Privacy Policy

Your Privacy Matters

At ConSites, we are committed to protecting your privacy and ensuring the security of your construction project data. This policy explains how we collect, use, and protect your information.

Last updated: May 31, 2026

Our Commitment

ConSites is built for construction professionals who trust us with their most important project data. We take this responsibility seriously and have implemented comprehensive privacy and security measures to protect your information.

We believe in transparency about our data practices and give you control over your information. This privacy policy explains our practices in plain language, without legal jargon.

If you have any questions about this policy or our privacy practices, please don't hesitate to contact our privacy team.

Privacy by Design

Privacy and security are built into every aspect of ConSites, from our architecture to our business practices.

Privacy Practices

Information We Collect
  • Account information (name, email, company details)
  • Project data and construction documents you upload
  • Usage data and analytics to improve our services
  • Communication records for support purposes
  • Device and browser information for security
How We Use Your Information
  • Provide and maintain ConSites services
  • Process transactions and send notifications
  • Improve our platform and develop new features
  • Provide customer support and respond to inquiries
  • Ensure security and prevent fraud
Information Sharing
  • We do not sell your personal information to third parties
  • Data may be shared with team members you invite to projects
  • Service providers who help us operate our platform
  • Legal authorities when required by law
  • Business transfers (mergers, acquisitions) with notice
Data Security
  • Industry-standard encryption for data in transit and at rest
  • Regular security audits and penetration testing
  • Access controls and authentication requirements
  • Secure data centers with physical security measures
  • Employee training on data protection practices
Instagram and Facebook Integration

When you connect your Instagram or Facebook account to ConSites, we may access certain account information and permissions that you explicitly authorize through Meta's OAuth system. This access is used solely to provide social media publishing, automation, analytics, and related services requested by you. We do not access data beyond the permissions granted by the user.

Third-Party Authentication Tokens

To provide integrations with services such as Instagram and Facebook, ConSites may securely store authentication tokens. These tokens are used only to perform authorized actions on behalf of the user and are protected using industry-standard security practices.

Data Deletion Requests

Users may request deletion of their account and associated data by contacting support@consites.com. Upon verification of the request, we will delete or anonymize applicable data in accordance with legal and operational requirements.

Your Rights
You have control over your personal information and how it's used.

Access & Portability

Request a copy of your personal data and export your project information at any time.

Correction & Updates

Update or correct your personal information through your account settings.

Deletion

Request deletion of your account and associated data, subject to legal requirements.

Opt-out

Control marketing communications and data processing preferences.

Data Retention
How long we keep your information and why.

Active Accounts

We retain your data while your account is active and you're using our services.

Inactive Accounts

Data is retained for 2 years after account inactivity, then securely deleted.

Legal Requirements

Some data may be retained longer to comply with legal or regulatory requirements.

Backups

Backup copies are securely deleted within 90 days of account deletion.

International Data Transfers
How we handle data across borders while maintaining protection standards.

Data Locations

  • • Production account and project data stored on Supabase infrastructure in the Asia Pacific (South) region (AWS ap-south-1, Mumbai, India)
  • • Uploaded files stored in the same Supabase storage region as our production database
  • • Encrypted backups maintained by our cloud providers
  • • Marketing site delivery may use global CDN edge locations

Data Processing

  • • Secure data centers with industry-standard protection
  • • Encrypted backups in multiple regions
  • • No data stored in restricted jurisdictions

Transfer Safeguards

  • • Standard Contractual Clauses (SCCs)
  • • Adequacy decisions where applicable
  • • Regular compliance audits
  • • Data localization options available

Questions About Privacy?

Our privacy team is here to help. If you have questions about this policy, want to exercise your rights, or need assistance with privacy-related matters, please contact us.

Email: support@consites.com
Phone: +918210930068