Skip to content
ProSite
← Back to home

Privacy Policy

Last updated: 27 June 2026

Draft for legal review. This document is a starting template generated for the ProSite marketing site. It must be reviewed and adapted by qualified legal counsel for your jurisdiction (and to reflect your actual data practices and sub-processors) before it is relied upon in production.

This Privacy Policy explains how ProSite("ProSite", "we", "us") collects, uses, discloses, and safeguards information when you visit https://prosites.app or use the ProSite mobile apps and web dashboard (together, the "Service"). By using the Service you agree to the practices described here.

1. Who we are & how the Service is structured

ProSiteis a multi-tenant operations platform for construction and architectural teams. Each customer organisation is a separate "workspace." For data your team enters into a workspace (projects, tasks, materials, schedules, shifts, team records), your organisation is the data controller and ProSite acts as a data processor on your instructions. For our marketing site and account administration, ProSite is the controller.

2. Information we collect

Information you provide

  • Account & profile details: name, work email, role, and language preference.
  • Workspace content: projects, tasks, progress notes, materials, schedules, shifts, and uploaded media.
  • Enquiries: information you submit through our contact form or by email.

Information collected automatically

  • Device and usage data (e.g. app version, pages viewed, approximate region) used to operate and improve the Service.
  • Essential cookies/local storage required for sign-in, sessions, and preferences (such as language).

Assumption to verify: confirm with engineering exactly which analytics, error-monitoring, and cookie technologies are deployed, and update this section (and any cookie banner) accordingly.

3. How we use information

  • To provide, secure, and maintain the Service and your workspace.
  • To authenticate users and enforce role-based access controls.
  • To respond to enquiries and provide customer support.
  • To improve features, reliability, and performance.
  • To send service and, where permitted, marketing communications (you can opt out of marketing at any time).
  • To comply with legal obligations and enforce our agreements.

4. Legal bases (EEA/UK)

Where applicable law (such as the GDPR) requires it, we rely on: performance of a contract; legitimate interests (operating and improving the Service); consent (for optional marketing and non-essential cookies); and compliance with legal obligations.

5. How we share information

We do not sell personal data. We share it only with: (a) service providers/sub-processors who host and support the Service under contract; (b) members of your own workspace, according to the permissions your administrators configure; (c) authorities where required by law; and (d) parties to a corporate transaction, subject to this Policy.

Assumption to verify: the Service is built on Supabase (database, authentication, storage) and is intended for deployment on cloud infrastructure. Maintain and publish an accurate list of sub-processors and their locations.

6. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for such transfers.

7. Data security

We apply technical and organisational measures appropriate to the risk. The platform isolates each workspace and enforces access at the database layer using row-level security, so users only access data permitted by their role and scope. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention

We retain workspace content for as long as your organisation maintains an active account, and thereafter as needed to comply with legal obligations, resolve disputes, and enforce agreements. Administrators can request deletion of workspace data subject to those obligations.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. For workspace content, please contact your workspace administrator first, as your organisation controls that data. To exercise rights regarding data we control, contact us at hello@prosites.app.

10. Children

The Service is intended for business use and is not directed to individuals under 16. We do not knowingly collect data from children.

11. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with an updated date and, where appropriate, provide additional notice.

12. Contact us

Questions about this Policy? Email hello@prosites.app.