Privacy Policy

Cornerstone Builder Software LLC (“Cornerstone PM,” “we,” “us,” or “our”) operates Cornerstone PM™ (the “Service”), a scheduling, CRM, and project-management platform for home builders. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices and rights you have. By using the Service, you agree to the practices described here.

Account & organization information. When you create an account or are invited to an organization, we collect your name, email address, phone number, company name, and role. Vendor and subcontractor records may additionally include business address, insurance details, and W-9 / tax information supplied by you or your organization.

Project & CRM data. As you use the Service, we store the content you and your organization put into it — homes and lots, schedules and tasks, buyer/customer records, selections and budgets, purchase orders, bids, vendors, documents, photos, and messages. Images may be automatically compressed for storage efficiency.

QuickBooks integration data. If your organization connects QuickBooks Online, we receive OAuth authorization tokens and the QuickBooks company (realm) identifier needed to sync accounting records. See Section 5 for details on how that integration works.

Usage & device data. We collect standard analytics such as pages visited, features used, browser type, and IP address to operate and improve the Service.

AI interactions. When you use AI-assisted features (including Foreman AI™, Blueprint AI, and Bid Import AI), the relevant messages or documents are sent to our AI provider for processing. We do not use your content or AI conversations to train AI models.

• To provide, operate, and secure the Cornerstone PM platform.
• To send transactional messages (task notifications, vendor invites, scheduling alerts).
• To power AI-assisted features you choose to use.
• To sync accounting records to QuickBooks Online when you enable that integration.
• To improve the Service based on aggregate usage patterns.
• To communicate about your account, billing, or service updates.

We do not sell your data, use your data for advertising, share your data with third parties for their own marketing, or use your content to train AI models.

We share data only with service providers who help us operate the Service, namely:

• Hosting & infrastructure providers — to host the application and database.
• AI provider(s) — to power AI-assisted features.
• Email / notification provider — to deliver transactional messages.
• Intuit / QuickBooks Online — to sync accounting records when your organization connects the integration (see Section 5).

Each provider is bound by its own privacy policy and by data-processing terms. We may also disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

Your data is stored on secure, encrypted infrastructure hosted in the United States. Data is transmitted over HTTPS/TLS and database connections use SSL. We apply industry-standard safeguards including hashed passwords, role-based access controls, organization-level data isolation, and session management. No method of transmission or storage is perfectly secure, but we work to protect your information using commercially reasonable measures.

Cornerstone PM offers an optional integration with QuickBooks Online, provided by Intuit Inc. The integration is enabled only when an authorized user in your organization connects it through Intuit’s OAuth 2.0 authorization flow. We never see or store your Intuit login credentials.

• One-way sync. The integration pushes accounting records from Cornerstone PM to QuickBooks Online (for example, vendors, customers, and purchase/expense records). Cornerstone PM is the system of record for your project data; QuickBooks receives the accounting entries, and changes you make in QuickBooks do not overwrite your Cornerstone records.
• Accounting scope only. We request only the accounting scope (com.intuit.quickbooks.accounting) required to create and update these records. We do not request payroll or unrelated scopes.
• What we store. To maintain the connection we store the OAuth access and refresh tokens and your QuickBooks company (realm) ID. Tokens are used solely to perform the sync you authorized.
• Disconnecting. You can disconnect the integration at any time from within Cornerstone PM or from your Intuit account. On disconnect, we stop syncing and delete the stored QuickBooks tokens for your organization.

Data you send into QuickBooks Online is thereafter also governed by Intuit’s Privacy Statement.

We retain your data for as long as your account and organization are active. Upon account deletion, we permanently remove your data within 30 days, and backups containing your data are purged within 90 days. QuickBooks OAuth tokens are deleted when the integration is disconnected. We may retain limited records where required to comply with legal, tax, or accounting obligations.

Depending on your location, you may have the right to:

• Access — request a copy of the data we hold about you.
• Correction — update inaccurate information in your profile settings.
• Deletion — request deletion of your account and associated data.
• Export / portability — download your data in a standard format (CSV or JSON).

To exercise these rights, contact us at [email protected].

We use essential cookies for authentication and session management. We do not use third-party advertising or cross-site tracking cookies.

Cornerstone PM is a business tool and is not directed to children under 13. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, via in-app or email notice. Continued use of the Service after changes take effect constitutes acceptance.

Questions about this Privacy Policy or our data practices? Email us at [email protected] or reach us through our contact page.