Privacy Policy

SpecFunnel, LLC ("SpecFunnel," "we," "us," or "our") respects the privacy of our users ("you," "your," "Customer," or "Authorized User"). This Privacy Policy outlines what information we collect, how we use it, and your rights regarding that information.

This Privacy Policy applies to all websites operated by SpecFunnel, and our applications and services (collectively, the "Service" or "Services"), including trial and paid subscriptions. By using our Services, you expressly agree to the collection, storage, use, processing, and disclosure of your information as described in this Privacy Policy.

1. Information We Collect

We collect information to provide, improve, and personalize our Services. Some information is provided by you directly, and some is collected automatically through your use of our Services.

Information You Provide

• Account Information: Name, email address, company name, phone number, and other contact data provided during registration.
• Credentials: Passwords and authentication information used for account access and security.
• Payment Data: Payment instrument information (such as credit card numbers) necessary to process purchases. Payment processing is handled by third-party processors (e.g., Stripe); we do not store full payment card details.
• Customer Content: Construction documents, specifications, plans, drawings, inspection reports, and any other content uploaded to the Service.
• Communications: Messages, feedback, and support requests you send to us.

Information Collected Automatically

• Usage Data: Information about how you interact with our Services, including features used, frequency and duration of use, pages visited, and project activity.
• Device Information: IP address, browser type, operating system, device identifiers, and regional/language settings.
• Log Data: Server logs recording web requests, timestamps, referring URLs, and performance data.
• Location Data: Approximate location inferred from your IP address.

2. Cookies and Tracking Technologies

We use cookies and similar technologies to personalize your experience, analyze usage, and improve our Services. Cookies are small text files stored on your device.

Types of cookies we use:

• Necessary Cookies: Required for the Service to function properly (authentication, security, payment processing).
• Analytics Cookies: Help us understand how visitors interact with our Services to improve performance and user experience.
• Preference Cookies: Remember your settings and preferences.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing, operating, and maintaining our Services
• Processing transactions and managing your account
• Improving, personalizing, and developing new features and services
• Training and refining the machine learning and artificial intelligence models utilized by the Services
• Providing customer support and responding to inquiries
• Communicating with you about updates, promotions, and service-related notices
• Analyzing usage patterns and generating aggregate reporting
• Ensuring security and preventing fraud
• Complying with legal obligations and enforcing our legal rights

4. How We Use Customer Content

Customer Content (including construction specifications, plans, drawings, and inspection data) uploaded to our Services is used to:

• Provide the Services you have requested (e.g., generating ITP logs, extracting test requirements)
• Improve and enhance the accuracy and capabilities of our AI models and algorithms
• Develop new features and services

We may use Customer Content to train and improve our machine learning models. When used for model improvement, data is processed in aggregate and in a manner designed to protect the confidentiality of individual customer projects. You retain ownership of your Customer Content at all times.

5. Third-Party Sub-Processors

To provide our Services, Customer Content and Customer Data may be processed by the following third-party sub-processors. Each sub-processor is bound by contractual obligations to protect your data:

• OpenAI — AI processing and natural language analysis of uploaded construction documents. Customer Content (specifications, plans, drawings) is transmitted to OpenAI's API for extraction and analysis.
• Supabase — Database hosting, file storage, and backend infrastructure. Customer Content and Customer Data are stored on Supabase infrastructure.
• Clerk — User authentication and identity management. Account credentials and session data are processed by Clerk.
• Stripe — Payment processing. Payment instrument data is processed by Stripe; SpecFunnel does not store full payment card details.
• Render — Application hosting and background processing infrastructure.

By using our Services, you acknowledge and consent to the processing of your data by these sub-processors. We will update this list if we add or change sub-processors and will notify you of material changes. Each sub-processor's own privacy policy and terms govern their handling of data.

6. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Sub-Processors: With the third-party sub-processors listed in Section 5 above, as necessary to provide the Services.
• Service Providers: With additional third-party vendors who assist in providing our Services (analytics, customer support), subject to confidentiality obligations.
• Legal Compliance: When required by law, regulation, legal process, or governmental request.
• Protection of Rights: To protect the rights, property, or safety of SpecFunnel, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
• Aggregated Data: We may share anonymized and aggregated data that does not identify any individual for analytics, research, and industry insights.

7. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where SpecFunnel, its affiliates, or service providers operate. By using our Services, you consent to such transfers. We will take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

8. Data Retention

We retain your personal information for as long as your account is active, as necessary to provide our Services, or as required to comply with legal obligations, resolve disputes, and enforce our agreements. Upon termination of your account, you will have thirty (30) days to export your Customer Content. After this 30-day period, SpecFunnel may permanently delete Customer Content from the Service. When your data is no longer needed, we will securely delete or de-identify it. If we de-identify information, we will not attempt to re-identify it and will maintain and use the information in de-identified form only.

9. Data Breach Notification

In the event of a security breach that results in unauthorized access to, or disclosure of, your personal information, SpecFunnel will notify affected users without unreasonable delay. Notification will be provided via email to the address associated with your account and, where required by applicable law, to the relevant supervisory authorities. The notification will include: (a) a description of the nature of the breach; (b) the categories and approximate number of individuals and records affected; (c) the likely consequences of the breach; and (d) the measures taken or proposed to address the breach.

10. Controller vs. Processor

SpecFunnel acts as a data controller when we collect your account information, usage data, and other personal information for our own purposes (providing the Service, marketing, analytics).

SpecFunnel acts as a data processor when we process Customer Content on behalf of a Customer (e.g., when a company admin uploads construction documents or adds team members to a project). In these cases, the Customer is the data controller and SpecFunnel processes data according to the Customer's instructions. If your data has been submitted to SpecFunnel by a Customer and you wish to exercise your privacy rights, please contact the Customer directly. We will assist the Customer as needed in responding to your request.

11. Your Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information. SpecFunnel will not discriminate against you for exercising any of these rights.

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction (Rectification): Request correction of inaccurate or incomplete personal information.
• Right to Deletion (Erasure): Request deletion of your personal information, subject to legal retention requirements.
• Right to Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format (e.g., CSV or JSON), and request that we transmit it to another service provider where technically feasible.
• Right to Restrict Processing: Request that we limit the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
• Right to Object: Object to the processing of your personal data where we rely on legitimate interests as the legal basis, based on grounds related to your particular situation. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Opt-Out of AI Training: You may opt out of having your Customer Content used to train our AI models by emailing info@specfunnel.com with the subject line "Do Not Train on My Data." The opt-out applies to future uploads only; data already incorporated into trained models prior to your request cannot be retroactively removed.
• Right to Opt-Out of Marketing: Opt out of marketing communications at any time by using the unsubscribe link in our emails or by contacting us.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in your jurisdiction.

Exercising Your Rights

To exercise any of these rights, please email info@specfunnel.com. Please include your full name, the email address associated with your account, and a detailed description of your request.

Identity Verification

Before fulfilling your request, we must verify your identity to protect your data from unauthorized access. We will match the information you provide (name, email, account details) against our records. In some cases, we may request additional information to complete verification. If we cannot verify your identity after a good-faith attempt, we may deny the request and explain the basis for the denial.

Authorized Agents

You may designate an authorized agent to submit privacy requests on your behalf. Authorized agents must provide proof of authorization (such as a signed written permission or power of attorney) in their initial communication. We may also require that you directly verify your identity and confirm the agent's authority. We will respond to all verified requests within 30 days (or 45 days for CCPA requests, as permitted by law).

12. GDPR Compliance

For users in the European Economic Area (EEA) and the United Kingdom, we comply with the General Data Protection Regulation (GDPR). We process personal data based on the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you (providing the Service).
• Legitimate Interests: Processing necessary for our legitimate business interests (improving the Service, security, analytics), where those interests are not overridden by your rights.
• Consent: Where you have given explicit consent to specific processing activities (e.g., marketing communications).
• Legal Obligation: Processing necessary to comply with applicable laws.

You have the right to lodge a complaint with your local data protection authority. Contact details for EEA data protection authorities are available at edpb.europa.eu.

12. California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents have the following rights:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: SpecFunnel does not sell personal information in the traditional sense (i.e., for money). However, the use of Customer Content to train AI models may constitute "sharing" under the CCPA/CPRA. You may opt out of this use by emailing info@specfunnel.com with the subject line "Do Not Train on My Data." If you opt out, future Customer Content uploads will only be used to provide the Service and will not be used for model training purposes. Data already incorporated into trained models prior to your request cannot be retroactively removed. We do not sell or share personal information of individuals we know to be under 16 years old.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise any of these rights, please email info@specfunnel.com with the subject line "California Privacy Rights Request." We will verify your identity and respond within 45 days.

14. Security

We implement reasonable technical and organizational security measures to protect your personal information from unauthorized access, use, alteration, or disclosure. These measures include encryption, access controls, and regular security reviews. We also contractually require that our sub-processors and service providers protect your data using reasonable security procedures appropriate to the nature of the information.

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security. You are responsible for protecting your own login credentials, passwords, and personal devices used to access the Service. If you become aware of any unauthorized use of your account, please notify us immediately.

Vulnerability Reporting

If you discover a security vulnerability in our Service, we encourage responsible disclosure. Please report any vulnerabilities to info@specfunnel.com with the subject line "Security Vulnerability Report." We will acknowledge receipt and investigate promptly.

15. Children's Privacy

Our Services are not directed to children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at info@specfunnel.com.

16. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a notice on our Services. The revised policy will be effective immediately upon posting. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

18. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

SpecFunnel, LLC
Email: info@specfunnel.com
Phone: (858) 525-2171