What we store, where it lives, who can touch it, and how to get it deleted.
GC Pro West LLC (“we”, “us”) operates Framewyre, a construction CRM sold on subscription to contracting businesses. This policy explains how we handle information in connection with the Framewyre service, the Framewyre websites, and the signup and billing flow.
Two different roles. For information about the contractor who subscribes (account owners and their users), we act as the controller. For the records a contractor stores about their own clients, leads, employees and subcontractors (“Customer Data”), the contractor is the controller and we act as a processor on their instructions. If you are a homeowner or client of a contractor who uses Framewyre, please contact that contractor directly about your data — we will refer such requests to them.
Whatever you put into Framewyre, which typically includes: leads and their contact details; clients; projects, schedules and tasks; estimates, proposals, change orders and signatures; invoices, payments and ledger entries; suppliers, subcontractors and ratings; timesheets; tools and equipment records; uploaded documents and photos; and the content and metadata of calls, SMS, voicemail and email handled through the connected communication features.
Framewyre is not designed for payment card numbers, government identity numbers, or protected health information. Please do not upload them.
Every subscribing business gets its own workspace (a “tenant”). Records are stored against that tenant, and requests are scoped to the tenant of the signed-in user, so one contractor’s workspace is not readable from another contractor’s account. We do not pool one customer’s records with another’s, and we do not sell, rent or share Customer Data with other customers.
Within our own organisation, access to production data is limited to personnel who need it to operate or support the Service, and is used only for that purpose — for example to investigate a fault you reported or to meet a legal obligation.
Where a lawful basis is required, we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where we ask for it, and compliance with legal obligations.
We do not sell personal information, and we do not use Customer Data to train general-purpose AI models. Where an AI-assisted feature is used inside your workspace, only the content needed for that request is sent to the AI provider described in section 5, for the purpose of returning that result to you.
We use a small number of reputable third-party providers to run the Service. They act on our instructions, are bound by confidentiality and data-protection obligations, and may only use the data to provide their service to us. Described in general terms, they are:
A current, named list of subprocessors is available on request from info@framewyre.com. We will give notice of a new subprocessor by email to the account owner at least 30 days before it starts processing Customer Data.
Apart from these providers, we disclose information only: to you and your authorised users; where you tell us to (for example, sending a proposal to your client); to professional advisers under confidentiality; where required by law or valid legal process; to protect our rights or someone’s safety; or to an acquirer in a merger or sale, subject to this policy.
Data is processed in the United States (Google Cloud, us-west1). If information is transferred to another country, we use an approved transfer mechanism such as standard contractual clauses where one is required.
We use measures appropriate to the Service, including encryption in transit, hashed passwords, per-tenant scoping of data access, role-based permissions inside each workspace, and restricted administrative access. No online service can be guaranteed perfectly secure; see the “as is” and liability sections of the Terms of Service and the Beta / No-Fault Policy.
If a breach affects your data and notification is required, we will notify you at the account email address without undue delay and describe what we know and what we are doing.
Deletion on request. You can ask us to delete your workspace and its data at any time by emailing info@framewyre.com from the account owner’s address. We will verify the request, confirm what will be deleted, and complete it within 30 days, except for records we must keep by law. Deletion is permanent and cannot be undone — export first.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, to receive a portable copy, and to withdraw consent. We do not discriminate against you for exercising these rights.
Contact for data requests: info@framewyre.com
Postal address: 5746 Woodmere Lake Cir, Naples, FL 34112
Data protection contact: No separate data protection officer has been
appointed; direct all requests to info@framewyre.com
We will acknowledge a request within 5 business days and respond within 30 days. We may need to verify your identity first. If you are an end client of a contractor who uses Framewyre, we will forward your request to that contractor, who controls the data.
If you are unhappy with our response you may complain to your local data protection or privacy regulator, in addition to contacting us.
Framewyre is a business tool and is not directed to children. We do not knowingly collect personal information from children under 18.
We may update this policy. Material changes will be notified by email to account owners or in the product at least 30 days before they take effect, and the “last updated” date above will change.