Privacy Policy

Last updated: April 15, 2026

1. Who We Are (Verantwortliche Stelle)

OpenConstructionERP is developed by DataDrivenConstruction, founded by Artem Boiko.
Contact: info@datadrivenconstruction.io
Website: datadrivenconstruction.io

2. Data We Collect

2.1 Data you provide during registration

Data	Purpose	Legal basis (GDPR)
Email address	Account login, service notifications	Art. 6(1)(b) — contract performance
Full name	Display in the application	Art. 6(1)(b) — contract performance
Password (hashed)	Authentication	Art. 6(1)(b) — contract performance
Company name	Understanding user context, product improvement	Art. 6(1)(f) — legitimate interest
Job title / role	Understanding user context, product improvement	Art. 6(1)(f) — legitimate interest
How you found us	Marketing attribution, product improvement	Art. 6(1)(f) — legitimate interest

2.2 Data collected automatically

Data	Purpose	Legal basis (GDPR)
IP address	Security (rate limiting, abuse prevention), approximate geolocation	Art. 6(1)(f) — legitimate interest
Browser user-agent	Technical support, compatibility analysis	Art. 6(1)(f) — legitimate interest
Referrer URL	Understanding traffic sources	Art. 6(1)(f) — legitimate interest
Browser language	Automatic language selection	Art. 6(1)(f) — legitimate interest

2.3 Project data

All data you create within the application (BOQ, documents, estimates, CAD/BIM files, photos) is stored on your server or our demo server. We do not access or analyse your project data.

3. How We Use Your Data

To provide and operate the OpenConstructionERP service
To improve the product and fix bugs
To send important service notifications (security updates, breaking changes)
To understand our users and improve the product experience
We do NOT sell your data to third parties
We do NOT use your project data for AI training
We do NOT send marketing emails without separate opt-in

4. Data Storage and Retention

Self-hosted: All data stays on your server. We have no access to it.

Demo server: Data on our demo server (openconstructionerp.com/demo) is periodically cleaned and not backed up. Do not store production data there.

Retention: Account data is kept as long as your account exists. You can delete your account at any time, which removes all associated personal data.

5. Third-Party Services

AI Providers: If you configure AI features (OpenAI, Anthropic, Google), your prompts are sent to their APIs. Review their privacy policies.
FormSubmit: Feedback form submissions are processed via FormSubmit.co
GitHub: CAD converter downloads come from GitHub releases

We do not use analytics services (Google Analytics, Mixpanel, etc.) or advertising trackers.

6. Your Rights (GDPR Art. 12-23)

You have the right to:

Access your data (export via API or UI)
Rectification — correct inaccurate data via your profile settings
Erasure — delete your account and all associated personal data
Data portability — all data is exportable as JSON/CSV/Excel
Restriction of processing — contact us to restrict processing
Object to processing based on legitimate interest
Withdraw consent at any time (does not affect prior processing)
Lodge a complaint with a supervisory authority

To exercise any of these rights, contact info@datadrivenconstruction.io.

7. Cookies

We use only essential cookies (session token, language preference). No tracking cookies. No advertising cookies. No cookie consent banner is required because we do not use non-essential cookies.

8. Security

Passwords are hashed with bcrypt. API access requires JWT authentication. All data transfers use HTTPS/TLS 1.3. The application source code is open-source (AGPL-3.0) for security auditing.

9. International Data Transfers

For self-hosted deployments, data remains on your server in your jurisdiction. For the demo server, data is stored on Hetzner servers in the EU (Germany).

10. Changes

We may update this policy. Changes will be posted on this page with a new "Last updated" date. Significant changes will be communicated via the application.

11. Contact

For privacy questions or data subject requests:
Email: info@datadrivenconstruction.io
Website: datadrivenconstruction.io
GitHub: OpenConstructionERP