Privacy Policy

Last updated: 8 October 2026

1. Who we are

SiteLedger, available at getcloudcompanion.app, provides construction project, cost and site record management software available as a website and as an Android application. This policy explains what personal data we process when you create an account and use the service, and it applies equally to the web app and the Android app. We are the data controller for that information. You can reach us at support@getcloudcompanion.app.

2. Data we collect

  • Account data: name, email address, and authentication identifiers (including Google sign-in ID where used).
  • Company data: company name, team members, invitations and their roles.
  • Project content you enter: client details, site addresses, costs, variations, diary entries, labour and plant records, waste records, documents, tender drawings and contracts, and photographs or videos you upload.
  • Billing data: subscription plan, billing period, invoice history and payment status. Card details are handled by our payment processor and are never seen or stored by us.
  • Technical data: log data, device and browser information, and basic usage information needed to operate and secure the service.

We do not collect location data, contacts, calendar data or advertising identifiers. Camera and file access on Android is used only when you choose to attach a photo, video or document to a project.

3. How we use your data

We use your data to provide the service, authenticate users, process subscriptions, analyse tender documents you submit, keep the service secure, provide support and meet legal obligations. We do not sell your data, we do not share it with data brokers, and we do not use your project content for advertising.

4. Legal bases

We rely on performance of a contract (providing the service you subscribe to), legitimate interests (security, service improvement and support), and legal obligation (accounting and tax records).

5. Service providers we share data with

We share the minimum data necessary with providers who process it on our behalf under contract:

  • Cloud hosting and database provider — stores your account, company and project records.
  • Stripe — payment processing, subscriptions and invoices, under Stripe's own privacy policy.
  • Google — optional Google sign-in, and distribution of our Android app through Google Play.
  • Our AI provider — processes tender drawings and contracts you submit for analysis; that content is not used to train third-party models.
  • Our email provider — delivers account, invitation and billing notification emails.

We may also disclose data where required by law. Some providers operate outside the UK/EEA; where they do, transfers are covered by appropriate safeguards such as standard contractual clauses.

6. Cookies and advertising measurement

We use cookies to keep you signed in, to record which pages you open on this site, and — only with your permission — to measure whether an advert brought you here.

If you accept advertising cookies, Google's advertising tag is placed on your device. It records the pages you visited on this site, the advert or search that brought you here, whether you sent us your project details, and your device and browser type. Google receives this information and processes it as its own controller under its own privacy policy. We use it to see which adverts bring us enquiries and to decide what to pay for a click.

Visitors in the UK, the European Economic Area and Switzerland are asked to accept or refuse advertising cookies when they first arrive. Accepting is voluntary: if you refuse, we still record the pages you open on our own servers, but Google is told nothing about your visit. You can change your mind at any time using the “Cookie settings” control at the foot of every page, or by rejecting cookies in your browser.

7. Storage and security

Data is stored on managed cloud infrastructure with encryption in transit. Access to your company's records is restricted at database level so that only members of your company workspace can read them, and financial data can be further restricted by role. Uploaded photos, videos and documents are held in private storage and served only through short-lived signed links.

8. Retention

We keep your data for as long as your account is active. If you delete your account, project content belonging to your workspace is removed within 30 days, other than records we are required to retain for legal or accounting purposes (typically invoices, for up to six years).

9. Your rights

You may request access to, correction of, export of, or deletion of your personal data, and you may object to or restrict certain processing. You can delete your account and its data at any time from within the app, or from our account and data deletion page. If you are in the UK or EEA you also have the right to complain to your data protection authority.

10. Children

SiteLedger is a business tool intended for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.

11. Changes to this policy

If we make material changes to this policy we will update the date at the top of this page and, where appropriate, notify account owners by email.

12. Contact

For any privacy question or request, email support@getcloudcompanion.app or use our support page. We aim to respond within 30 days.

Related documents