Legal

Privacy Policy

Effective date: July 7, 2026

1. Who we are

Net-90 ("Net-90," "we," "us," or "our") provides a construction management platform for contractors — projects, draws, pay applications, billing, banking visibility, and communications (the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to the Service, our websites, and any related applications. By using the Service, you agree to this Policy.

2. Information we collect

Information you provide

• Account information: name, email address, phone number, company name, role, and billing details.
• Project and business data: projects, schedules of values, draws, pay applications, change orders, RFIs, logs, estimates, bids, proposals, invoices, vendor and client records, lien waivers, tax documents (including 1099 data), and any files or documents you upload ("Customer Content").
• Communications data: if you connect your email or calendar, we access, store, and process the messages, events, contacts, and metadata needed to provide those features.
• Support communications: messages you send us, survey responses, and feedback.

Information collected automatically

• Usage data: pages viewed, features used, actions taken, session duration, referring pages, and interaction patterns.
• Device and log data: IP address, browser type, operating system, device identifiers, and crash and performance logs.
• Cookies and similar technologies: we and our partners use cookies, pixels, and local storage for authentication, preferences, analytics, and marketing.

Information from third parties

• Financial account data via Plaid: if you connect a bank account, we receive balances, transactions, and account metadata through Plaid Inc. Your banking credentials are provided directly to Plaid; we never see or store them. Plaid's use of your information is governed by the Plaid End User Privacy Policy.
• Other integrations and partners: data from services you choose to connect, payment processors, and business and marketing partners.

3. How we use information

We use the information we collect to:

• Provide, operate, maintain, and secure the Service;
• Process payments and manage your subscription;
• Power platform features, including document generation, reporting, and AI-assisted features (drafting, summarization, and analysis of your content);
• Analyze, improve, and develop the Service and new products and services, including training and improving our models, algorithms, and analytics;
• Create aggregated, anonymized, or de-identified data — such as industry benchmarks, market indices, cost and payment-cycle analytics, and trend reports — which we may use and commercialize for any lawful purpose;
• Communicate with you about the Service, and market our products and those of our partners;
• Enforce our Terms and Conditions, and comply with legal obligations;
• Detect, investigate, and prevent fraud, abuse, and security incidents.

You grant us the access rights necessary to do the above. Our personnel may access your account and Customer Content to operate and improve the Service, provide support, enforce our agreements, and as otherwise described in this Policy.

4. How we share and disclose information

We may share information in the following circumstances:

• Service providers: hosting, analytics, communications, payment, and support vendors who process data on our behalf.
• Business and data partners: we may share, license, or sell certain information — including usage data, business data, and commercial contact information — to partners, advertisers, data platforms, and other third parties for their own business purposes, except where restricted by law or by Section 5 below. Where required by applicable law, we will honor your opt-out (see Section 6).
• Aggregated and de-identified data: we may share or sell aggregated or de-identified data without restriction. This data cannot reasonably be used to identify you.
• Within your company: account administrators and teammates on your company account can access Customer Content in that account.
• Share links you create: when you generate a client or lender share link, anyone with the link can view what you chose to share.
• Corporate transactions: in connection with a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as a business asset.
• Legal: to comply with law, legal process, or governmental request, or to protect the rights, safety, and property of Net-90, our users, or others.

5. Financial data received through Plaid

Notwithstanding anything else in this Policy, we do not sell or rent bank account data received through Plaid, and we use it only to provide and improve the banking features of the Service, consistent with Plaid's developer policies and applicable financial privacy laws. Aggregated or de-identified insights that do not identify you or your accounts are not bank account data for purposes of this section.

6. Your choices and rights

• Opt out of sale or sharing: you may opt out of the sale or sharing of your personal information at any time by emailing privacy@net-90.com with the subject line "Do Not Sell or Share." Nevada residents may exercise their opt-out rights under NRS 603A; California residents may exercise their rights under the CCPA/CPRA, including the rights to know, delete, correct, and opt out of sale/sharing, without discrimination.
• Access, export, and deletion: you can export your Customer Content from the Service at any time and may request deletion of your account and data, subject to legal retention requirements.
• Marketing: you can unsubscribe from marketing emails via the link in each message.
• Cookies: you can control cookies through your browser settings; some features may not function without them.
• Disconnecting integrations: you can disconnect your bank, email, or calendar at any time from settings, which stops future collection from that source.

7. Data retention

We retain information for as long as your account is active and as long as reasonably necessary for the purposes in this Policy, including backups, legal compliance, dispute resolution, and enforcement of agreements. We may retain aggregated or de-identified data indefinitely.

8. Security

We use commercially reasonable administrative, technical, and physical safeguards, including encryption of sensitive data at rest and in transit. No system is completely secure, and we cannot guarantee the absolute security of your information.

9. Children

The Service is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children.

10. International users

The Service is operated from the United States. If you access it from elsewhere, you consent to the transfer, storage, and processing of your information in the United States.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date, and for material changes we will provide notice through the Service or by email. Continued use of the Service after changes take effect constitutes acceptance.

12. Contact us

Questions or requests: privacy@net-90.com
Net-90 · Reno, Nevada, USA