Privacy Policy

1. Introduction

ChangeOrder Pro ("we," "us," or "our"), operated by Sales Monsters LLC, provides a cloud-based platform at changeorderpros.com (the "Service") that helps construction professionals create, send, and manage change orders. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you register, we collect your name, email address, phone number, company name, and job title. If you are invited by a team administrator, they may provide your contact information on your behalf.

2.2 Change Order Data

We store the content you create within the Service, including project details, change order descriptions, line items, cost information, photos and markup annotations, client contact information, and approval/decline records.

2.3 Communications Data

When you send change orders for approval via SMS or email, we log the recipient phone number or email address, message delivery status, and approval or decline responses. We also process inbound SMS replies (e.g., "YES" or "NO") to record client decisions.

2.4 Usage & Device Data

We automatically collect IP address, browser type, operating system, pages visited, and timestamps when you interact with the Service.

2.5 Cookies

We use essential cookies and local storage for authentication sessions and offline draft persistence. We do not use advertising or third-party tracking cookies.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To send change order approval requests via SMS and email on your behalf
• To send reminders for pending approvals
• To generate PDF documents and reports
• To provide AI-powered features (description enhancement, cost suggestions)
• To send account-related notifications (invitations, password resets)
• To monitor and improve service performance and security
• To comply with legal obligations

4. Third-Party Service Providers

We share data with the following categories of service providers, only as necessary to operate the Service:

• Supabase — Database hosting, authentication, and file storage
• Resend — Transactional email delivery
• Vercel — Application hosting and deployment
• Anthropic — AI-powered text generation features (no personal data is sent; only change order descriptions and line item context)

Each provider processes data under their own privacy policies and data processing agreements. We do not sell, rent, or trade your personal information to any third party.

5. SMS & Messaging

ChangeOrder Pro does not operate an automated SMS platform and does not send text messages to clients on a contractor's behalf. When a contractor chooses the "SMS" delivery option for a change order, ChangeOrder Pro opens the contractor's own phone's messaging app with the change order link pre-filled, and the contractor sends it themselves from their own phone number, at their own discretion — the same as if they had typed and sent the message manually.

We do not use phone numbers collected through the Service for marketing purposes. Phone numbers are used solely to let a ChangeOrder Pro user send a change order approval link to their own client. We do not share, sell, or rent phone numbers with third parties for their marketing purposes.

6. Data Retention

We retain your account data and change order records for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., completed audit logs).

Approval tokens expire after 72 hours and are no longer valid after that period.

7. Data Security

We implement industry-standard security measures including HTTPS/TLS encryption in transit, encrypted database connections, row-level security policies, HMAC-signed approval tokens, and role-based access controls. However, no method of electronic transmission or storage is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format (CSV export is available in the Service)
• Opt out of SMS communications by replying STOP

To exercise any of these rights, contact us at support@changeorderpros.com.

9. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Effective Date" at the top of this page indicates when the policy was last revised.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Sales Monsters LLC
Email: support@changeorderpros.com