Privacy Policy
Last updated: [EFFECTIVE_DATE]
1. Who we are
Konstruktly is a white-label B2B platform that real estate developers use to manage buyer relationships during construction. Depending on the data:
- The developer who invited you (the "Developer") is the data controller for the project, unit, selection, document and progress data they manage about you.
- [CONTROLLER_ENTITY] ("Konstruktly", "we") operates the platform as a data processor on the Developer's behalf, and is the controller for the platform account and operational data described below.
If a Developer has published its own privacy policy, that policy governs the data it controls; this page describes the platform's processing.
2. Data we process
- Account data — name, email address, role, hashed password.
- Project data — units, material selections, change orders, construction progress, and uploaded documents and photos associated with your unit.
- Operational data — audit logs, notifications, and support correspondence.
3. Cookies and local storage
We do not use advertising or tracking cookies, and we do not set any HTTP cookies. The apps store the following strictly-necessary / functional data in your browser's local storage and caches to keep you signed in and the app usable:
| Stored item | Purpose |
|---|---|
| Access & refresh tokens | Keep you signed in (authentication) |
| Language & theme preference | Remember your display choices |
| Branding cache | Show your developer's brand instantly on load |
| Service-worker cache | Offline / faster loading of the app |
| Web-push subscription | Deliver notifications you opted into |
Because all of this is strictly necessary to provide the service you requested, no consent banner is required under the ePrivacy Directive.
4. Legal basis & purposes
We process account and project data to perform the contract between you and the Developer and to operate the platform (legitimate interest in providing a secure, functional service). We process support correspondence to respond to your requests.
5. Sub-processors
- [HOSTING_PROVIDER] — application and database hosting.
- Object storage — uploaded documents and photos.
6. Retention
We retain personal data for the duration of the relationship between you and the Developer and as required to comply with legal obligations, after which it is deleted or anonymised. [RETENTION_DETAIL]
7. Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data. To exercise these rights, contact the Developer (controller) or us at [CONTACT_EMAIL]. You also have the right to lodge a complaint with a supervisory authority ([SUPERVISORY_AUTHORITY]).
8. International transfers
[INTERNATIONAL_TRANSFER_STATEMENT — describe whether data leaves the EEA and the safeguards in place, e.g. Standard Contractual Clauses.]
9. Contact
[CONTROLLER_ENTITY]
[ADDRESS]
Email: [CONTACT_EMAIL]
Data protection contact: [DPO_CONTACT]
10. Changes
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.