Privacy Policy

Last updated: August 2026 · SmartX Construction Technologies (“SmartX”, “we”, “us”, or “our”)

Our Core Privacy Commitments:

  • You own your drawings and project data: We do not sell, rent, or monetize your blueprints, takeoffs, or personal information.
  • Zero AI Model Training: Your uploaded drawings and takeoff quantities are never used to train public or foundational AI models.
  • Enterprise-grade Security: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Tenant Isolation: Strict role-based access control prevents cross-company data exposure.

1. Introduction & Scope

This Privacy Policy explains how SmartX Construction Technologies collects, uses, processes, stores, and protects personal and project information when you visit our website (https://www.smartxcc.com), create an account, or use MeasureX AI and associated cloud services (collectively, the “Service”).

By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

2. Information We Collect

We collect information in three primary categories to provide, secure, and maintain our quantity takeoff platform:

A. Account & Identity Information

  • Contact Details: Name, professional email address, company name, phone number, job title, and geographic region.
  • Credentials: Securely hashed passwords (via scrypt) and authentication session tokens. We never store plaintext passwords.
  • Billing Information: Billing contact details, tax identifiers (e.g. GST/VAT), and payment status. Credit card numbers and payment instruments are processed directly by PCI-DSS certified payment gateways (e.g., Razorpay, Stripe) and are never stored on our servers.

B. Project Files & Customer Content

  • Construction Drawings & Documents: Architectural, MEP, structural, and civil drawings uploaded in PDF, PNG, JPG, WebP, DWG, or DXF formats.
  • Takeoff Markups & Data: Vector measurements (counts, lengths, areas, volumes), layer structures, schedules, custom notes, bill of quantities (BOQ) line items, and trade packages.
  • Communication & Notes: Project RFIs, sheet comments, meeting chat notes, and support correspondence.

C. Technical, Usage & Operational Data

  • Device & Connection Data: IP address, browser type and version, operating system, and timestamped access logs.
  • Application Telemetry: Features utilized (e.g., Scale Calibration, AI Takeoff, Auto Count, Trade Calcs), page latency, and diagnostic crash reports to maintain platform performance and reliability.
  • Security Logs: Authentication attempts, session duration, and rate-limiting triggers to defend against unauthorized access.

3. How We Use Your Information

We use collected data strictly for legitimate operational, security, and contractual purposes:

  • Delivering Takeoff Features: Rendering high-resolution sheet tiles, computing accurate scale calibrations, generating multi-trade quantity takeoff summaries, and providing export-ready Excel and PDF deliverables.
  • Authentication & Access Control: Verifying user identity, enforcing role-based permissions (Admin, Manager, Estimator, Customer), and securing multi-tenant environments.
  • Platform Performance & Maintenance: Monitoring system health, optimizing server rendering times, resolving software bugs, and load balancing compute resources.
  • Transactional Communications: Sending billing invoices, password reset links, account notifications, and responding to support tickets and scheduled demo requests.
  • Legal & Regulatory Compliance: Fulfilling tax obligations, enforcing our Terms of Service, and protecting against fraudulent or malicious activities.

4. AI & Machine Learning Data Boundaries

MeasureX AI incorporates computer vision and artificial intelligence to assist estimators in symbol recognition, scale calibration, schedule data extraction, and linear/area measurement assistance. We adhere to strict data boundaries:

  • No Model Training on Customer Drawings: Your proprietary blueprints, project documents, and estimates are never used to train, retrain, or improve public or shared foundational machine learning models.
  • Ephemeral & Isolated Processing: Vision analysis requests are processed ephemerally in isolated execution slots and bound strictly to your authenticated session.
  • Enterprise Data Privacy: When leveraging AI vision infrastructure (such as Google Cloud Vertex / Gemini Enterprise API), data is transmitted over encrypted TLS channels under zero-data-retention and commercial non-training terms.

5. Information Sharing & Third-Party Disclosures

We do not sell, rent, trade, or monetize your personal information or customer content under any circumstances. We disclose data only to trusted service providers who adhere to strict confidentiality and security standards:

  • Cloud Infrastructure & Storage: Cloudflare (R2 object storage, edge caching, DDoS protection) and secure cloud server hosting providers.
  • Payment Processors: PCI-compliant billing gateways (Razorpay, Stripe) for secure payment processing.
  • Transactional Communications: Secure SMTP email delivery providers for system alerts and verification emails.
  • Legal Requirements: When required by enforceable law, court order, or governmental regulation to protect the rights, property, and safety of SmartX, our users, or the public.

6. Data Retention & Deletion

We retain your project files and account details for as long as your account remains active and in good standing. You retain complete control over your data lifecycle:

  • Customer-Initiated Deletion: Company managers and administrators can delete projects, takeoff items, and uploaded drawings directly within the application. Once deleted, references are removed from active tables and marked for permanent purge from cloud storage.
  • Account Closure: Upon account termination, your data is scheduled for irreversible deletion from our production databases, subject only to necessary legal, tax, or accounting retention obligations.
  • Encrypted Backups: Automated disaster recovery database snapshots are retained on a rolling cycle and automatically overwritten.

7. Regional Privacy Rights & Compliance

SmartX serves construction firms globally across the USA, UK, Canada, Australia, India, and the Middle East. We support regional data subject rights:

A. UK & European Economic Area (GDPR)

Under the UK General Data Protection Regulation and EU GDPR, you have the right to access, rectify, port, restrict, or erase your personal data, as well as the right to object to processing and lodge a complaint with your supervisory authority.

B. United States (CCPA / CPRA & State Privacy Laws)

California residents and users in states with comprehensive privacy laws have the right to know what personal information is collected, request deletion, correct inaccurate data, and opt out of any data sharing (we do not sell your data). We do not discriminate against users exercising their privacy rights.

C. Canada (PIPEDA), Australia (Privacy Act) & India (DPDP Act)

We comply with Canadian PIPEDA principles, the Australian Privacy Principles (APPs), and the Indian Digital Personal Data Protection Act regarding fair processing, transparency, accuracy, and individual consent.

To exercise any of your privacy rights, please contact us at info@smartxcc.com. We respond to all verified requests within statutory timeframes.

8. Cookies & Tracking Technologies

We use essential and functional cookies necessary for authentication, session management, and CSRF protection. We do not use third-party behavioral advertising trackers. You can adjust your browser settings to decline cookies, though certain features of the MeasureX AI viewer and dashboard may not function properly without session cookies.

9. Children’s Privacy

Our Service is designed exclusively for commercial construction professionals, businesses, and contractors. We do not knowingly collect or solicit personal information from individuals under the age of 18.

10. Updates to this Policy

We may update this Privacy Policy periodically to reflect enhancements in software features, security controls, or legal requirements. Material updates will be highlighted on this page with an updated “Last updated” timestamp and, where appropriate, communicated via email or dashboard announcement.

11. Contact Us

If you have questions, feedback, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Team: