Privacy Policy

This policy explains what PEXIA collects when you use the PEXIA app and website, why we collect it, how long we keep it, and the choices you have. It applies to the web app, the installable app, and our iOS and Android apps.

Information we collect

Account information. Your name, email address, phone number (optional), company name, and profile photo. We use this to create your account, secure it, and contact you about your account.

Project content. Projects, customers, addresses, estimates, scopes, updates, change orders, invoices, and notes you create in the app.

Photos. Jobsite photos you capture or upload. Camera access is used only while you are actively capturing; we do not access your camera in the background.

Audio. Voice notes and walkthrough narration you record. Microphone access is used only while you are actively recording.

Usage and diagnostics. Feature usage, AI credit consumption, error reports, and basic device and browser information used to keep the service reliable.

Notification tokens. If you enable notifications, we store the push subscription needed to deliver them.

We do not collect precise location, contacts, health data, or advertising identifiers, and we do not serve ads.

How we use your information

To run the service: create and secure your account, store your projects, generate documents from your photos and voice notes, deliver customer updates you choose to send, meter AI usage against your plan, send notifications you enable, and provide support.

We do not sell your personal information, and we do not use your project content, photos, or audio to train our own models.

AI processing

When you ask PEXIA to draft an estimate, update, report, or other document, the relevant photos, transcript, and project context are sent from our servers to our AI processing provider to produce that draft. That provider's own terms govern how it handles the request; we do not authorise it to use your content for any purpose other than returning your result.

Every AI output is a draft. Nothing is sent to a customer until you review and approve it.

Service providers

We share data only with providers that operate the service on our behalf: our cloud database, authentication, and file storage provider; our application hosting provider; our AI processing provider; our transactional email provider; and Apple and Google for push notification delivery on their platforms. Each is bound to use the data only to provide their service to us.

We may also disclose information when required by law or to protect the rights, safety, and security of PEXIA and its users.

Customer-facing links

When you share an update, proposal, change order, or portal link with a customer, the recipient can view the content you published to that link without signing in. You control whether a link is enabled and can disable or regenerate it at any time from the project.

If your customer submits an approval, signature, or comment through one of these links, we store what they entered (name, and optionally an email address, signature, and note) so the approval record stays attached to your project. For that information, you — the contractor — are the data controller, and PEXIA acts as your data processor: we hold it on your behalf and act only on your instructions. If your customer wants to exercise a data right (for example, requesting a copy or removal of what they submitted), please contact us at founders@pexia.ai and we'll work with you to resolve it.

Data retention

We keep your account and project data for as long as your account is active. When you delete a project, its content is removed from the app. When you delete your account, your account and its associated data are deleted from our live systems, as described on our account deletion page. Records we must keep for legal, accounting, or fraud-prevention reasons are retained for as long as the law requires.

Security

Data is encrypted in transit with TLS and at rest by our infrastructure providers. Files are stored in private buckets that are not publicly listable. Access to your data is enforced at the database level so that only members of your company can read it. API keys and secrets are held server-side and are never exposed to the app running on your device.

Your rights and choices

You can access and correct your information in the app, export your data from Settings, revoke camera, microphone, and notification permissions in your device settings at any time, and delete your account permanently from Settings → Delete Account or via our account deletion page.

Depending on where you live, you may have additional rights to access, correct, port, restrict, or erase your personal information, and to object to certain processing. Contact us to exercise them.

Children

PEXIA is a business tool intended for professional use. It is not directed to children under 13, and we do not knowingly collect their information.

International transfers

Our providers may process and store data in the United States and other countries, so your information may be transferred outside the country where you live.

Changes to this policy

We will update this page when our practices change and revise the date above. Where a change is significant, we may also notify you in the app or by email.

Contact

Questions or privacy requests: founders@pexia.ai.