This is the privacy policy for ChangeOrdersPro. We're a small construction software company built by a builder, and our approach to your data is the same as our approach to everything else: plain language, no surprises, do the right thing.
We collect three categories of information when you use ChangeOrdersPro.
When you create an account, we collect your email address, business name, password (hashed), and the role you select (GC, builder, subcontractor, etc.). This is the minimum required to give you a working account.
When you create a change order, we store the content you put into it: project details, line items, prices, schedule impact, photos you attach, descriptions, and the contact details of the client you're sending it to. We also store the signing portal session — when the client viewed it, when they signed it, from what IP address.
Standard logs: IP addresses, browser type, pages visited, time spent, errors encountered. We use this to keep the product running, debug issues, and understand which features people actually use. We do not use this for advertising profiles.
We use the information we collect to:
We do not use your change order content to train AI models. Your project data is your competitive information; we treat it that way.
We share data only with the service providers we need to run ChangeOrdersPro. We don't sell, rent, or trade your data with anyone. The categories of providers we use:
We share data with these providers only to the extent necessary for them to do their job. We have data processing agreements with each of them. None of them are permitted to use your data for their own purposes.
We may also disclose information if required by law (subpoena, court order) or to protect the rights, safety, or property of users. If we receive a legal request for your data, we'll notify you unless legally prohibited.
When your client signs a change order through ChangeOrdersPro, we capture:
This information is stored as part of the signed change order's audit trail and is included in the signed PDF that is emailed to both parties. The audit trail is what makes the signature legally defensible under the U.S. ESIGN Act and similar legislation in other jurisdictions. We retain the audit trail for as long as the change order exists in our system, and for at least 7 years after deletion to support potential dispute resolution.
We use Stripe to process all payments. When you upgrade to Pro, your card information is sent directly to Stripe and stored on their servers, not ours. We never see or store your full card number, CVC, or expiration date. We receive only a tokenized reference and metadata (last 4 digits, card brand, ZIP code) for billing administration.
Stripe is PCI-DSS Level 1 compliant — the highest level of payment security certification. Their privacy policy is available at stripe.com/privacy.
Active accounts: We retain your account data and change orders for as long as your account is active.
Cancelled or deleted accounts: When you delete your account, we retain your data for 30 days in case you want to recover it. After 30 days, we delete it from active systems. Backup copies are purged within 90 days. Audit trail records of completed and signed change orders are retained for 7 years to support legal and dispute resolution requirements (this is industry standard for e-signature platforms).
Free tier inactive accounts: Free tier accounts that are inactive for 24 months may be deleted after 60 days' notice to your registered email. Pro accounts are not subject to inactivity deletion.
We take security seriously because we have to — our customers' contracts and disputes depend on it.
No system is perfectly secure, but we treat your data with the same care we treat our own.
You have the right to:
If you're in California (CCPA) or the EU/UK (GDPR), you have additional specific rights. To exercise any of these, email privacy@changeorderspro.com.
ChangeOrdersPro is operated by Templeton Built Pty Ltd. Our primary infrastructure is in the United States and Australia. If you're using ChangeOrdersPro from outside these regions, your data will be transferred to and processed in these locations. For EU/UK users, we rely on Standard Contractual Clauses to ensure appropriate safeguards for international transfers.
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email and post a notice in the product before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of ChangeOrdersPro after the effective date constitutes acceptance of the revised policy.
Questions about this Privacy Policy, or want to exercise your data rights?
Email: privacy@changeorderspro.com
For security disclosures: security@changeorderspro.com
Mailing address: Templeton Built Pty Ltd, Adelaide, South Australia