Skip to content
← Home
Legal

Privacy Policy

Effective October 22, 2026. What Aggrado ("Aggrado", "we") collects through Aggrado's website, phone apps and text messages, why, and who else handles it.

Who this covers

Aggrado is software that construction businesses (“customers”) buy: Aggrado Site (Bid, Job and Field), Precast, Supply, Electric and Engineering, on the web at www.aggrado.com and in two phone apps: Aggrado, for work in the field, and Aggrado Deliver, for the drivers and yards of precast plants and supply houses. Each also runs in a phone's browser (www.aggrado.com/phone and /drive). The people who use it are the customer's staff and, where the customer invites them, people it works with, such as its own customers.

Most of the information in Aggrado belongs to the customer company and is handled on its instructions. This policy explains what we collect, why, and who else touches it.

What we collect

  • Account information. Your name, email address and password (held by our sign-in provider, never by us in readable form), the companies you belong to and your role in each, your time zone and your notification choices.
  • Business records your company enters. Estimates, jobs, budgets, time cards and clock punches, daily reports, quantities, equipment, orders, deliveries, invoices, change orders, pay applications, certificates, incident reports and the like. An employee's record can include their name, phone numbers, trade, pay classification, hours, certifications and, if the company keeps an HR file, items such as a home address, emergency contacts, date of birth and driver's license details. Dates of birth and license numbers are stored encrypted with a separate key. Aggrado does not store Social Security numbers, bank account or direct-deposit details, or tax withholding forms.
  • Contacts. The names, emails and phone numbers a company keeps for its own customers, suppliers and other businesses it works with.
  • Location. Only if you allow it, and only while the app is open:
    • In the Aggrado app, when you clock in, switch jobs, sign in to a time card or clock out, fill in a form, take a site note, set a job's location, or a daily report looks up the weather, the phone's location at that moment is recorded. Nothing is recorded between those moments.
    • In Aggrado Deliver, while a load you're driving is on the road (from leaving the yard until it arrives at the site) and the app is open on your screen, the phone sends the truck's position about once a minute, or every 150 metres: the time, the place, and how accurate and how fast the phone says it is. It stops when the load arrives, and whenever the app is closed or in the background. Where a load is signed for is recorded with the signature. A hired driver using a delivery link in the browser shares position the same way while that page is open.
    • Who sees it: a punch's or a record's location is seen by the people at your company whose roles let them see that record. A truck's position is seen by the plant or supply house that shipped the load (its dispatchers and office) and, while the load is on the road, by the customer it's going to, on its tracking link or portal, as how far out the truck is and its last reported position.
    • How long: a punch's or a record's location is kept with it, as part of the company's records, for as long as those are kept (see How long we keep it). A truck's positions on the road are kept for 12 months from when each was taken, then deleted; after that the load keeps only the place where it was signed for, with the signature, the name and the time.

    Neither app tracks location in the background, when it's closed, or between loads.

  • Shared tablets. A company can set a tablet up as a clock station or a truck tablet. There you sign in with your name and a PIN rather than your account: a punch or a shift records which tablet it was made on, and each PIN tried there is logged so a PIN can lock after five wrong tries. Your PIN is kept only in a scrambled (hashed) form and is never shown to anyone, the office included.
  • Photos, files and signatures. Photos you take or choose, plans and documents you upload, and signatures drawn on a screen. The copies we keep don't carry a photo's embedded location or camera details.
  • Camera and microphone. Used only while you take a photo, scan a code or tap the microphone. Speech is turned into text by your phone's or browser's own speech service (Apple or Google, on the device where it can); Aggrado never receives or keeps audio, only the text.
  • Technical information. Our hosting provider logs requests (IP address, time, the page or call, errors) for security and to fix problems. We don't use advertising trackers, sell personal information, or build advertising profiles.

Text messages

Aggrado sends a few kinds of texts for the companies that use it: schedule changes to crew members, delivery updates to the people receiving them, and service-visit updates to customers. How they work is set out on Text messages from Aggrado.

  • A company records your mobile number and that you agreed to its texts. Aggrado then texts you once to ask, and sends nothing more until you reply YES. We keep that you were asked, when, and when you replied YES or STOP.
  • We keep a record of each text: the number, the words, when, and whether it was delivered.
  • We do not sell, rent or share your mobile number or your agreement to receive texts with third parties or affiliates for their marketing or promotional purposes. They are shared only with Twilio, which delivers the texts for us.
  • Reply STOP to any text to stop them all, START to start again, HELP for help. Message and data rates may apply.

Why we use it

To provide the service your company signed up for; to keep it secure; to send the notices, emails and texts you or your company have chosen; to support you when you ask; to bill the company; and to meet legal obligations. We don't use your company's data to train AI models.

Who else handles it

These service providers handle information for us, only to provide their service:

ProviderWhat forWhat they receive
VercelHosting the website and serversEvery request, and the data it carries
SupabaseSign-in and the databaseAccount information and all stored records
CloudflareFile storage (R2), and the check that a sign-in or sign-up isn't a bot (Turnstile)Photos, plans and documents; the browser's answer to the check
ResendSending emailRecipient addresses and the message, with attachments
TwilioSending text messages, once a person has replied YESThe mobile number, the text, and the replies YES, STOP, START and HELP
StripeBilling a company for its subscription, and online payments a company takes from its own customersBilling contacts and payment details, entered on Stripe's own pages; Aggrado never sees a full card or bank account number
Intuit (QuickBooks Online)Accounting sync, only when a company connects itThe records the company chooses to sync, such as bills, invoices and payments
AnthropicReading documents, drawings, tickets and photos, and spoken entries turned to text, when a company turns these AI features onThe document or a reduced copy of the photo (without its location), or the text of what was said. Not used to train their models under their commercial terms
Google CloudProcessing drone survey photos, when a company uses drone flights; converting uploaded DWG drawings to DXFThe flight's photos and their positions; the DWG, for the minute it takes to convert, with nothing kept there
U.S. National Weather Service and NOAAThe day's weather on a daily report, and past rainfall for a job's areaA job's approximate location, with no name or account
Google MapsShowing jobs and listings on a map, and finding a job's location from its addressThe address or area being shown, and the map request from your browser
Expo, Apple and GoogleDelivering phone notifications (Expo passes them to Apple and Google)A device token and the notice's text
Apple and GoogleTurning speech into text on the phone or in the browser, when you tap the microphoneThe audio, processed by the phone or browser's own speech service
Oracle (NetSuite)Accounting sync for a supply house, only when it connects NetSuiteThe records the company chooses to sync

Information is stored in the United States. We may also disclose information when the law requires it.

Sharing inside Aggrado

A company's records are visible to the people it gives access to, according to their roles. A company can share chosen documents (pay applications, change orders, proposals, delivery tickets, tracking pages) through links it can revoke, and companies connected in Aggrado see only what is deliberately sent to them.

How long we keep it

As long as the company's account is active, and afterwards only as long as needed to close the account, settle billing, and meet legal obligations, unless the company asks us to delete it sooner. Text and email records are kept with the company's records. A truck's positions on the road are kept 12 months, then deleted, keeping only where each load was signed for.

Your choices

  • Delete your account under Account on the web, in the Aggrado app or in Aggrado Deliver (how). Your company keeps its business records, which it may be required to retain.
  • Texts: reply STOP to any Aggrado text.
  • Notifications: choose what reaches you by email or push under Account › Notifications.
  • Location, camera, photos and microphone: allow or refuse them in your phone's settings. In Aggrado Deliver, refusing location only keeps the truck off the dispatcher's map; deliveries still work.
  • Access, correction or deletion of your personal information: ask your company's Aggrado administrator, or write to us at the address below.

Security

Encryption in transit and at rest with our providers; files in a private bucket reached only through short-lived signed links; share links that are long and random, most of them stored only as hashes; role-based access inside each company; sensitive HR details encrypted again with a separate key; and every look at an HR file recorded.

Children

Aggrado is for businesses and isn't directed to anyone under 16.

Changes and contact

We'll post changes here and, for significant ones, tell account holders by email before they take effect. Questions: Aggrado, support@aggrado.com.