Legal

Privacy Policy

Last updated: 1 July 2026

Who we are

BuildPro Nigeria ("BuildPro", "we") provides construction-management software at buildpro.com.ng. This policy explains what we collect, why, and the choices you have. Questions: contact us.

What we collect

• Account information — your name, email address, profession, phone and location, provided when you register or edit your profile.
• Project data — the content you create in BuildPro: projects, schedules, bills of quantities, finance records, material and workforce records, reports, photos and uploaded documents. This data belongs to you.
• Payment information — subscription payments are processed by Paystack. We never see or store your card details; we keep only your plan, payment references and billing status.
• Technical data — sign-in sessions and device identifiers (to enforce your plan's device limits and keep your account secure), and basic usage events that help us improve the product.

How we use it

• To run the service: your project data powers your own dashboards, reports and AI features.
• AI processing — when you use AI features (project setup, BOQ generation, reports, the assistant), the relevant text or images you provide are processed by our AI provider (OpenAI) to generate the result. Your data is not used to train their models under our API terms.
• To send transactional email (verification, password reset, receipts). We do not sell your data or send third-party marketing.

Sharing

We share data only with the processors needed to run BuildPro — hosting, database, email delivery, Paystack for payments and OpenAI for AI features — and only what each needs. If you create a client-share link, anyone with that link can view the read-only project page it points to; you can revoke it anytime.

Security & retention

Passwords are stored hashed, access is token-based with short-lived sessions, and connections are encrypted (HTTPS). We keep your data while your account is active. You can request export or deletion of your account and data at any time from Profile → Security, or by contacting us — we delete within 30 days.

Your rights

You may access, correct, export or delete your personal data, and object to or restrict processing, consistent with the Nigeria Data Protection Act (NDPA). Write to us via the contact page and we'll respond within 30 days.

If you are in the UK, the EU or the EEA (UK GDPR / GDPR)

Where the UK GDPR or EU GDPR applies to you, you hold the same rights set out above and these in addition. They sit alongside the NDPA rather than replacing it — whichever framework gives you the stronger protection is the one we apply.

• Access — a copy of the personal data we hold about you.
• Rectification — correction of anything inaccurate or incomplete.
• Erasure — deletion of your personal data, subject to records we are legally required to keep.
• Restriction and objection — you may object to processing carried out on the basis of our legitimate interests.
• Portability — your data in a structured, machine-readable format, which the in-app export below provides.
• Withdraw consent — at any time, where we relied on consent. Withdrawing it does not affect processing already carried out.
• Complain to a regulator — the Information Commissioner's Office in the UK, or your national supervisory authority in the EU/EEA.

Why we process your data. To provide the service under our contract with you; to meet legal obligations; and for our legitimate interests in keeping the service secure and working. We do not sell personal data, and we do not use it for automated decision-making that produces legal effects for you.

How long we keep it. For as long as your account is open, and afterwards only where a legal or accounting obligation requires it. Project records you create belong to you and are removed when you delete them or close your account.

International transfers. BuildPro is operated from Nigeria and our infrastructure providers are located outside the UK and EEA. Where personal data is transferred out of the UK or EEA we rely on appropriate safeguards, including Standard Contractual Clauses with our processors.

To exercise any of these rights, write to us via the contact page. We respond within 30 days.

Changes

If we make material changes to this policy we will notify you by email or in-app before they take effect.