Privacy Policy

Information we collect

• Procore identity. When a user signs in via Procore OAuth, we receive their Procore user ID, name, email address, and the Procore company they belong to. We do not collect Procore passwords.
• Procore project financials. Via the Procore API and the access tokens you authorize, we read project metadata, budgets, costs, change orders, and contract values for the projects your finance team selects.
• Estimate-to-Complete submissions. Project managers submit ETC values and notes through the Service. We store these submissions, the submitting user, and an audit trail of changes.
• Operational data. Standard server logs (IP address, user agent, request paths, timestamps) for security and debugging. Background job and webhook delivery records.
• Usage analytics. We use a product-analytics service to record how the Service is used — events such as signing in, running a WIP cycle, generating and exporting schedules, acknowledging alerts, and submitting an ETC, along with the page viewed, browser, device type, and approximate location derived from IP address. This applies across the Service’s interfaces: the application embedded in Procore, the sign-in page, the project-manager submission pages, and our public marketing website. Events are associated with the relevant user (your finance team member or the submitting project manager) and, where applicable, their Procore company.
• Session replay. On the same interfaces we capture session replays — a reconstruction of on-screen interactions such as clicks, scrolling, navigation, and page content — to diagnose problems and improve usability. Form inputs are masked by default and we do not record keystrokes, but a replay may include financial figures (such as project financials or ETC values) that are displayed on screen.

How we use information

• To run WIP cycles: pull financials from Procore, collect ETC from PMs, compute earned revenue and over/under-billing, and produce WIP schedules.
• To authenticate users and authorize access to your company’s data.
• To send transactional email (ETC request reminders, cycle finalization notices) tied to a WIP cycle.
• To understand how the Service is used — through product analytics and session replay — so we can diagnose problems and improve reliability and usability.
• To monitor, secure, and improve the Service.

We do not sell your data. We do not use your data to train third-party machine-learning models. We do not use your data for advertising.

Cookies & local storage

We use first-party cookies and browser local storage to keep you signed in and to support product analytics and session replay (for example, to associate a series of actions with the same session). These technologies are used across the Service’s interfaces, including the application embedded in Procore, the project-manager submission pages, and our public marketing website.

Sharing

We share data with a small number of infrastructure subprocessors strictly to operate the Service — cloud hosting, transactional email delivery, error monitoring, and product analytics (including session replay). We do not share your data with other customers. We do not sell your data or use it for advertising. We disclose data when legally required (subpoena, court order) and will notify you unless prohibited by law.

Retention & deletion

We retain project financials and ETC submissions for as long as your Procore Marketplace installation is active so historical WIP schedules remain reproducible. When you uninstall the Service from Procore, we revoke our access tokens and delete or anonymize your data within 90 days. You may request earlier deletion by contacting us.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete personal information we hold about you. Submit requests to the contact address below; we will respond within a reasonable timeframe and may need to verify your identity through your Procore account.

Changes

We may update this policy as the Service evolves. Material changes will be announced through the Service or by email to the primary contact on the Procore installation. The “Last updated” date above always reflects the current version.

Contact

Questions about this policy or our data practices: support@wipready.com.