Privacy policy
Last updated 15 September 2026
In short: we collect what we need to run your account and nothing else. We do not sell your data. Your construction records belong to you, and you can export or delete them at any time.
On this page
1. Who we are
BuildLedger is operated by One Door Technologies (SMC-Pvt) Ltd, based in Rawalpindi, Pakistan. We provide software for tracking construction project costs, available as a website and as mobile applications.
In this policy, "we" and "us" mean One Door Technologies (SMC-Pvt) Ltd. "You" means anyone who uses BuildLedger, whether through the website or a mobile app. We are the data controller for the information described here.
2. What we collect
Information you give us
| What | When |
|---|---|
| Name, email address, phone number | When you create an account or are added to one |
| Company or business name | When you create an account |
| Password | Stored only as a one-way hash — we cannot read it |
| Project records: purchases, payments, expenses, suppliers, contractors, budgets | As you enter them |
| Message content | When you contact support |
Information collected automatically
| What | Why |
|---|---|
| IP address | Security, abuse prevention, and recorded against sign-ups |
| Browser and device type, operating system | To make the product work on your device |
| Pages visited and actions taken | To understand what is used and what is broken |
| Date and time of access, last sign-in | Account security |
| Mobile advertising identifier | Only in our mobile apps, and only for advertising — see section 4 |
What we do not collect
We do not collect payment card details. If you subscribe to a paid package, payment is handled by a third-party payment processor and card details never reach our servers. We do not collect precise location, contacts, photos, or microphone or camera data unless you explicitly attach something yourself.
3. Why we use it
- To run your account — signing you in, keeping your records, showing your figures.
- To communicate with you — password resets, service notices, and replies to your messages. We send these by email and, where you have given a number, by SMS.
- To keep the service secure — detecting misuse, preventing unauthorised access, and investigating problems.
- To improve the product — understanding which features are used and where people get stuck.
- To show advertising — in the free tier of our mobile apps, as described below.
- To meet legal obligations — where the law requires us to keep or produce records.
Where the law requires a lawful basis, we rely on: performance of our contract with you (running the service), legitimate interests (security and improvement), consent (advertising personalisation and marketing messages), and legal obligation.
4. Advertising and Google AdMob
Our free mobile apps show advertising. Paid packages do not show ads. The website does not currently show third-party advertising.
Google AdMob
We use Google AdMob to serve advertisements in our mobile applications. Google is a third-party vendor and uses its own technology to select and deliver ads.
Google, as a third-party vendor, uses cookies and device identifiers to serve ads based on your prior visits to our apps or other apps and websites. Google's use of advertising cookies and identifiers enables it and its partners to serve ads to you based on that activity.
What advertising partners may collect
- Your mobile advertising identifier (Google Advertising ID on Android, Identifier for Advertisers on iOS)
- IP address and approximate, city-level location derived from it
- Device type, operating system version, and app version
- Which ads were shown, and whether you interacted with them
We do not share your construction records, financial figures, supplier or contractor details with any advertising partner. Advertising partners have no access to the data you enter into BuildLedger.
How to control advertising
- Opt out of personalised advertising at Google Ads Settings.
- On Android: Settings → Google → Ads → delete or reset your advertising ID, or turn on "Opt out of Ads Personalisation".
- On iOS: Settings → Privacy & Security → Tracking, and turn off "Allow Apps to Request to Track". We request permission through Apple's App Tracking Transparency prompt before any tracking occurs.
- Opt out of third-party vendor advertising cookies at aboutads.info/choices or youronlinechoices.eu.
- Remove ads entirely by moving to any paid package.
Opting out of personalised advertising does not stop you seeing ads. It means the ads you see will be less relevant to you.
Google's own handling of data is described in How Google uses information from sites or apps that use our services and its Privacy Policy.
5. Cookies and similar technology
Our website uses a small number of cookies. We set a session cookie so you stay signed in while you work, and we use your browser's local storage to remember preferences such as the filters you last applied. These are necessary for the product to function.
Our full cookie policy lists each one.
6. Who we share it with
We do not sell your personal information, and we never have.
We share information only with the parties needed to run the service:
| Who | What for |
|---|---|
| Our hosting provider | Storing the application and its database |
| Our email provider | Sending password resets and service notices |
| Our SMS gateway | Sending text messages where you have given a number |
| Google AdMob | Serving advertising in free mobile apps |
| Payment processor | Taking payment for paid packages |
We may also disclose information if required by law, court order, or a valid request from a public authority, or where necessary to protect our rights, safety, or the safety of others.
If our business is sold or merged, account information may transfer to the new owner. We would tell you before that happened and before your information became subject to a different privacy policy.
7. How long we keep it
- While your account is open — your records stay until you delete them.
- After you close your account — we delete your data within 90 days, except where we must keep something to meet a legal obligation.
- Security logs — kept for up to 12 months.
- Backups — deleted data may persist in encrypted backups for up to 30 days before those backups are overwritten.
8. Your rights
Whatever country you are in, you can ask us to:
- Show you the personal information we hold about you
- Correct anything that is wrong — most of it you can edit yourself in your account settings
- Delete your account and the data in it
- Export your records in a portable format
- Stop using your information for a particular purpose, such as marketing
If you are in the European Economic Area or the United Kingdom, you also have the right to restrict processing, to object to processing based on legitimate interests, and to complain to your local data protection authority.
If you are in California, you have the right to know what personal information is collected, to have it deleted, to correct it, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under the CCPA.
To exercise any of these, email support@onedoortech.com. We will respond within 30 days.
9. How we protect it
- All traffic is encrypted in transit using HTTPS.
- Passwords are stored as bcrypt hashes. Nobody, including us, can read them.
- Each customer's records are separated at the database level and every query is scoped to the account that owns it.
- Access within your account is controlled by role, and you decide who can see which projects.
- We limit staff access to what is needed to support you.
No system is perfectly secure. If a breach affects your personal information, we will tell you and the relevant authority as the law requires.
10. Children
BuildLedger is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 16. Our mobile apps are not designated as child-directed and are not included in Google Play's Designed for Families programme. If you believe a child has given us information, contact us and we will delete it.
11. International transfers
We are based in Pakistan and our servers are located there or with providers we use. If you access BuildLedger from elsewhere, your information will be transferred to and processed in those locations, which may have different data protection laws from your own country. By using the service you consent to that transfer.
12. Changes to this policy
We update this policy when what we do changes. The date at the top always shows the current version. For anything significant we will tell you by email or in the product before it takes effect.
13. Contact us
Questions about this policy, or about your information:
- Email: support@onedoortech.com
- Post: One Door Technologies (SMC-Pvt) Ltd, Rawalpindi, Punjab, Pakistan