Privacy Policy
This privacy policy describes how Verba, Inc., which operates as Picket ("Picket," "we," "us," or "our"), collects, uses, and shares information when you use our website and services (the "Services"). By using the Services, you agree to the practices described here.
1. Information we collect
A. Information you provide
When you create an account, request a demo, or contact us, we collect information you give us directly. This typically includes your name, work email address, company name, role, and any other details you choose to share in a message or sign-up form.
When you use the Services, you upload construction documents (drawings, specifications, submittals, RFIs, schedules, field reports, and similar files) to your workspace. These documents and the chat messages you send are stored in your tenant for as long as your account is active.
B. Information collected automatically
When you use the Services we collect basic technical information automatically: your IP address, browser type, device identifiers, the pages you visit, the actions you take in the product, timestamps, and similar diagnostic data. This is used to operate and secure the Services, debug issues, and improve performance.
We use first-party and limited third-party analytics to understand product usage in aggregate. Where required by law, we ask for your consent before placing non-essential cookies.
C. Information from third parties
If you connect Picket to a third-party document system (such as Procore, Autodesk Construction Cloud, SharePoint, Box, or Dropbox), we receive only the documents and metadata you authorize that integration to share. We do not access anything outside the scope you granted.
2. How we process your information
We use the information we collect to:
- provide, maintain, and improve the Services;
- index your documents for retrieval and answer questions you ask within your workspace;
- authenticate your account, protect against fraud and abuse, and maintain security;
- respond to your requests, send service-related communications (e.g., account notifications, security alerts), and provide customer support;
- send you product updates and marketing communications, where permitted (you can opt out at any time);
- comply with applicable laws, regulations, legal processes, and lawful requests from authorities; and
- enforce our agreements and protect the rights, property, or safety of Picket, our users, or others.
We do not use the content of documents you upload to train any general-purpose AI model, ours or a third party's. Your documents are processed only to serve answers back to your workspace.
3. Sharing your information
We share information only in the limited circumstances described below:
- Service providers. We use vetted third-party processors to operate the Services. Today this includes Supabase (authentication and storage), Amazon Web Services (hosting, databases, and Bedrock model inference), Pinecone (vector retrieval), Vercel (web hosting and edge delivery), Inngest (background job orchestration), Reducto (document parsing), CloudConvert (document format conversion), and Resend (transactional email). Each processor receives only what they need to perform their function, under a written data processing agreement.
- Within your organization. If you sign up under a company account, other authorized members of that same company can see content in shared workspaces. Per-user projects remain private to the user who created them.
- Legal and safety. We may disclose information when we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request; to enforce our terms; or to protect the rights, property, or safety of Picket, our users, or others.
- Corporate transactions. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
We do not sell your personal information, and we do not share it with third parties for their independent marketing purposes.
4. Data security
We use reasonable administrative, technical, and physical safeguards to protect the information we hold. These include encryption in transit, encryption at rest for documents and database records, row-level security on tenant data, least privilege access controls for staff, and routine security reviews. No system is perfectly secure; we cannot guarantee the security of any information you transmit to us.
5. Your choices
Marketing communications
You can opt out of marketing emails at any time by clicking the unsubscribe link in any email we send, or by emailing us at the address below. Transactional and account-related messages (security alerts, billing notices, service availability) will continue regardless.
Cookies and tracking
Most browsers let you remove or block cookies through their settings. If you block essential cookies, parts of the Services may not function as intended.
Access and correction
You can access and update most account information directly in the product. For other data we hold about you, you can request a copy or ask us to correct inaccuracies by contacting us at the address below.
6. Data deletion and retention
You can delete documents from your workspace at any time from within the product. To delete your account entirely, contact us at the email address below and we will permanently remove your account, documents, and associated personal information within 30 days, except where we are required to retain certain records for legal, tax, security, or legitimate business purposes.
Service providers may retain backup copies for a limited time consistent with their normal backup retention schedules.
7. Children's privacy
The Services are intended for use by businesses and construction professionals. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.
9. Contact us
Questions about this Privacy Policy or our privacy practices? Reach us at privacy@picket.build.