Privacy Policy
CivilVault is project management software for civil construction contractors, operated by ReVault LLC ("we", "us") in Waukesha, Wisconsin. This policy explains what we collect when you use civilvault.com and the CivilVault application, why, and what control you have over it.
What we collect
- Account information — your name, work email, company name and role, and the password hash used to sign you in.
- Project data you enter or upload — bid tabs, line items, quantities, change orders, pay applications, contacts, schedules, notes, plans, specifications, photos, invoices, locate tickets and similar documents. This is your company's data; we store and process it only to provide the service.
- Usage and diagnostics — which parts of the application you use, the build you are on, your browser or device type, and error reports (including a short trail of recent screens and console messages) so we can fix problems. Feedback you send may include a screenshot you chose to attach.
- Early access requests — the name, company, email, trade and notes you submit on civilvault.com.
How we use it
- To run CivilVault for you: store your projects, generate pay applications and other outputs, and keep your team's data in sync.
- To read documents you upload. Document contents are sent to our document-reading provider solely to extract the fields you asked for (for example, line items from a bid or the clear date from a locate ticket). They are not used to train models.
- To send transactional email — invitations, password resets, notifications you have turned on. We do not send marketing email to CivilVault users without asking first.
- To diagnose and fix errors, and to understand which features are used.
Share links
When you create a share link, the project information you selected becomes viewable by anyone who has the link, until it expires or you revoke it. You choose what each link exposes, including whether costs are shown. We record when a link is viewed so you can see its activity.
Who we share data with
We do not sell your data and we do not share it with advertisers. We use a small number of service providers to operate CivilVault, each bound by their own terms and security commitments: Supabase (database and authentication), Cloudflare (hosting, file storage and edge services), Anthropic (automated document reading), Resend (email delivery) and, when billing launches, Stripe (payments). We may disclose information if required by law or to protect the rights and safety of our users.
Retention
Your project data stays in CivilVault for as long as your account is active. If you close your account, we delete it within 30 days, except where we must retain records for legal or accounting reasons. Error reports and diagnostics are kept for a limited time and purged automatically.
Security
Data is encrypted in transit and at rest. Access to project data is enforced per company and per project at the database level. Files are stored in private storage and served only through short-lived signed links. No system is perfectly secure; if we learn of a breach affecting your data we will tell you promptly.
Your choices
- Update your name, title and company details in Settings.
- Export your project data on request, and delete your account by contacting us.
- Revoke any share link at any time.
- Ask us anything about your data at [email protected].
Children
CivilVault is a business tool and is not directed at anyone under 18.
Changes
If we change this policy in a way that matters, we will note the new effective date here and tell active users by email.