Privacy Policy

Effective date: October 1, 2026

Construction Partner, Inc. (“Construction Partner,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information in connection with the Construction Partner cloud-based software platform and related services (the “Service”), our customer portal, this website, and other interactions you may have with us.

1. Scope and our role

1.1 Who this policy covers

This Privacy Policy applies to:

Visitors to our website at constructionpartner.com;
Subscribers (“Customers”) who purchase or evaluate the Service for their organizations;
Authorized Users, meaning the employees, contractors, or agents of our Customers who access the Service; and
Individuals whose information our Customers process in the Service, such as our Customers’ employees, vendors, customers, and subcontractors.

1.2 Controller and processor

Construction Partner plays two different roles depending on the data.

Controller. When we collect information directly from you, for example when you create an account, contact support, request a demo, pay an invoice, or browse this website, we act as the controller of that information.

Processor. When our Customers enter or upload data into the Service, such as employee personal information, payroll records, vendor records, or accounting transactions, we act as a processor or service provider on the Customer’s behalf. The Customer is the controller of that data, and the Customer’s own privacy notice, not this Privacy Policy, governs how that data is collected and used. Individuals who want to exercise rights over that data should contact the Customer directly. We will help our Customers respond to such requests as required by law and the applicable subscription agreement.

2. Information we collect

2.1 Information you provide

Account and contact information: legal entity name, business address, business email, phone number, taxpayer identification information where required, and administrator name and contact details.
Authorized User information: name, business email, role, password (stored as a salted hash), and second-factor authentication details where enabled.
Billing information: payment method type and the last four digits of a bank account or card. Full bank account, routing, and card numbers are submitted to and stored by our payment processor and are not kept by us.
Support and communications: information you give us when you contact support, request a demo, email our help desk, attend training, or answer a survey.
Customer Data: see Section 2.4.

2.2 Information collected automatically

Device and usage data: IP address, browser type and version, operating system, referring URLs, pages and features used, dates and times of access, and other diagnostic data.
AI and automated access data: metadata about the use of AI features and of API or AI agent access, such as request counts, usage volume, timestamps, and the credentials used. We use it to operate and secure the Service, measure usage, enforce usage limits, and bill.
Cookies and similar technologies: see Section 5.
Log files: server logs that record technical information about your use of the Service, used for security, troubleshooting, and analytics.

2.3 Information from bank connections

When a Customer connects a bank account, for example to verify an account for ACH payments or to import bank transactions for reconciliation, our payment processor returns account status, ownership confirmation, and transaction information to the Service.

2.4 Customer Data we process for Customers

When our Customers use the Service, they submit data that may include personal information about their employees, vendors, customers, and other individuals (“Customer Data”). This may include:

Names, addresses, Social Security numbers (for payroll), dates of birth, and other employee information;
Wage, hour, deduction, and tax withholding information;
Bank information for direct deposit, where used;
Vendor and customer contact information; and
Other accounting, job cost, and operational records.

We process Customer Data only on behalf of and under the instructions of the Customer, except as required by law. We do not use Customer Data for our own purposes, including marketing or training general-purpose AI models, without the Customer’s express authorization.

3. How we use information

Provide the Service: authenticate users, host and process Customer Data, deliver features, and run the customer portal.
Support and communications: answer requests, provide training and onboarding, and send service notices about billing, security, outages, and changes to our terms.
Billing and payments: process subscription fees, ACH authorizations, invoices, and taxes.
Security and fraud prevention: watch for unauthorized access, abuse, or security incidents, investigate suspected violations of our terms, and protect the rights and safety of Construction Partner and others.
Service improvement: review aggregated and de-identified usage to improve reliability, performance, and features. We do not use identifiable Customer Data for general product analytics without the Customer’s authorization.
Marketing: with consent or as permitted by law, send business contacts information about new features, releases, regulatory updates, and events. You can opt out at any time.
Legal compliance: comply with applicable laws and respond to lawful requests from public authorities.

We do not sell personal information. We share information only as described below.

4.1 Service providers (subprocessors)

We build and run our main tools ourselves. We share information only with a small number of providers that process it on our behalf and are bound by confidentiality and data protection obligations:

Cloud hosting and email delivery: Amazon Web Services, in the United States, hosts the Service and its data and sends our emails.
Payments and bank connections: a payment processor handles card and ACH payments, bank account verification, and bank transaction feeds.
Product analytics: an analytics provider helps us understand how the Service is used and diagnose issues.
Inbound support email: an email provider receives the messages you send to our support address and delivers them to our help desk.
AI model providers: providers of large language models that power AI features in the Service. They process the data sent to those features on our behalf, under agreements that prohibit using that data to train their models.

A current list of subprocessors is available on request.

4.2 With Customers

If you are an Authorized User, the Customer that gave you access (usually your employer) can see your account information and activity in its account.

4.3 Business transfers

If Construction Partner is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

4.4 Legal requirements

We may disclose information when we believe in good faith that the law, legal process, or a government request requires it, or that it is necessary to protect the rights, property, or safety of Construction Partner, our Customers, or others.

We may share information for other purposes with your consent or at your direction.

4.6 AI features and AI agents you connect

AI features we provide. Some features of the Service use large language models run by the AI model providers described in Section 4.1. When you use these features, the content you submit, and the Customer Data needed to respond, may be processed by those providers on our behalf. They are bound by confidentiality and data protection obligations and may not use your data to train their models. We do not use Customer Data to train any AI model without the Customer’s express authorization.

AI agents you connect. The Service may let Customers connect their own AI agents, assistants, or tools, including through the Model Context Protocol (MCP) or our APIs. When a Customer or Authorized User connects a third-party AI agent, any data that agent retrieves from the Service is sent to that third party at the Customer’s direction, not ours. That processing is governed by the third party’s own privacy policy and the Customer’s agreement with it, not by this Privacy Policy. Customers are responsible for evaluating the AI tools they connect and for making sure that sharing Customer Data with them, which may include payroll and other sensitive information, complies with the Customer’s own legal obligations and privacy notices.

5. Cookies and similar technologies

We use cookies and similar technologies on this website and in the Service to run the site, remember preferences, keep you signed in, measure usage, and improve our products:

Strictly necessary: required for sign-in and core functions. These cannot be turned off.
Functional: remember preferences such as light or dark mode and language.
Analytics: help us understand overall usage so we can improve performance and features.

You can control cookies through your browser settings. We do not currently respond to “Do Not Track” signals, but we honor opt-out preference signals such as Global Privacy Control where the law requires it.

6. Security

We maintain administrative, technical, and physical safeguards designed to protect information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These include encryption in transit and at rest, role-based access controls, audit logging, periodic security testing, and employee training. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention

We keep information as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Customer Data is kept for the length of the subscription and the export period described in the subscription agreement, after which it may be deleted under our retention practices. Information about prospects, former Customers, and website visitors is kept as long as reasonably needed for the purpose it was collected for.

8. Where data is processed

Construction Partner is based in California, and the Service is hosted in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country.

9. Your privacy choices and rights

9.1 General choices

You can update account and contact information in your account settings or by contacting us.
You can opt out of marketing emails with the unsubscribe link in those emails. Service emails, such as billing notices and security alerts, are required to operate the Service.
You can control cookies through your browser settings.

9.2 California residents

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), gives you certain rights over personal information we collect as a controller, including:

the right to know what personal information we have collected;
the right to access and get a copy of that information;
the right to request correction or deletion;
the right to limit the use of sensitive personal information; and
the right not to be discriminated against for exercising these rights.

Construction Partner does not sell personal information and does not share personal information for cross-context behavioral advertising.

Personal information we process on behalf of a Customer, as a service provider under the CCPA, is governed by the Customer’s privacy notice. Requests about that information should go to the Customer.

To submit a request as a California resident, contact us using the details in Section 12. We may need to verify your identity before completing some requests. You may name an authorized agent to make a request for you.

9.3 Residents of other U.S. states

Residents of other U.S. states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and Montana, may have similar rights under their state’s laws. We honor those rights as the law requires.

10. Children’s privacy

The Service is built for businesses and is not directed to children under 13, or under 16 where a higher age applies. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Customers and Authorized Users by email or in the Service and update the effective date above. Continuing to use the Service after an updated policy takes effect means you accept the changes.

12. Contact us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Construction Partner, Inc.
1380 Lead Hill Blvd., Suite 106, Roseville, CA 95661
Privacy: privacy@constructionpartner.com
Support: support@constructionpartner.com
Phone: 800-395-7474