CarpenterCam — Privacy Policy

1. Introduction

CarpenterCam ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information You Provide

• Account information (name, email address) when you register.
• Audio recordings you make during site walkthroughs.
• Photos you capture during site visits.
• Job site addresses and report titles you enter.

Information Collected Automatically

• Log data including IP address, browser type, and pages visited.
• Device information such as operating system and screen resolution.
• Usage data about how you interact with the Service.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process your audio and photos to generate AI field reports.
• Send transactional emails (account confirmations, report completions).
• Respond to your support requests and feedback.
• Monitor and analyze usage to improve the Service.
• Comply with legal obligations.

We do not sell your personal information or User Content to third parties.

4. How We Share Your Information

We may share your information with:

• Service Providers: Third-party vendors who assist us in operating the Service (e.g., cloud storage, AI processing), subject to confidentiality obligations.
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with advance notice to affected users.

5. Google User Data

CarpenterCam may request access to certain Google APIs on your behalf. When you connect your Google account, you choose which permissions to grant. We only request the scopes necessary to provide the features you use, and we never use Google data for advertising or sell it to third parties. Below is a summary of each Google API we may access and how we use the data:

Google Drive

If you connect Google Drive, we request the following scopes:

• drive.file (Non-sensitive) — Allows CarpenterCam to see, edit, create, and delete only the specific Google Drive files you use with this app. We use this to import files (such as contracts, floor plans, spreadsheets, and documents) into your projects when you select them via the Google Picker.
• drive.readonly (Restricted) — Allows CarpenterCam to see and download all your Google Drive files. We use this to scan your Drive for project-related documents and import them into the appropriate projects within CarpenterCam.CarpenterCam cannot create, modify, or delete files in your Drive.

To add files to a project, you can also upload them directly into the project's Documents area within CarpenterCam.

Gmail

If you connect Gmail, we request the following scopes:

• gmail.drafts.create (Sensitive) — Allows CarpenterCamto compose new draft emails and save them directly to your Gmail Drafts folder. Drafts are saved for your review — you must open Gmail to review and send them manually.
• gmail.send (Sensitive) — Allows CarpenterCam to send emails on your behalf. We use this to send project-related communications (such as bid requests, client updates, and document notifications) when you initiate them from within the app.
• gmail.modify (Restricted) — Allows CarpenterCam to read, compose, and send emails from your Gmail account. We use this so the AI agent can monitor your inbox for project-related emails, surface messages that need your attention, and process email attachments into the appropriate projects.
• gmail.drafts.readonly (Restricted) — Allows CarpenterCam to read your draft emails. We use this to surface draft responses that the AI agent has composed so you can review them before sending.

CarpenterCam does not permanently delete emails in your Gmail account. Emails are accessed only when you actively use a feature that requires it, and only the minimum data necessary is retrieved.

Google Calendar

If you connect Google Calendar, we request the following scopes:

• calendar.events.freebusy (Non-sensitive) — Allows CarpenterCam to see the availability on Google calendars you have access to. We use this to check scheduling conflicts when assigning crews or scheduling project milestones.
• calendar.events (Sensitive) — Allows CarpenterCam to view and edit events on all your calendars. We use this to display your upcoming schedule — including project milestones, set days, inspections, and deadlines — and to create new calendar events when you schedule a set day, inspection, or project milestone from within the app.
• calendar.events.owned (Sensitive) — Allows CarpenterCamto see, create, change, and delete events on Google calendars you own. We use this to manage project-related events on your primary calendar.

Events created in CarpenterCam will appear in your connected Google Calendar and can be modified or deleted from either CarpenterCam or Google Calendar directly.

Limited Use & Data Handling

• We do not use Google user data for advertising.
• We do not sell Google user data to third parties.
• We do not allow humans to read Google user data unless required for security, legal compliance, or with your explicit consent.
• We do not transfer Google user data to others except as necessary to provide and improve the Service, comply with applicable law, or as part of a merger or acquisition.
• Google user data is accessed only when you actively use a feature that requires it, and only the minimum data necessary is retrieved.

CarpenterCam's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke CarpenterCam's access to your Google account at any time via your Google Account permissions page.

AI/ML Integration & Limited Use Compliance

CarpenterCam integrates with third-party AI/ML service providers to power features such as audio transcription, document classification, and field report generation. The following providers may process data within the Service:

• Google Gemini (via Base44 Core integration) — Enterprise tier. Used for audio transcription, document classification, and report generation.
• OpenAI GPT models (via Base44 Core integration) — Enterprise tier. Used for report generation and document analysis.
• Anthropic Claude models (via Base44 Core integration) — Enterprise tier. Used for complex scope generation and document analysis.

Each of these providers operates under API terms that explicitly prohibit the use of customer data to train or improve their foundational or generalized machine learning models. Raw, aggregated, or derived Google Workspace or Photos user data is not transferred to any third-party AI service that would use such data for model training.

Limited Use Compliance Statement: The use of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. CarpenterCam does not use, transfer, or sell Google user data — including raw, aggregated, or derived data — to create, train, or improve foundational or generalized machine learning or artificial intelligence models.

6. Data Retention

We retain your account information and reports for as long as your account is active or as needed to provide the Service. You may delete individual reports at any time from your dashboard. To request deletion of your account and all associated data, contact us at theJenkins.info@gmail.com.

7. Security

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS) and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data.
• Object to or restrict certain processing of your data.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, please contact us at theJenkins.info@gmail.com.

9. Cookies

We use essential cookies and similar technologies to maintain your session and preferences. We do not use third-party advertising cookies. You can control cookie settings through your browser preferences; however, disabling cookies may affect Service functionality.

10. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, by email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at theJenkins.info@gmail.com or by phone at (574) 900-2624.