Privacy Policy

We collect information you provide directly, and a small amount your browser reveals by connecting: - Uploaded files: BOQ documents, contracts, drawings, specifications, schedules, invoices, reports, and other project documents submitted for processing. - TUT conversations: Chat messages, generated answers, source references, session titles, token usage, and timestamps so your web and mobile conversations stay synchronized. - Voice input: Audio you choose to record in the mobile app is uploaded for transcription and TUT processing. - Account information: Name, email address, password credentials where applicable, and third-party login identifiers for Google or Apple sign-in. - Usage data: Job submissions, processing history, quota usage, device push tokens if you opt in to notifications, and service usage metrics. - Technical and approximate location data: Your IP address, and the country derived from it, are recorded with page views so we can measure traffic and detect abuse. When you open a form we also derive a country from the same connection to pre-select the project market — that suggestion is computed for the request and not stored, and whatever you choose replaces it. We do not collect precise location data (such as GPS) or advertising identifiers for tracking, and we never use the country derived from your connection for anything beyond the two purposes above.

Your data is used exclusively for: - AI Processing: Generating quantity take-offs, pricing estimates, schedules, document summaries, TUT chat answers, and project management insights. - Service Delivery: Syncing TUT projects and chat history across buildcais.com and the CAIS TUT mobile app, sending results, maintaining job history, and providing status updates. - Account Management: Authenticating your identity, managing subscriptions, handling support, and protecting the service from abuse. We do not use your uploaded documents, voice recordings, or TUT messages to train our own AI models.

- Uploaded files and extracted project content: Stored on secure servers to deliver document analysis and TUT project chat. Temporary processing files may be deleted after completion; project documents and extracted content remain available while the project exists so your conversations can reference them. - TUT chat history: Stored with your project sessions so conversations started on the website can be opened and continued in the mobile app, and vice versa. - Voice input: Audio is used for transcription and processing; transcripts may be stored as TUT messages when you send them. - Account data: Stored for the duration of your account. - Deletion: You can initiate account deletion in the mobile app settings. Deletion removes your account, refresh tokens, push tokens, OAuth links, TUT projects, documents, sessions, and messages, except records we are legally required to retain.

We implement multiple layers of security: - Encryption in Transit: All connections use TLS 1.2+ (256-bit SSL encryption). - Isolated Processing: Each job runs in an isolated Docker container with no access to other users' data. - Password Protection: Passwords are hashed using bcrypt with 12 salt rounds — we never store plaintext passwords. - Session Security: JWT-based sessions with httpOnly cookies prevent cross-site scripting attacks. - Infrastructure: Hosted on hardened servers with restricted access, firewall rules, and regular security updates.

We use the following third-party services: - AI providers including Google Gemini, OpenAI, Anthropic, and DeepSeek may process document excerpts, TUT messages, and generated context to deliver AI answers and construction analysis. We configure these integrations for service delivery, not model training by CAIS. - Apple and Google: Used for optional social login on supported platforms. - Lemon Squeezy: Payment processing for subscriptions. We do not store credit card information. - Resend: Transactional email delivery for job results and account notifications. When third-party AI processing is used, your project data may be transmitted to those providers only as needed to provide the requested feature.

You have the right to: - Access: Request a copy of personal data we hold about you. - Correction: Update or correct inaccurate account information. - Deletion: Initiate account deletion from the CAIS TUT mobile app settings or contact us for help. - Export: Download your job history and results where available. - Withdraw Consent: Opt out of optional push notifications and non-essential communications. To exercise any of these rights, contact us at [email protected].

We use only essential cookies: - Authentication Cookie: A secure, httpOnly session cookie required for login functionality (NextAuth). - Language Preference: A localStorage value to remember your language choice (English/Arabic). We do not use tracking cookies, analytics cookies, or advertising cookies. No third-party cookies are set.

For privacy-related questions or requests: Email: [email protected] Platform: CAIS — Construction AI Solutions Website: buildcais.com