Data processing

A summary of how Siteplume processes your organisation's data. The data processing agreement we sign with subscribed customers is the binding text; ask us for it.

Who is who

Your organisation decides what is recorded on its projects and who sees it: it is the controller. Plumeware LLC runs Siteplume and processes that data only to provide the service to you: it is the processor. The services we use for that are listed as subprocessors.

What data

• People: names, work emails, phone numbers they add, roles on projects, sign-in records.
• The project record: inspections, RFIs, NCRs, letters, logs, photos, documents, drawings, models, payments and everything else your members record, with its history.
• No special categories are asked for. Safety incident records name people by role and employer only.

What we do with it

• Store it, show it to the members your project directors allow, send the notifications and emails your members ask for, and keep the backups and archives that protect it.
• When AI features are switched on, send the text needed for an answer to the AI provider, which does not use it to train models.
• Nothing else: no advertising, no sale, no profiling.

Where and how long

In the regions of the services listed as subprocessors; ask us which before you subscribe. Records are kept for as long as your organisation's retention setting requires after a project closes; nothing is deleted automatically, and a project under legal hold cannot be changed. Checking the latest backup…

Security and help

The measures are on the trust and security page. We tell you without undue delay of a personal data breach affecting your data, help you answer requests from the people in your records, and return or delete the data when the agreement ends, except what the law or your retention setting requires us to keep.