Privacy Policy
This Privacy Policy describes how KevField ("we", "us") collects, uses, and shares personal information when you use our services.
1. Information We Collect
- Account data: name, email, company, role, profile picture.
- Project content: documents, plans, contracts, RFIs, submittals, change orders, invoices, photos, and other files you upload.
- Usage data: pages visited, actions taken, device and browser info, IP address.
- Billing data: processed by our payment provider (Stripe); we store the subscription status and last-4 digits only.
2. How We Use Information
- To provide, secure, and improve the Service.
- To generate AI summaries, briefings, and drafts on your behalf.
- To send transactional emails (invites, renewals, task reminders, security notices).
- To process payments and manage subscriptions.
- To comply with legal obligations and enforce our Terms.
3. Legal Bases (EU/UK users)
We process personal data under one or more of: (a) performance of a contract; (b) legitimate interests (e.g., service security, product improvement); (c) consent (for non-essential cookies and marketing); (d) legal obligation.
4. Sharing
We share personal data only with:
- Sub-processors that host and operate the Service (cloud infrastructure, database, email delivery, AI model providers, payment processing).
- Other members of your project workspace, according to the role-based access rules you configure.
- Authorities when required by law.
5. Data Retention
We retain account and project data for as long as your account is active. When you delete a project or close your account, we delete or anonymize associated data within 90 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).
6. Your Rights
Depending on your location you may have the right to access, correct, delete, export, or restrict processing of your personal data, and to object to certain uses or withdraw consent. To exercise these rights, email contact@kevfield.com.
7. International Transfers
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.
8. Security
We use industry-standard measures — encryption in transit, encrypted storage, role-based access control, and audit logging — to protect your data. No method of transmission or storage is 100% secure.
9. Cookies
We use essential cookies to run the Service (authentication, session, security). Non-essential cookies (analytics, product improvement) are only set with your consent via the cookie banner. You can change your choice any time by clearing site data and reopening the site.
10. Children
The Service is not intended for children under 16. We do not knowingly collect data from children.
11. Changes
We will notify you of material changes to this Policy by email or in-app notice.
12. Contact
Data protection questions: contact@kevfield.com.