CoPIMS Privacy Policy
Effective date: October 30, 2026 | Last revised: October 30, 2026
This Policy explains how CoPIMS handles information in its construction project-management platform. It applies to account users, organization administrators, project participants, employees and other people whose information an organization enters into CoPIMS. In many cases, the organization that creates a workspace decides why personal information is entered and who may access it; that organization remains responsible for its own notices, lawful basis, retention instructions, and responses to data-subject requests.
1. Information collected
- Account and profile: username, name, email, password credentials, phone number, address, date of birth, sex, nationality, professional profile, social links, photograph, and privacy-display settings.
- Organization and access: company details, ownership and verification records, licence requests and decisions, project memberships, positions, roles, and permission-related information.
- Project and operational records: projects, contracts, BoQs, variations, payment and finance records, plans, reports, delays, procurement, logistics, equipment, subcontracting, quality, safety, security, HR, payroll, and approval records.
- Documents and communications: uploaded files, drawings, letters, certificates, images, support requests, and messages submitted through the platform.
- Technical information: session and authentication information, timestamps, browser or device information, security events, and error information where generated by the application or hosting environment. We do not treat this Policy as a promise that every technical event is collected or retained.
2. How information is used
Information is used to create and secure accounts; provide organization and project workspaces; enforce roles and workflow permissions; calculate and display project, payment, payroll, progress, and inventory information from user inputs; store and retrieve files; send account, workflow, licence, and support communications; administer licences; prevent misuse; troubleshoot and improve the service; and comply with lawful requests and obligations.
3. Access and sharing
Access is controlled by organization, project, role, position, and record permissions configured in CoPIMS. Organization administrators and authorized project users may access information needed for their work. CoPIMS personnel and infrastructure providers may access information when needed for support, security, hosting, maintenance, backup, email delivery, or lawful operation. Information may be disclosed when required by law, court order, government authority, or to protect the service, users, or public. We do not sell personal information or use project data for advertising.
4. Sensitive information
CoPIMS may contain employment, identification, contact, bank, payroll, health or incident-related, safety, security, financial, and commercially confidential information. Organizations must limit collection and access to what is necessary, configure roles carefully, and avoid entering information that they are not authorized to process. Users must not disclose information to people without a legitimate need to know.
5. Security
CoPIMS uses application access controls, authentication, permission checks, request protections, file validation, and operational safeguards appropriate to the deployment. No internet service is completely secure. Users must use strong passwords, keep credentials private, sign out of shared devices, and report suspected compromise or accidental disclosure promptly.
6. Retention and deletion
Information is retained for as long as needed to provide the service, maintain organization and project history, support approvals and audits, resolve disputes, satisfy legal or contractual duties, protect security, and follow the organization’s instructions. Retention periods may differ by record and deployment. Closing a user account does not automatically remove organization records, and backup copies may persist for a limited operational period. Contact the relevant organization administrator or CoPIMS support to request deletion or clarification.
7. Your choices and requests
You may update eligible account and profile information through CoPIMS and may adjust available profile-visibility settings. You may request access, correction, deletion, restriction, or an export of information, subject to the rights and limits applicable to the organization, the record, and the law. Requests concerning project or employee records should normally be made to the organization that supplied the data. We may verify identity and authority before responding.
8. Children and external links
CoPIMS is a professional service and is not directed to children. Do not knowingly create accounts for children or enter their information unless the organization has a lawful and necessary reason. The platform may contain links or references to third-party services; their privacy practices are governed by their own policies.
9. International processing and changes
Depending on the deployment, information may be stored or processed by hosting, email, backup, or support providers in locations chosen by the platform operator or organization. We will apply appropriate contractual or operational safeguards required for the deployment. We may update this Policy when the service or legal requirements change and will publish the revised version on this page.
10. Contact
For privacy questions, suspected data incidents, or requests, contact your organization administrator or use the Contact Page. This Policy is a product-facing description, not legal advice; the operator and each organization should obtain legal review for the jurisdictions and data handled in their deployment.