diagnostic information

Websites. When you visit tribuildconsultancy.com, our analytics provider, PostHog, collects your IP address, browser and device type, pages viewed, links and buttons clicked, referring website, campaign (UTM) parameters, and errors. We also use PostHog session recording, which records how you interact with our pages, including text you type into our inquiry and contact forms (password fields are always masked). We use this to understand how visitors use the site and to fix problems that stop forms from being submitted. Our website also stores campaign and referral information in your browser's local storage so it can be included with any inquiry you submit.

Tribuild Schedule web application. We use Sentry to collect error and crash reports, which can include your browser and device type, the page in use, and technical details of the error.

Tribuild Schedule mobile apps. When you allow notifications, the app registers a push notification token with Google Firebase Cloud Messaging and sends it to our servers together with a random identifier generated for that installation and the device platform (iOS or Android), so we can deliver notifications to your device. Our servers also record technical information such as your IP address and access times when the app connects to them. The mobile apps do not contain advertising or third-party analytics tools.

Recruitment information

If you apply for a position, we collect your name, email address, resume, and the education, employment history, qualifications, contact details, and other information you provide during recruitment. We may receive information from references or recruitment providers where lawful and appropriate. Any additional checks or sensitive information are subject to the notices and permissions required by law.

Please provide only information relevant to the service or application. Do not upload government identification, health information, biometric information, or other sensitive personal information unless we specifically request it through an appropriate process.

3. Sources of information

We receive personal information directly from you; from your employer, account administrator, colleagues, or authorized project participants; from project materials and systems you authorize us to access; from payment and service providers; and automatically through our websites and applications. We may also receive business contact information through referrals, professional communications, and publicly available business sources.

If you provide another person's information, you must have authority to do so and give any notices required by applicable law.

4. How we use information

We use personal information to:

• Respond to inquiries, arrange calls, and administer trial runs;
• Create, authenticate, maintain, and secure accounts;
• Manage project intake, scheduling, assignments, deadlines, communications, reviews, and delivery;
• Provide chat and send notifications about messages and project updates in Tribuild Schedule;
• Perform the agreed services and provide customer support;
• Measure service usage, manage capacity and allocations, issue invoices, and reconcile payments;
• Prepare internal reports for authorized Tribuild staff about project activity, workload, and billing;
• Diagnose issues and improve service reliability, usability, and quality;
• Assess applications, communicate with candidates, and administer recruitment;
• Send service notices and, where permitted, relevant business communications;
• Prevent unauthorized access, fraud, misuse, and other security incidents; and
• Comply with legal obligations, maintain necessary records, and establish, exercise, or defend legal claims.

Where applicable law requires a legal basis, we rely on performance of a contract or steps you request before entering into a contract, compliance with legal obligations, our legitimate interests in operating, improving, and securing our business (balanced against your rights), or your consent where required. Where processing relies on consent, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

Artificial intelligence

Some internal Tribuild tools use OpenAI's API. For example, authorized Tribuild staff can ask an internal reporting assistant questions about client project activity, project counts, and billing, and the relevant records are sent to OpenAI to produce the answer. These tools are used only by Tribuild staff for agreement-related purposes. We do not use your project materials or messages to train AI models, and we do not authorize our AI provider to do so.

5. Client-controlled information and organization accounts

For account administration, billing, recruitment, and our own business communications, Tribuild generally determines the purposes of processing.

Where we process personal information contained in client project materials solely on a client's instructions, we act as that client's service provider or processor to the extent applicable law recognizes that role. The client's instructions, the applicable agreement, and any required data processing agreement govern that processing.

If your organization's account is administered by Tribuild or your organization, authorized administrators may manage your access and view information within the permissions assigned to them. Project information and chat messages are visible to the authorized users in that project or chat and to Tribuild personnel assigned to deliver or support the services. Sharing or exporting information to another recipient makes that information available to the recipient.

Requests concerning client-controlled project information may need to be directed to the relevant organization. We will assist that organization as required by law and our agreement.

This policy does not transfer ownership of client materials or deliverables, expand project access permissions, or replace contractual confidentiality obligations.

6. When we disclose information

We disclose personal information only as appropriate for the purposes described in this policy:

• Within your account or project: to authorized administrators, users, and recipients involved in your workflow.
• To our delivery and support teams: to employees, affiliated Tribuild companies and delivery offices, contractors, and advisers who need access to perform, review, manage, or support the services, subject to appropriate confidentiality and access restrictions.
• To service providers: who process information on our behalf for hosting and data storage; file storage (Dropbox); email delivery (Resend and our email providers); call scheduling (Google Calendar and Google Meet); push notifications (Google Firebase Cloud Messaging); website analytics and session recording (PostHog); error reporting (Sentry); AI-assisted internal reporting (OpenAI); payment processing; and support. Providers acting on our behalf are bound by contractual restrictions and data protection obligations.
• At your direction: when you authorize an integration, export, disclosure, or communication.
• For legal and security purposes: where required by law or reasonably necessary to protect rights, investigate misuse, respond to lawful requests, or establish or defend claims, subject to applicable legal restrictions.
• For a business transaction: in connection with a proposed or completed merger, acquisition, restructuring, or transfer of business assets, subject to appropriate confidentiality safeguards and legally required notices.

We do not sell personal information, and we do not use or disclose personal information for targeted (cross-context behavioral) advertising. Our websites and apps do not use advertising cookies or advertising pixels. Client project information remains subject to our confidentiality obligations, and this policy does not authorize disclosure to other clients for their own use.

7. Cookies and similar technologies

Our websites and the Tribuild Schedule web application use cookies, local storage, and similar technologies for:

• Essential functions: sign-in, session management, security, and remembering your display preferences.
• Analytics: PostHog cookies and local storage on tribuildconsultancy.com to measure visits, understand how pages are used, and support session recording as described in Section 2.
• Campaign attribution: local storage on tribuildconsultancy.com that remembers the campaign or website that referred you, so it can be included with your inquiry.

We do not use advertising cookies. You can block or delete cookies and local storage through your browser settings. Blocking essential storage may stop sign-in or other features from working. Where applicable law requires consent for optional technologies, or requires us to recognize a browser-based privacy preference signal, we comply with those requirements.

8. Mobile permissions, notifications, and integrations

The Tribuild Schedule mobile apps request only the following:

• Notifications: to alert you about new chat messages and project updates. You can turn notifications off at any time in your device settings or when the app first asks.
• Files: when you choose to attach a file to a chat, the app opens your device's file picker and uploads only the file you select. The app does not access your other files.

The apps do not request access to your location, contacts, camera, microphone, or photo library, and do not use advertising identifiers. Your sign-in token is stored in your device's secure storage (iOS Keychain or Android Keystore).

Denying a permission may limit the related feature. Uninstalling the app does not, by itself, delete your account or information held on our servers; see Section 10.

If you choose to connect a third-party service, we access information within the permissions you authorize to provide the connected functionality. You can revoke access through the relevant service or available account controls. Revoking a connection does not automatically delete information previously imported; you may request deletion as described below.

9. International processing

Tribuild operates internationally. Authorized delivery and support personnel in Pakistan may access information relating to US client engagements. Information may also be processed in the United States and other countries where Tribuild entities or our service providers operate, including the United Arab Emirates where applicable to your engagement.

Privacy laws differ between countries. Where applicable law requires safeguards for international transfers, we use the required lawful transfer mechanism and contractual or other protections. Contact us for information about safeguards relevant to your personal information. Using our services is not treated as blanket consent to transfers that require a separate legal mechanism.

10. Retention and deletion

We keep personal information only for as long as reasonably necessary for the purposes described in this policy. How long depends on the kind of information:

• Account and profile information is kept while your account is active, and deleted or anonymized after the account is closed, unless we need to keep it for one of the reasons below.
• Project records, messages, and files are kept for the duration of the client relationship and as required by the client agreement, because they form part of the client's project history.
• Billing and transaction records are kept for as long as required by tax, accounting, and other legal recordkeeping obligations.
• Website analytics and session recordings are kept only as long as needed to analyze site usage and resolve problems, in line with our analytics provider's retention settings.
• Push notification tokens are deleted when you sign out of the app, and replaced when your device issues a new token.
• Recruitment records are kept for the duration of the recruitment process and for a reasonable period afterward, unless you ask us to delete them sooner or the law requires otherwise.
• Security logs and backups are kept for limited periods and overwritten on a rolling basis.

When information is no longer needed, we delete or anonymize it, subject to lawful retention exceptions and the scheduled expiry of backups. Information we must retain stays protected and is used only for the reason it was retained.

Deleting your account. Tribuild Schedule accounts are created and managed by Tribuild, so there is no self-service sign-up or deletion in the app. To request deletion of your account and associated personal information, email hello@tribuildconsultancy.com with the subject "Privacy Request — Account Deletion," or ask your Tribuild contact. We may verify your identity and authority before acting.

Deleting an individual user account does not necessarily delete organizational project records that a client lawfully continues to control. Where those records contain your personal information, we assess the request with the client and delete, de-identify, or retain the information only as permitted by law. Account deletion does not by itself cancel a separate service agreement or remove accrued payment obligations, and payment disputes do not remove statutory privacy rights.

11. Security

We use reasonable technical and organizational safeguards appropriate to the information and the risks, including:

• Encryption of data in transit between our apps, websites, and servers (HTTPS);
• Role-based access controls, so users and staff see only the information their role permits;
• Secure storage of sign-in tokens on mobile devices; and
• Confidentiality obligations for our personnel and service providers.

No internet service, storage system, or transmission method can be guaranteed completely secure. Protect your credentials, use the security features available to you, and promptly report suspected unauthorized access to hello@tribuildconsultancy.com. We respond to security incidents and provide notifications where required by applicable law.

12. Your choices and privacy rights

Depending on your location, our role, and applicable law, you may have rights to request access to or a copy of personal information, correction, deletion, portability, restriction of processing, objection to certain processing, withdrawal of consent, or an opt-out of sale, targeted advertising, or certain profiling where relevant. Some laws also give you a right to appeal a refusal and to complain to a privacy regulator.

Send requests to hello@tribuildconsultancy.com with the subject "Privacy Request." Tell us which website or application the request relates to and what you are asking for. We may ask for proportionate information to verify your identity and authority, including for an authorized agent. We respond within applicable legal deadlines, explain any lawful refusal or limitation, and do not discriminate against you for exercising your rights. If an appeal right applies, reply with the subject "Privacy Appeal," and we will provide the outcome and any further escalation options.

You can unsubscribe from marketing emails using the link provided or by contacting us. Necessary account, security, billing, and service communications may continue. Notification preferences and device permissions can be managed in your device settings.

13. Children

Our services and Tribuild Schedule are intended for adult business users and are not directed to children under 18. We do not knowingly collect children's personal information. If you believe a child has provided us with personal information, contact us so we can investigate and take appropriate action.

14. Third-party services

Third-party websites, payment pages, app stores, and services have their own privacy practices, and their notices govern their independent processing. Where we engage a provider to process information on our behalf, our responsibilities and contractual safeguards continue to apply.

15. Changes to this policy

We may update this policy to reflect changes in our services, practices, or legal requirements. We will publish the revised version on this page with an updated date and provide additional notice of material changes where required. Where a change requires your consent, we will obtain it before applying the change.

16. Contact us

Tribuild Consultancy LLC — Privacy Requests

• Email: hello@tribuildconsultancy.com
• Mail: 5203 Juan Tabo Blvd. NE, Suite 2b, Albuquerque, New Mexico 87111, United States
• Websites: tribuildconsultancy.com and tribuildconsultancy.pk

For Pakistan recruitment or another affiliated entity, tell us the position, entity, or service involved so your request reaches the right team.