What we keep, why, and how to have it deleted.
BuildCost Africa is a construction cost estimating service operated by GenOpsX sp. z o.o. For any question about your data, write to admin@genopsx.com.
One way to identify you: an email address, or a Telegram chat id, or a WhatsApp number, depending on how you sign in. We record when you last proved you control it, because that is what stops someone else claiming your account.
Your language and country, so prices show in the right currency and the right words. The estimates you create, with their quantities and assumptions. How many estimates, take-offs and price lookups you have used this month, to apply your plan’s limits.
If you pay: the plan, which payment method was used, the provider’s reference and our own. We never see or store a card number or a mobile-money PIN: they never pass through our servers.
We do not collect your name, your postal address, or your location. None of it is asked for, and there is no column that could hold it.
If you message us on WhatsApp or Telegram, we receive your message and the chat identifier. We use them to reply to you: send a sign-in code, tell you an estimate is ready, confirm a payment. We do not send marketing on these channels, and there is nothing to unsubscribe from because none is sent.
Sending “STOP” to the bot, or blocking the number, ends messaging immediately. On WhatsApp your message passes through Meta and is subject to WhatsApp’s own privacy policy as well as this one.
We sell nothing and disclose nothing for advertising. These providers process some of it on our behalf:
We disclose data otherwise only where the law requires it, and only what is asked for.
Sign-in links and linking codes expire within minutes and are cleared once used. Your account and your estimates are kept while the account exists. Payment records are kept longer, for as long as accounting obligations require.
Write to admin@genopsx.com from the address on your account, or send “DELETE” to the bot from the linked chat. We delete the account, its sign-in identifiers, its estimates and its usage counters within 30 days. Payment records the law requires us to retain remain, detached from your account.
You can also ask for a copy of what we hold, or correction of anything wrong, the same way.
Traffic is encrypted in transit. Sign-in links are stored as a hash, never in the clear: a copy of our database does not let anyone sign in as you. Incoming messages are signature-checked and rejected when they do not come from the sender they claim.
The date at the top of this page is when it last changed. A change that widens what we collect will be told to you before it takes effect.