Privacy Policy
Effective Date: March 17, 2026
1. Introduction
ChangeOrder Pro ("we," "us," or "our"), operated by Sales Monsters LLC, provides a cloud-based platform at changeorderpros.com (the "Service") that helps construction professionals create, send, and manage change orders. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
2.1 Account Information
When you register, we collect your name, email address, phone number, company name, and job title. If you are invited by a team administrator, they may provide your contact information on your behalf.
2.2 Change Order Data
We store the content you create within the Service, including project details, change order descriptions, line items, cost information, photos and markup annotations, client contact information, and approval/decline records.
2.3 Communications Data
When you send change orders for approval via SMS or email, we log the recipient phone number or email address, message delivery status, and approval or decline responses. We also process inbound SMS replies (e.g., "YES" or "NO") to record client decisions.
2.4 Usage & Device Data
We automatically collect IP address, browser type, operating system, pages visited, and timestamps when you interact with the Service.
2.5 Cookies
We use essential cookies and local storage for authentication sessions and offline draft persistence. We do not use advertising or third-party tracking cookies.
3. How We Use Your Information
- To provide, operate, and maintain the Service
- To send change order approval requests via SMS and email on your behalf
- To send reminders for pending approvals
- To generate PDF documents and reports
- To provide AI-powered features (description enhancement, cost suggestions)
- To send account-related notifications (invitations, password resets)
- To monitor and improve service performance and security
- To comply with legal obligations
4. Third-Party Service Providers
We share data with the following categories of service providers, only as necessary to operate the Service:
- Supabase — Database hosting, authentication, and file storage
- Twilio — SMS delivery for change order approvals and reminders
- Resend — Transactional email delivery
- Vercel — Application hosting and deployment
- Anthropic — AI-powered text generation features (no personal data is sent; only change order descriptions and line item context)
Each provider processes data under their own privacy policies and data processing agreements. We do not sell, rent, or trade your personal information to any third party.
5. SMS & Messaging Consent
When a ChangeOrder Pro user sends a change order to a client for approval, the client may receive SMS messages at the phone number provided by the user. These messages include:
- An initial approval request with change order details and a link to review
- Up to two follow-up reminders if the change order remains pending
- A confirmation or acknowledgment after the client approves or declines
Message frequency varies. Typically 1–4 messages per change order. Message and data rates may apply. Recipients may opt out at any time by replying STOP to any message. Reply HELP for assistance.
We do not use phone numbers collected through the Service for marketing purposes. Phone numbers are used solely for change order approval workflows initiated by theChangeOrder Pro user who entered them.
6. Data Retention
We retain your account data and change order records for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., completed audit logs).
Approval tokens expire after 72 hours and are no longer valid after that period.
7. Data Security
We implement industry-standard security measures including HTTPS/TLS encryption in transit, encrypted database connections, row-level security policies, HMAC-signed approval tokens, and role-based access controls. However, no method of electronic transmission or storage is 100% secure.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your data in a portable format (CSV export is available in the Service)
- Opt out of SMS communications by replying STOP
To exercise any of these rights, contact us at support@changeorderpros.com.
9. Children's Privacy
The Service is not intended for individuals under 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Effective Date" at the top of this page indicates when the policy was last revised.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Sales Monsters LLC
Email: support@changeorderpros.com