Privacy Policy & Drawing Security

1. Commitment to Commercial Confidentiality

At Sitework Estimate ("we," "our," or "us"), we recognize that civil engineering drawings, geotechnical reports, proprietary unit pricing, and project bid locations are confidential commercial trade secrets. We maintain strict digital safeguards to ensure all plan sets entrusted to us remain secure.

2. Information We Collect & How It Is Obtained

When you request a sitework estimating quote or submit drawings for digital takeoff modeling, we collect:

• Contact Details: Estimator name, company name, phone number, and commercial work email address.
• Project Parameters: Project name, city/state location, bid closing deadlines, addenda revisions, and targeted CSI scope divisions.
• Plan & Surface Files: Civil sheets, grading plans, utility profiles, CAD/LandXML files, geotechnical boring logs, and architectural site drawings.
• Technical Telemetry: Standard web server logs including IP addresses, browser types, and session duration to ensure secure transmission and monitor website performance. We do not engage in invasive third-party cross-site advertising tracking.

3. The Competitive Bid Firewall Policy

In the heavy civil and earthmoving industry, multiple excavation or utility subcontractors frequently submit bids to the same general contractor on high-profile public or private projects. We enforce a strict Competitive Bid Firewall Protocol:

• Isolated Workspaces: Each contractor engagement is maintained in an isolated, encrypted folder directory. Estimators working on a specific client project are barred from accessing or referencing files from competing bidders.
• Proprietary Pricing Protection: Subcontractor unit costs, labor production rates, crew compositions, and markup percentages are never shared, discussed, or compared across clients.
• Independent Surface Verification: While geometric volumes of the physical site terrain are based on public civil drawings, every takeoff package is customized to each individual contractor's specific scope boundaries, equipment capabilities, and trade inclusions.

4. Technical Data Protection & Encryption Standards

We deploy multi-layered enterprise cybersecurity measures to protect your digital construction assets against unauthorized access, loss, or corruption:

• Encryption in Transit: All drawing uploads, plan downloads, and web form submissions are encrypted using Transport Layer Security (TLS 1.3 / SSL) with 256-bit certificates.
• Encryption at Rest: Stored AutoCAD drawings (.dwg), LandXML surfaces, and spreadsheet files are secured using AES-256 bit hardware-level encryption across our workstation drives and secure cloud backup environments.
• Role-Based Access Controls (RBAC): Only the specific civil modeler and senior QC auditor assigned to your project have authorization to open or process your drawing files.
• No Public AI Training: Your drawings, custom unit cost databases, and takeoff spreadsheets are never fed into public commercial AI models or external data scrapers.

5. Non-Disclosure Agreements (NDAs) & Client Ownership

We routinely execute contractor-provided Non-Disclosure Agreements (NDAs) prior to downloading proprietary developer or government infrastructure bid documents. If your project requires an executed NDA before transmitting CAD or plan sets, please email it directly to fandkestimations@gmail.com.

The client retains 100% intellectual property ownership of all submitted drawings, CAD linework, geotechnical reports, and client-specific bidding configurations.

6. Document Retention & Permanent Purge Requests

Following project delivery, drawing sets and generated surface models are archived in access-restricted storage for a default window of 180 days. This retention period allows us to quickly model project addenda, provide scope leveling support during GC buyout, or generate machine control files if your bid is successful.

Contractors have the right to request the immediate, permanent deletion of their project files at any time upon written notice. Once requested, all local copies, surface models, and cloud backup archives are permanently purged from our infrastructure within 5 business days, and a formal confirmation of destruction is issued.

7. Zero Sale of Personal or Commercial Information

We operate on a transparent B2B service model. We do not sell, rent, monetize, or trade your contact information, contractor business profile, or project data to lead aggregators, material suppliers, or marketing third parties under any circumstances.

8. State-Specific Commercial & Consumer Privacy Rights

In compliance with state privacy statutes including the California Consumer Privacy Act (CCPA/CPRA), the Virginia Consumer Data Protection Act (VCDPA), and the Texas Data Privacy and Security Act (TDPSA), commercial clients and representatives maintain explicit rights:

• Right to Know & Access: You may request a detailed report of all personal contact records, plan files, and transaction histories retained within our systems.
• Right to Rectification: You may update or correct erroneous business contact details or project metadata.
• Right to Opt-Out: Because we never sell or share commercial data for cross-context behavioral advertising, no opt-out request is required to prevent data brokering.
• Right to Non-Discrimination: Exercising any statutory privacy right will not affect quoting priority, pricing tiers, or service levels provided to your construction firm.

9. Cybersecurity Incident Response Protocols

While we implement defense-in-depth security architectures, in the unlikely event of an unauthorized system intrusion or security incident affecting client plan assets:

Sitework Estimate will notify affected commercial clients via email and direct phone communication within 72 hours of incident confirmation. Our notification will outline the nature of the breach, affected plan files or contact details, remediation measures deployed, and recommendations to safeguard active bidding positions.

10. Technical Infrastructure & Secure Subprocessors

To deliver rapid 3D modeling and reliable web performance, we utilize enterprise cloud hosting and security infrastructure partners that comply with SOC 2 Type II and ISO 27001 certifications:

• Hosting & Edge Delivery: Cloudflare / Vercel (Edge security, DDoS mitigation, web application firewall).
• Encrypted Cloud Storage: Amazon Web Services (AWS S3 with SSE-KMS 256-bit encryption).
• Email & Communication: Google Workspace Enterprise (TLS 1.3 encrypted client correspondence).

11. Contractor Security Review & Compliance Audit Rights

Commercial builders, general contractors, and government infrastructure prime bidders working under federal or municipal cybersecurity mandates (such as CMMC or NIST SP 800-171 guidelines) may request documentation certifying our digital security posture. Upon execution of a mutual confidentiality agreement, we provide our cybersecurity framework summary, encryption architecture details, and verification of our isolated project directories.

12. Contact Our Data Security Officer

If you have questions regarding our data privacy protocols or wish to transmit an NDA prior to plan upload, contact us at: