Privacy Policy

1. Introduction

5Bloc Inc. ("5Bloc", "we", "our", or "us") operates the 5Bloc construction project management platform accessible at 5bloc.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Our core promises: we will never sell, rent, or trade your personal data; we use product-usage data only to analyse and improve the service; and we store your data securely. This Policy forms part of our Terms & Conditions.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address, organisation name)
• Project data (documents, RFIs, invoices, meeting notes)
• Communications and messages within the platform
• Usage data and analytics to improve the service
• Photos and files you choose to upload, such as site photos and drawings, including from the camera in our mobile apps

Mobile apps. The 5Bloc apps for Android and iOS use the same account and the same data as 5bloc.com. The camera and photo library are used only when you choose to attach a photo or file, and the apps never read your photo library in the background. The apps do not collect your location, contain no advertising, and include no third-party analytics or tracking.

When you connect third-party services (Google Drive, Gmail, Google Calendar, Autodesk), we receive OAuth access tokens that allow us to access only the data you explicitly authorise. We do not store the full contents of your emails or files — we only display them within the platform on your request.

3. Google User Data

If you connect your Google account, 5BLOC accesses the following data solely to provide in-app functionality:

• Google Drive (drive.file): Access only files and folders you explicitly select via the Google Picker in the Documents section.
• Gmail (read-only): Display your email threads within the Coordination section of the platform.
• Google Calendar (read-only): Display your upcoming calendar events on the Dashboard.

We store only your OAuth access token and refresh token in our secure database to maintain your connection. We do not share, sell, or use your Google data for any purpose other than displaying it to you within the platform.

5BLOC's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Use Your Information

• To provide, operate, and maintain the 5BLOC platform
• To send transactional emails (project updates, RFI notifications)
• To analyse how the Platform is used and to improve, secure, and develop features — wherever practical using aggregated or de-identified data
• To improve and personalise your experience
• To comply with legal obligations

We do not use your personal data for third-party advertising, and we do not use your project content to train third-party public AI models.

5. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL). Data is encrypted in transit, and OAuth tokens and other credentials are stored in encrypted form. We implement industry-standard security measures including row-level security policies to ensure you can only access your own data, and we restrict internal access to what is necessary to operate the service.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only with trusted service providers who assist in operating our platform (Supabase, Vercel, Resend, Cloudflare) and only to the extent necessary to provide the service.

7. Data Retention

We retain your data for as long as your account is active. You can delete your account at any time in the 5Bloc app (Menu → Settings → Delete account) or on the website (Settings → Profile → Delete my account); see how to delete your account. You can also email contact@5bloc.com. Deletion removes your sign-in, profile and marketplace listing; records you added to shared projects stay with that project's team without your name. Disconnecting a third-party integration (Google, Autodesk) immediately deletes the associated OAuth tokens from our database.

8. Your Rights

You have the right to access, correct, or delete your personal data. You may also revoke third-party integrations at any time from the Integrations page within the platform, or directly from your Google account settings at myaccount.google.com/permissions.

9. Regional rights

If you are in the United States: depending on your state (including California under the CCPA / CPRA), you may have the right to know what personal information we collect, request deletion, correct inaccurate information, and opt out of any sale or sharing of personal information. We do not sell or share personal information for cross-context advertising. To exercise these rights, email contact@5bloc.com.

If you are in India: you may have rights under the Digital Personal Data Protection Act, 2023, including access, correction, and erasure of personal data, subject to lawful exceptions. Contact contact@5bloc.com to make a request.

10. Cookies

We use session cookies for authentication and a first-party 5bloc_region_pick session cookie that remembers a region chosen through a link for the rest of the visit. Otherwise we show the India or United States product based on the country your connection comes from; we do not store that. We do not use tracking or advertising cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice within the platform.

12. Contact Us

For any privacy-related questions or requests, please contact us at:

contact@5bloc.com

5Bloc Inc.