Last updated 24 August 2026
The commitments here are enforced by how the product is built, not by policy. That is the only kind worth making. Your business data never reaches us because nothing in the product sends it anywhere.
Construction Ops is operated by [LEGAL ENTITY]. This policy covers the members portal at constructionops.us and the skill bundles you download from it.
| What | Why |
|---|---|
| Your name, email address and company name | To identify your licence. Your email is the only link between your sign-in and what you bought. |
| What you bought, when, and which bundles it entitles you to | To decide what you are allowed to download. |
| The email addresses of anyone else who signs in under your account | So you and we can see who has access. |
| A record of every download: which bundle, which version, when, and a salted hash of the IP address it came from | To enforce the download allowance and to investigate a leaked copy. The IP address itself is never written down — only an irreversible hash of it. |
That is the complete list.
Your bids. Your pricing. Your contacts, contracts, project data, financials, client list, drawings, or estimates. None of it passes through our servers, because none of the skills send it anywhere.
Everything a skill learns about your business lives in files in your own workspace, on your side of the line. If you cancel, stop paying, or ask us to delete your account, that context stays with you. We could not hand it over if someone asked us to, because we never had it.
Every bundle you download carries a copy ID that identifies your account. It exists so that if a bundle turns up somewhere it should not, we can tell whose copy it was. It does not phone home, it does not track you, and it does not affect how anything runs.
Customers on Contract Stackr can use a connector we run. When a skill uses it, your CRM data passes through our infrastructure to reach you. In that case:
If that arrangement does not suit you, do not connect it. Every skill produces its full result without any connector at all. That is a design rule, not a courtesy.
We send no mail from the platform itself. Clerk sends sign-in mail. Everything else — welcome, onboarding, release notes — comes from our marketing system. No behavioural tracking pixels.
The portal sets what Clerk needs to keep you signed in. There is no advertising network on this site, no third-party analytics, and no cross-site tracking.
| Who | What they hold |
|---|---|
| Cloudflare | Hosting, database, file storage |
| Clerk | Sign-in. Your email address and login history, nothing else. |
| Stripe | Payments. They hold your card details; we never see them. |
| GoHighLevel | Our email to you: welcome, onboarding, product updates |
That is the whole list, and none of them ever receive your business data. What we hold about you is an email address, what you bought, and what you downloaded.
Account and purchase records are kept for as long as your licence exists, and after that for as long as we need them for tax and accounting. Download records are kept while they are needed to enforce your allowance and to investigate misuse.
Email us and we will tell you everything we hold about you, correct it, or delete it. Given how short the list in section 2 is, this is a quick conversation. Deleting your account removes your access to the portal; what you already downloaded is yours and keeps working.
Sign-in is handled by Clerk and verified on every request against their published signing keys. Download links are single-use and expire after fifteen minutes. Download IP addresses are stored only as a salted hash. We hold no payment details.
We may update this policy. If we make a material change we will tell you by email at the address on your account.
Email support@thesosteam.com. If you need a signed data processing agreement for a public-sector client, ask — that is a normal request in this industry and we would rather have it on file.