Privacy Policy

Submittal.app is a software service operated by Brilliant Light Source Inc. (d/b/a Submittal) that helps construction teams create, manage, and deliver submittal packages. Our services are provided through our web application at submittal.app and related domains.

Account information. When you create an account, we collect your name, email address, phone number (optional), company name, and password (stored as a salted hash).

Project and submittal data. Content you upload or create in the service — including drawings, specifications, product data, submittal packages, notes, and communications.

Payment information. If you subscribe to a paid plan, payment details are collected and processed by Stripe. We do not receive or store full card numbers.

Usage information. Logs of how you use the service, including IP address, browser type, pages viewed, actions taken, and timestamps. We use this to operate, secure, and improve the service.

Cookies and similar technologies. We use cookies to keep you signed in, remember preferences, and measure product usage. You can disable cookies in your browser, though parts of the service may not function.

• To provide, maintain, secure, and improve the service
• To authenticate users and enforce tenant isolation
• To process payments and manage subscriptions
• To send transactional notifications (project updates, invoices, security alerts)
• To provide customer support
• To comply with legal obligations and enforce our Terms of Service
• With your permission, to send product news and updates (you can opt out at any time)

We do not sell your personal information. We do not use customer submittal content to train general-purpose AI models.

We share information with service providers (subprocessors) strictly as needed to operate the service. A current list is maintained on our Security page. These vendors are contractually bound to protect your data and use it only for the services they provide to us.

We may disclose information if required by law, to respond to lawful requests from public authorities, to protect our rights or the safety of our users, or in connection with a merger, acquisition, or sale of assets (in which case affected users will be notified).

We retain account and project data for as long as your account is active. Upon termination, customer data is deleted within 90 days; backups expire on their normal 30-day rotation. We may retain limited information as required by law (e.g., tax records) or to enforce our agreements.

We implement administrative, technical, and physical safeguards designed to protect your information. Details are published on our Security page. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Ask us to correct inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Receive your data in a machine-readable format
• Objection / restriction: Object to or restrict certain processing
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time

California residents have additional rights under the CCPA, including the right to know, the right to delete, and the right to non-discrimination for exercising these rights. To exercise any of these rights, email privacy@submittal.app.

Submittal.app is operated in the United States. If you access the service from outside the United States, your information will be transferred to, stored, and processed in the United States. Where required, we rely on Standard Contractual Clauses to safeguard cross-border transfers.

Submittal.app is a business-to-business service and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be announced via email or in-app notice. The "Last updated" date above reflects the most recent revision.

Questions about this Privacy Policy? Contact us at privacy@submittal.app.

Brilliant Light Source Inc.