Privacy Policy
Last updated: October 23, 2026
1. Information We Collect
ProPunch collects information you provide when creating an account, including your name, email address, organization name, and role. We also collect data generated through your use of the platform, such as checklist entries, photos, voice notes, and project information.
If you request a demo, we collect the details you submit on the form, including your name, work email, company, role, expected volume, the tools you use today, any message or phone number you add, and the page you came from. We use them only to reply to your request. While you browse our site we keep any campaign tags from the link you arrived on in your browser’s session storage for up to 24 hours, so your request can be matched to the campaign. It holds no personal information and is cleared when you close the tab. We keep them until you ask us to delete them; email security@propunch.com to do so.
If you ask to watch our walkthrough film, we store your name, work email, company, the page you came from, any campaign tags on the link, and your browser’s user agent. We use them to follow up about a demo. If you submit again within seven days we update the same record rather than creating a new one. Resend delivers our internal notification emails, and Google Analytics measures how our pages are used. If you reach us through a Google ad, Google Ads records that you visited and whether you submitted a request, so we can measure which ads work. We use this only to measure our advertising. We keep these details until you ask us to delete them; email security@propunch.com to do so.
2. How We Use Your Information
We use your information to provide and improve the ProPunch platform, including managing your projects, generating reports, sending notifications, and ensuring the security of your account. We do not sell your personal information to third parties.
3. Data Storage and Security
Your data is stored securely using Firebase (Google Cloud Platform) with encryption at rest and in transit. Photos and media are stored in Firebase Storage with organization-scoped access controls. We implement role-based security rules to ensure users can only access data within their organization.
4. Data Sharing
We share data only as necessary to provide the service: with Firebase/Google Cloud for infrastructure, with Resend for email delivery, and with Vercel for hosting. We do not share your project data, photos, or checklist information with any third parties for marketing or advertising purposes.
5. Data from Connected Services (Procore and CompanyCam)
If your organization connects ProPunch to Procore or CompanyCam, we access data from those services through their APIs, and only for the projects you link. With Procore, punch items are mirrored in both directions so your team does not re-key the same finding twice. With CompanyCam, ProPunch sends photos to your project and shows a few of its photos back to you; nothing is imported. We never sell this data, never share it with any other customer, and never build a copy of it beyond what the connection needs.
What we read from Procore. Punch items and their attachment files, Locations, project and company names, and the profile of the Procore user who authorizes the connection. We do not read financials, RFIs, submittals, daily logs, or directory records. Drawings are read only when a project manager chooses to import them.
What we write to Procore. Punch items and photo attachments for failed checklist items, Location nodes for the buildings and units in a linked project, and the webhook subscriptions that let Procore notify us of changes. Every write is made as the authorizing user and never exceeds that user’s own Procore permissions.
CompanyCam. An admin connects CompanyCam with an access token, which is stored encrypted. For each project you link, ProPunch sends photos from failed items, deliveries, appliance labels and walkthrough still frames to the linked CompanyCam project, each with a text caption. We read project names, IDs and the four most recent photo thumbnails from linked projects, only to show them read-only inside ProPunch. We do not import CompanyCam photos or items into ProPunch records. Unlinking a project stops ProPunch sending to it.
How it is protected. Procore OAuth tokens and CompanyCam access tokens are encrypted at rest with AES-256-GCM using a key held in Google Secret Manager, are handled only on our servers, and are never sent to a browser. Connected-service data is stored inside your organization’s boundary under the same access rules as the rest of your data, and is not sent to any language model.
Retention. For Procore, mirrored punch items, re-hosted attachment photos, and Procore identifiers are kept while the project is linked. They are deleted when you disconnect the integration, when an admin removes a project’s Procore data, or when you ask us to purge them. Unlinking a Procore project on its own stops the mirror and hides it but does not delete it, so a re-link never loses history. Tokens are revoked at the provider and deleted the moment you disconnect. Sync and audit logs, which record what the integration did but contain no punch item content or tokens, are kept for 12 months. Drawings you import become your own project documents and follow the project, not the connection.
Requesting deletion. You can disconnect Procore or CompanyCam yourself at any time from Admin Settings, or remove the app from Procore’s App Management. To have us purge connected-service data for your organization or a single project, email support@propunch.com from an address on your account. We acknowledge within two business days, confirm the requester’s authority, complete the deletion within 30 days, and confirm in writing what was removed. Deleted data may persist in access-restricted backups for up to 30 days before it ages out.
6. Your Rights
You may request access to, correction of, or deletion of your personal data by contacting us at support@propunch.com. Organization admins can manage user accounts and data through the admin panel.
7. Contact
For privacy-related questions, contact us at support@propunch.com.