Privacy Policy

Last updated: September 30, 2026

This Privacy Policy explains how Build Less ("we", "us") collects, uses, shares and protects personal information, in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Build Less is operated by Walter A. Elemino, a sole proprietor registered in the Philippines.

1. What we collect

Information	Examples	Why
Account details	Name, email, mobile number, position, company name	To create your account, sign you in, and contact you about your account
Workspace data you enter	Projects, estimates, expenses, materials, workers and payroll, clients, suppliers, documents and photos	To provide the Service to your company
Payment information	Plan chosen, amount, payment reference, proof-of-payment image; for online payments, the transaction status from our payment partner	To confirm payments and keep billing records. We do not store full card numbers.
Security and usage data	Sign-in times, device identifier, IP address, browser type, an audit log of changes	To keep accounts secure, prevent abuse (for example one free trial per person), and troubleshoot
Marketing source	The ad or link you came from (UTM tags), referral agent code	To know which channels work and to credit referral agents
Support messages	Messages and attachments you send us	To help you
Referral agents	Name, mobile, payout account details	To run the referral program and pay commissions

For free-trial checks we store fingerprints (one-way hashes) of email, mobile number and device, not the values themselves.

2. Personal information you enter about others

Your workspace may contain personal information about your workers, clients and suppliers (for example names, contact details, government ID numbers or rates). Your company decides what to record and is the personal information controller for that data; we process it on your behalf only to provide the Service. Please record only what you need and have a lawful basis for.

3. Legal basis

We process personal information to perform our agreement with you, to comply with legal obligations (for example tax records), for our legitimate interests in securing and improving the Service, and, where required, with your consent (for example optional marketing).

4. Who we share it with

We do not sell personal information. We share it only with service providers that help us run the Service, under confidentiality and data-protection obligations:

• Cloud hosting (servers where the Service and its database run)
• Cloudflare (domain name and network services)
• Brevo (sending sign-in codes and account emails)
• PayMongo and the payment channels you choose (processing online payments)
• Google (only if you choose "Sign in with Google")

Some providers may process data outside the Philippines; we use providers with appropriate safeguards. We may also disclose information when required by law or to protect rights and safety. A referral agent sees only the company name and status of workspaces they referred, never their data or contacts.

5. How long we keep it

We keep account and workspace data while your account is active. When you ask us to delete your workspace, we delete it within 30 days, except billing and tax records we must keep by law (generally up to 10 years), and backup copies that expire in the normal backup cycle. Security logs are kept for a limited time.

6. How we protect it

Each company's data is kept in its own workspace and separated from every other company. We use encrypted connections (HTTPS), role-based permissions, password-less sign-in, PINs for sensitive actions, audit logs and regular backups. Our own access to a workspace is limited to support needs and is logged.

7. Your rights

Under the Data Privacy Act you have the right to be informed, to access, to correct, to erase or block, to object, to data portability, and to be indemnified for damages, as well as the right to file a complaint with the National Privacy Commission (privacy.gov.ph). To use these rights, contact us using the details below; we may need to verify your identity. If your information is in a company's workspace, we may refer your request to that company.

8. Cookies and local storage

The app uses your browser's local storage to keep you signed in and remember your preferences. Our marketing page may use analytics and advertising cookies (for example Google Analytics or Meta Pixel) to measure visits; you can block them in your browser settings.

9. Children

The Service is for businesses and is not directed to anyone under 18.

10. Changes

We may update this policy and will post the new version here with a new date. For significant changes we will notify account owners.

11. Contact — personal information requests