LEGAL

Privacy Policy

How Submittal Stack handles project data, uploaded documents, and operational workflows.

Last updated: May 2026

Information We Collect

Submittal Stack collects information necessary to operate construction submittal workflows — including account details, project metadata, and files you upload for packet generation.

We collect only what is required to deliver the platform: authentication data, workspace activity, and operational records tied to your projects.

Uploaded Construction Documents

When you upload PDFs and related construction documentation, those files are stored securely to support merging, preview, ordering, and export within your workspace.

Uploaded documents remain your property. Submittal Stack does not sell, license, or redistribute customer documents to third parties for marketing or unrelated commercial purposes.

Account Information

Account information may include your name, email address, organization details, and authentication identifiers managed through our identity provider.

This information is used to secure access, associate projects with the correct workspace, and support operational support requests.

How Data Is Used

Data is used to run core platform features: project libraries, document previews, packet generation, export delivery, and workflow state such as active, completed, and archived projects.

We may use aggregated, non-identifying usage metrics to improve reliability, performance, and product experience. We do not use uploaded construction documents for unrelated model training or advertising profiles.

File Storage & Retention

Project files and generated packets are stored in secure cloud infrastructure with access controls aligned to your account.

Retention follows your operational use of the platform. You may archive or manage projects within the workspace, and deletion requests can be submitted as described in Data Requests below.

Security Practices

Submittal Stack applies modern security practices including encrypted transport, authenticated access, and infrastructure controls designed for operational SaaS workloads.

For a detailed overview of platform security measures, see our Security page.

Security

Third-Party Services

We rely on trusted infrastructure and service providers for authentication, hosting, storage, and operational monitoring. These providers process data only as needed to deliver the service.

Third-party subprocessors are selected for reliability and security posture appropriate to construction documentation workflows.

Cookies & Analytics

We use cookies and similar technologies for session management, authentication, and product analytics that help us understand feature usage and system health.

Analytics are used in a restrained, operational manner — focused on improving the platform rather than cross-site advertising.

Data Requests

You may request access, correction, or deletion of account-associated data by contacting our team. We will verify requests and respond within a reasonable timeframe.

Certain records may be retained where required for security, billing, or legal obligations.

Contact Information

For privacy-related questions or requests, contact us at hello@submittalstack.com.

We will update this policy as our platform and data practices evolve. Material changes will be reflected on this page with an updated revision date.