Privacy Policy
Effective date: April 8, 2026 · Last updated: April 8, 2026
PourPrice Inc. (“PourPrice,” “we,” “us,” or “our”) provides a ready-mix concrete pricing and procurement platform. This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices available to you.
1. Information We Collect
1.1 Account and User Data
- Name and email address provided during registration.
- Password (stored as a bcrypt hash; we never store plaintext passwords).
- Organization name, role, and billing contact information for your account’s organization.
- OAuth profile data if you sign in via Google (name, email, profile picture URL).
1.2 Pricing and Project Data
- Concrete pricing data you submit via invoice uploads, manual entries, or the in-app quote comparison tool.
- Project names, locations, cost codes, and budget figures you enter into the platform.
- Saved search configurations (location, radius, PSI, admixture preferences).
1.3 Usage Analytics
- Pages visited, features used, search queries executed, and time spent in the application.
- Browser type, operating system, IP address, and device identifiers collected automatically via server logs and analytics tools.
- API request logs (endpoint, timestamp, response time, status code).
1.4 Voice Call Data
- Automated outbound calls made to ready-mix batch plants produce audio recordings and transcripts. These calls are made on behalf of PourPrice, not individual users.
- Structured pricing data extracted from call transcripts (price per CY, delivery fees, surcharges) is stored in our database.
1.5 Billing Data
- Payment card details are collected and processed directly by Stripe. PourPrice stores only a Stripe customer ID and subscription status—never raw card numbers or CVVs.
- Billing address and billing contact email.
2. How We Use Your Information
- Service delivery: Providing pricing search results, dashboards, quote comparisons, and integrations with third-party construction software.
- Market pricing aggregation: Invoice data you submit is anonymized and contributed to the market pricing pool used to generate aggregate pricing insights. Your organization is never directly identified in aggregate output.
- Billing and account management: Processing subscription payments, sending invoices, and communicating plan changes.
- Product improvement: Analyzing usage patterns to prioritize features, fix bugs, and improve performance.
- Security and fraud prevention: Detecting abuse, unauthorized API access, and other malicious activity.
- Legal compliance: Responding to lawful requests from public authorities.
3. Third-Party Services
PourPrice uses the following third-party services. Each is bound by its own privacy policy; links are provided for reference.
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing and subscriptions | Billing name, email, payment card data |
| Procore | Construction project management integration | Projects, cost codes, purchase orders (OAuth, user-authorized) |
| Bland.ai | Voice AI for automated batch plant pricing calls | Plant phone numbers, call scripts (no user PII) |
| AWS | Cloud infrastructure, file storage (S3), database (RDS) | All data processed and stored on AWS |
| AWS Textract | OCR extraction from uploaded invoices | Invoice images/PDFs you upload |
4. Data Retention
- Pricing records and market data: Retained indefinitely. This is the core dataset of the platform and drives trend analysis.
- Call recordings (audio): Retained for 12 months from the call date, then automatically deleted from S3.
- Call transcripts: Retained indefinitely in structured form (without audio).
- User and organization data: Retained while your account is active. Deleted within 30 days of account closure on request.
- Billing records: Retained for 7 years to satisfy tax and legal obligations, even after account closure.
- Server logs: Retained for 90 days.
5. Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request that we delete your personal data, subject to our legal retention obligations.
- Export: Receive your data in a structured, machine-readable format (CSV or JSON) via the dashboard export feature or by contacting us.
- Opt out of analytics: Contact us to disable behavioral analytics tracking for your account.
To exercise any of these rights, email privacy@pourprice.com. We will respond within 30 days.
6. California Privacy Rights (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:
- Right to know: The categories and specific pieces of personal information we have collected about you, the sources, the business purposes for collection, and the categories of third parties with whom we share it.
- Right to delete: Request deletion of personal information, subject to certain exceptions.
- Right to opt out: PourPrice does not sell personal information. We do not share personal data with third parties for their direct marketing purposes.
- Non-discrimination: We will not discriminate against you for exercising your CCPA rights.
To submit a CCPA request, email privacy@pourprice.com with the subject line “CCPA Request.”
7. Security Measures
We implement industry-standard controls to protect your data:
- Encryption at rest (AES-256) for all data stored on AWS RDS and S3.
- TLS 1.2+ for all data in transit.
- AES-256-GCM application-layer encryption for OAuth tokens and integration credentials.
- API keys stored as bcrypt hashes; raw keys displayed only at creation.
- Role-based access controls with tenant isolation at the database row level.
- For more detail, see our Security overview.
8. Cookies
We use cookies and similar technologies for session management (required for login) and analytics. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but doing so will prevent you from remaining logged in to the platform.
9. Children’s Privacy
PourPrice is a business-to-business platform. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us personal data, contact privacy@pourprice.com and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top and notify account administrators via email at least 14 days before material changes take effect.
11. Contact Us
For privacy-related inquiries:
PourPrice Inc.Attn: Privacy
privacy@pourprice.com