Privacy Policy

This Privacy Policy explains how Claremont Labs LLC (“Mesh8”, “we”, “us”) collects, uses, and protects information when you use our construction-management application and website (the “Service”). By using the Service you agree to the practices described here.

Information we collect

Account information

When you sign in with Google, we receive and store your name, email address, profile image, and Google account identifier. If you sign in by phone, we store your phone number and use it to send you one-time login codes by SMS (message and data rates may apply). We use this information to create and secure your account and identify you within your workspace. Phone numbers collected for login are used only for authentication and account security — we do not share them with third parties for marketing, and we do not send marketing texts.

Workspace and business data

As you use Mesh8 you create records such as your company name, business type and crew size; projects and phases; customers (including their names, contacts, email addresses, phone numbers, and job addresses); workers and their trades; schedules and daily attendance; invoices and labor-cost records; and jobsite photos. This content belongs to you and is processed on your behalf to provide the Service.

Billing information

If you subscribe to a paid plan, payments are processed by Stripe. Your card details go directly to Stripe and are never stored on our servers; we keep records of your plan, subscription status, and invoices. Stripe’s handling of your payment information is described in its own privacy policy.

Technical information

We use an essential, signed cookie to keep you logged in. We may also collect basic technical data such as IP address, device and browser type, and log information needed to operate and secure the Service.

How we use information

• To provide, maintain, and improve the Service.
• To authenticate you and keep your account and data secure.
• To respond to support requests and communicate about the Service.
• To detect, prevent, and address fraud, abuse, and technical issues.
• To comply with legal obligations.

We do not sell your personal information, and we do not use your workspace content to advertise to you.

How we share information

We share information only as needed to run the Service:

• Service providers who host and operate Mesh8 on our behalf — including cloud hosting, our PostgreSQL database, and file storage and delivery (Amazon S3 and a content-delivery network) for photos.
• Google, when you choose to sign in, for the purpose of authentication.
• Stripe, our payment processor, when you subscribe to a paid plan.
• Twilio, which delivers one-time login codes when you sign in by SMS.
• Resend, which sends our transactional email — such as invites, portal links, and billing notices — on our behalf.
• Within your workspace, with other members according to the role-based access your workspace owner configures.
• Legal and safety reasons, when required by law or to protect rights, safety, and the integrity of the Service.

Data retention

We retain your information for as long as your account is active. You can request a full export of your data at any time by contacting us, and we will provide it in standard formats. After your subscription ends or your account is closed, we retain your workspace data for 90 days so you can still request an export or reactivate, then delete it — except where we must retain records (such as billing records) to meet legal obligations. You can also request deletion of your data at any time by contacting us.

Security

We use industry-standard safeguards including encrypted connections, signed and HTTP-only session cookies, and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and limit access to it.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, and residents of the EU/UK have rights under the GDPR. To exercise any of these rights, contact us at the address below.

Children

Mesh8 is a business tool not directed to children, and we do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide additional notice.

Contact us

Questions about this policy or your data? Email us at support@mesh8.app.