Privacy Policy

Welcome to KomeshaBuild (referred to as "KomeshaBuild", "we", "us", or "our"). We operate a premium collaborative quality assurance (QA), standards directory, and commissioning (Cx) workspace accessible via web and mobile platforms.

This Privacy Policy describes how we collect, use, store, and secure your personal information, user profiles, and construction project files when you access our platforms. By creating a KomeshaBuild account, syncing field records, or uploading architectural plans, you consent to the data collection and processing methods outlined in this Policy.

To provide standard-compliant inspection reporting and real-time on-site verification tools, we collect several categories of information:

• Identity & Account Details: Name, professional title, corporate affiliation, verified email address, phone number, and account access credentials.
• Google OAuth Profile Data: If you select our single-sign-on service using Google OAuth, we capture your unique Google identifier, public avatar image, and verified email address to provision your profile securely.
• Construction Site & Project Logs: Blueprints, structural plans, photographic records of site conditions, QA checklist responses, concrete slump logs, structural steel inspection items, safety logs, team assignments, and compliance ratings.
• Device & Connection Information: IP addresses, browser version, operating system, unique device identifiers, network connection states, and local device clock coordinates (essential for sorting chronological field audits).

We use the collected data strictly to maintain, evaluate, and optimize the KomeshaBuild platform. Specifically, we process your information to:

• Set up, authenticate, and manage your account credentials using safe authorization layers.
• Establish and track project structures, including logging cement tests, rebar specs, and wall plumb tolerances linked directly to your active supervisor profile.
• Generate professional, branded PDF inspection reports for city council review or structural engineers’ occupancy certificates.
• Facilitate live team collaboration, allowing developers to assign localized quality issues to specific subcontractors, accompanied by visual photos and coordinate markers.
• Power our semantic AI Building Code Search, matching plain-text queries against regional construction standards to return verified guidelines.

We leverage premium, distributed cloud environments to manage and store your construction data:

Authentication and Identity: All session keys, password hashes, web tokens, and security credentials are managed securely by Supabase Auth. Passwords are encrypted before transit and are never viewable by KomeshaBuild personnel.

Cloud Storage and RLS: Blueprints, photographs, drawings, concrete test charts, and structural sheets are stored in secure cloud objects. We implement strict Row-Level Security (RLS) so that only authenticated members of your specific workspace or approved trade subcontractors have access to read or update project records.

Construction sites are often located in remote areas or deep basement structures where network signals are weak or non-existent. To ensure seamless operation, the KomeshaBuild application utilizes offline browser and device caching:

Local Indexing: When field supervisors log issues, structural steel alignment specs, or concrete slump details, the data is saved locally on the user's browser storage or mobile storage layer.

Secure Cloud Sync: The locally stored inspections, photographs, and records are queued internally. The moment a mobile device or tablet detects a stable cellular or Wi-Fi network, KomeshaBuild securely uploads and syncs the records to the main cloud databases.

We do not sell, trade, or rent your personal profile information or project logs to advertising networks or external data brokers. We share data only with trusted infrastructure providers required to operate the platform:

• Supabase (Authentication & Database): For storing core data records under secure databases and routing platform events.
• Google (OAuth Service): Solely to facilitate secure single-sign-on verification.
• Vector Indices & AI Services: To process semantic questions posed to our AI Building Code assistant. No proprietary blueprint drawings or project quality scores are used to train general foundation models.

We store your data as long as your workspace account remains active or as needed to provide platform services. You retain complete control over your historical records:

Workspace Deletion: Workspace administrators may request the deletion of individual project files, blueprints, safety logs, or full project folders at any time.

Account Deletion: You can submit a deletion request through your account settings portal or directly to our support channel. Upon verification, we will delete your Supabase profile information, uploaded construction files, and field reports from our active databases within thirty (30) days.

We provide all users, site supervisors, and administrators with robust tools to access, export, and modify their stored details:

• Access & Export: You can download comprehensive summaries of your logged slump tests, rebar reports, and QA inspection outcomes in standard CSV or PDF structures.
• Correction: You can edit profile names, assigned trade organizations, and user contact settings instantly.
• Communication Limits: You can opt-out of secondary newsletter notifications or construction insights, though critical safety alerts and password reset notifications will remain active.

KomeshaBuild operations are governed in strict accordance with the laws of the Republic of Kenya.

We align our data handling processes with the provisions of the Kenya Data Protection Act, 2019. In compliance with the Office of the Data Protection Commissioner (ODPC), we ensure that your personal data is collected for explicit, specified purposes, handled with appropriate technical safeguards, and stored with maximum integrity.

If you have questions, regulatory feedback, or data protection inquiries regarding this Privacy Policy, or if you wish to exercise your data deletion rights, please contact our official team: