1. Introduction
D&S Tech LLC ("Company," "we," "us," or "our") operates the MEPSub platform (the "Service") accessible at mepsub.net, app.mepsub.net, and related subdomains. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using MEPSub, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use MEPSub.
2. Information We Collect
2.1 Information You Provide Directly
- Account Information: Name, email address, phone number, company name, job title, and password when you create an account.
- Company Profile: Business address, state contractor license number, insurance certificate details, trade specialties, and service area.
- Project Data: Estimates, submittals, invoices, RFIs, change orders, purchase orders, and any documents you upload to the platform.
- Payment Information: Billing address and payment method details. Payment processing is handled by Stripe, Inc. We do not store full credit card numbers on our servers.
- Communications: Messages you send through the platform, support requests, and feedback.
2.2 Information Collected Automatically
- Usage Data: Pages viewed, features used, time spent on the platform, and interaction patterns.
- Device Information: Browser type, operating system, device type, screen resolution, and language settings.
- Log Data: IP address, access times, referring URLs, and server logs.
- Location Data: Approximate location derived from your IP address. We do not collect precise GPS location.
2.3 Information from Third Parties
- Bureau of Labor Statistics (BLS): Public labor rate data used to enhance cost estimation features.
- FRED API: Public economic data used for material price indexing.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the MEPSub platform
- Process your transactions and manage your subscription
- Generate estimates, submittals, and other construction documents
- Power AI features including spec parsing, price lookup, and document generation
- Send transactional emails (invoices, submittal notifications, review invitations)
- Send marketing communications (with your consent, which you can withdraw at any time)
- Improve our platform based on usage patterns and feedback
- Detect and prevent fraud, abuse, or security incidents
- Comply with legal obligations
AI Processing: When you use AI features (spec parsing, AI pricing, document generation), your data is processed by AI models to deliver results. We do not use your project data to train AI models. Your construction data remains private and is not shared with other users.
4. How We Share Your Information
We do not sell your personal information. We may share your information only in the following circumstances:
- With Your Consent: When you use the GC Review Portal, you choose to share specific submittal data with designated reviewers.
- Service Providers: We share data with third-party providers who perform services on our behalf, including:
- Stripe (payment processing)
- Twilio (SMS notifications)
- Anthropic (AI processing)
- Email delivery services
- Cloud hosting providers
- Legal Requirements: When required by law, subpoena, court order, or government regulation.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.
- Safety: To protect the rights, property, or safety of D&S Tech LLC, our users, or the public.
5. Data Storage & Security
Your data is stored on secure servers located in the United States. We implement industry-standard security measures including:
- SSL/TLS encryption for all data in transit
- Encryption at rest for sensitive data
- Regular security audits and vulnerability assessments
- Access controls limiting employee access to user data
- Automated backups with encrypted storage
- Two-factor authentication support for user accounts
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Cookies & Tracking
MEPSub uses cookies and similar tracking technologies to:
- Essential Cookies: Required for authentication, session management, and platform functionality. These cannot be disabled.
- Analytics Cookies: Help us understand how you use the platform to improve our services.
- Preference Cookies: Remember your settings such as theme preference (light/dark mode) and language.
We do not use advertising cookies or share cookie data with advertising networks. You can control cookie settings through your browser preferences.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request that we correct inaccurate or incomplete information.
- Deletion: Request that we delete your personal information, subject to certain legal exceptions.
- Data Portability: Request a copy of your data in a structured, machine-readable format.
- Opt-Out: Unsubscribe from marketing communications at any time.
- Restriction: Request that we restrict processing of your information in certain circumstances.
To exercise any of these rights, contact us at privacy@mepsub.net. We will respond to your request within 30 days.
8. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you.
- Right to Delete: You can request deletion of your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- Right to Opt-Out of Sale: We do not sell personal information. If this practice changes, we will provide an opt-out mechanism.
To make a CCPA request, email privacy@mepsub.net with the subject line "CCPA Request."
9. Children's Privacy
MEPSub is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@mepsub.net.
10. Third-Party Services
MEPSub integrates with third-party services that have their own privacy policies. We encourage you to review their policies:
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of external sites.
11. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. After account deletion:
- Account data is deleted within 30 days
- Project data (estimates, submittals, etc.) is deleted within 90 days
- Backup copies are purged within 180 days
- Anonymized, aggregated analytics data may be retained indefinitely
We may retain certain information as required by law (tax records, legal disputes, etc.).
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will send an email notification to registered users.
Your continued use of MEPSub after changes are posted constitutes acceptance of the updated Privacy Policy.