1. Operator and scope
TIMELESS PEARL LLC operates DesignBuildFlow. This Privacy Policy explains how TIMELESS PEARL LLC handles personal information when you visit the DesignBuildFlow website, create an account, join a company workspace, use project features, or contact us.
This Policy applies to DesignBuildFlow, not automatically to every other business or website operated by TIMELESS PEARL LLC. Customer organizations independently determine which project information to upload and whom to authorize. Requests about workspace content may need to be coordinated with the relevant customer organization; registration alone does not grant access to another organization’s data.
2. Information we collect
We collect information you provide, information generated by your use of the Service, and limited technical information needed to operate and secure the Service.
- Account information: name, email address, authentication and verification status, account settings, and role/access records.
- Billing information: company billing status, Stripe customer and subscription identifiers, billing email, invoice/subscription status, renewal dates, and related billing metadata. Full payment card numbers are processed by Stripe rather than stored in the DesignBuildFlow application database.
- Company and project information: company name, project data, permit records, comments, tasks, uploaded documents, field photos, audio/video recordings, transcripts, and related collaboration history.
- Support information: messages and contact details submitted through support or legal request channels.
- Usage and security information: timestamps, session/authentication events, audit records, and technical logs used for reliability and abuse prevention.
- Legal acceptance information: the policy versions associated with an account’s acceptance assertion and the server time when that assertion was recorded.
3. How we use information
We use personal information to provide and secure the Service, authenticate users, review access requests, enforce workspace permissions, operate project collaboration and requested AI-assisted features, respond to requests, maintain audit records, prevent abuse, improve reliability and usability, and comply with law. Platform personnel receive registration notifications for account administration; those notifications do not grant the registrant a workspace role.
4. Service providers and disclosures
We use service providers to host, authenticate, deliver email, process requested AI analysis, process billing, and operate the application. The application infrastructure includes Supabase, Vercel, OpenAI, Resend, and Stripe for those functions.
Workspace information is available to members according to the permissions assigned by the customer organization. We may also disclose information when required by law, to protect rights and security, in connection with a corporate transaction, or at the direction of the customer organization controlling the applicable workspace.
5. AI processing
When an authorized user invokes an AI feature, selected project content may be sent to the configured AI provider to perform the requested analysis. Depending on the feature, this can include documents, chat screenshots, photos, audio/video recordings, sampled video frames, and transcripts. AI access is permission-controlled and is not intended to determine government approval.
Do not upload information you are not authorized to process. Review the AI & Professional Use Notice for additional limitations. No statement here promises zero provider retention or a certification of regulatory compliance.
6. Sale and targeted advertising
DesignBuildFlow does not currently sell personal information or share it for cross-context behavioral advertising. If those practices change, this Policy and any required opt-out mechanisms will be updated before the change applies.
7. Retention
We retain information for as long as reasonably needed to provide the Service, maintain project history and security records, comply with legal obligations, resolve disputes, and enforce agreements. Retention can vary by data type, workspace status, backup cycle, and legal requirement.
Deletion requests may be subject to exceptions, including security, fraud prevention, contractual, or legal preservation obligations. Removal of an individual’s account does not necessarily remove records the customer organization is entitled or required to retain.
8. Security
We use safeguards designed to protect information, including authenticated access, database row-level access controls, private project storage, short-lived signed file access, and role-based permissions. No internet service can guarantee absolute security.
See the Security page for a product-level overview. That page is not a certification or audit report.
9. Your choices and privacy rights
Depending on where you live and which laws apply, you may have rights to request access, correction, deletion, portability, restriction, or information about certain disclosures. California residents may also have rights under the CCPA/CPRA when the law applies to the relevant business and data.
To make a privacy request, use the Contact page and select Privacy request. We may need to verify your identity and authority before acting or coordinate with the company controlling the relevant workspace.
10. Authentication and local storage
The application uses authentication/session technology to keep users signed in and protect access to workspaces, and browser storage to remember interface language preferences.
The current marketing site does not use advertising cookies. If non-essential analytics or advertising technologies are added, we will update disclosures and provide consent or opt-out controls where required. Clearing browser storage may sign you out or reset your preferences.
11. International users
The Service may process information in the United States and other locations where service providers operate. Applicable transfer arrangements depend on the customer relationship and provider contracts; this Policy alone does not establish an international transfer mechanism.
12. Children
The Service is intended for business users age 18 or older and is not directed to children.
13. Changes and contact
We may update this Policy as the Service changes. The Effective Date identifies the current published version. We will notify users of material changes through the Service or account email. Privacy questions and requests for TIMELESS PEARL LLC concerning DesignBuildFlow can be submitted through the Contact page.
14. Browser tracking signals and third-party sites
The current application does not change its behavior in response to the legacy browser Do Not Track setting. We do not use advertising pixels in the application to track your activity over time across unrelated websites. Service providers may process technical and account information to perform the functions described above.
Links to third-party websites lead to services we do not control. Those websites may collect information under their own privacy policies. We do not currently sell personal information or share it for cross-context behavioral advertising, including when a browser sends an opt-out preference signal. We will assess and implement applicable opt-out requirements before introducing such practices.
15. Contact us directly
For access, correction, deletion or other privacy requests concerning DesignBuildFlow, email yingbuilds@gmail.com. Identify the account or company workspace involved, but do not send passwords or authentication codes. You may update your display name in My Account; requests about other information may require identity verification or coordination with the company controlling the workspace.