Privacy Policy

1. Introduction

TrueGrade ("we", "our", or "us") is a construction compliance and certification platform operated by QuickBox Foundry. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website at www.truegrade.build and our software-as-a-service platform at truegrade.build.

By using TrueGrade, you agree to the collection and use of information in accordance with this policy. This policy is required as a condition of using our payment processor, Stripe.

2. Information We Collect

Account information: When you create a TrueGrade account, we collect your name, email address, company name, and billing information. Billing information is processed and stored by Stripe; we do not store payment card numbers on our servers.

Project data: We store the construction project data, compliance documents, subcontractor information, and other content you upload to TrueGrade. This data is owned by you and your organization.

Usage data: We collect information about how you interact with our platform, including pages visited, features used, and actions taken. This helps us improve the product.

Communications: If you contact us by email or through the platform, we retain those communications to respond to your requests and improve our support.

3. How We Use Your Information

• To provide, maintain, and improve the TrueGrade platform
• To process payments and manage subscriptions through Stripe
• To send account-related notifications and product updates
• To respond to support requests and questions
• To comply with legal obligations
• To detect, prevent, and address security or technical issues

We do not sell your personal information to third parties. We do not use your project data to train AI models without explicit consent.

4. Data Storage and Security

Your data is stored on servers in the United States. We use Supabase (hosted on AWS) for database and authentication services, and implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

We maintain data backups and employ encryption at rest and in transit. However, no method of transmission over the internet or electronic storage is 100% secure.

5. Third-Party Services

TrueGrade uses the following third-party services that may process your data:

• Stripe — payment processing and subscription management. Stripe's privacy policy applies to payment data.
• Supabase — database and authentication infrastructure.
• Cloudflare — content delivery, DNS, and analytics. Cloudflare Web Analytics is privacy-first with no cookies and no personal data collection.

6. Data Retention

We retain your account and project data for as long as your account is active or as needed to provide services. If you close your account, we retain data for 90 days before deletion, after which permanent deletion occurs. You may request earlier deletion by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your personal data
• Data portability — receive your data in a structured, machine-readable format

To exercise these rights, contact us at privacy@truegrade.build.

8. Cookies

The TrueGrade marketing site (www.truegrade.build) uses Cloudflare Web Analytics, which is cookie-free. The TrueGrade application (truegrade.build) uses session cookies for authentication. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the platform. Your continued use of TrueGrade after changes constitute acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy? Contact us at privacy@truegrade.build.