Privacy Policy
Effective October 23, 2026 · Gulf Coast Systems Technology LLC · support@cintos.app
CINTOS is software for commercial installation companies, provided by Gulf Coast Systems Technology LLC, a Texas limited liability company (“we”, “us”). This policy explains what information CINTOS collects, how we use it, who we share it with, and the choices you have. It applies to the website at cintos.app, the CINTOS web and mobile apps, crew links, and the CINTOS API.
1. Your company is in charge of its data
Companies (“customers”) sign up for CINTOS and add their own people, jobs and records. For that business content we act as the customer’s service provider: we process it on the customer’s behalf and under its instructions. If you use CINTOS as an employee, crew member or contact of one of our customers, that company decides what is collected about you — please contact them first. We will help them answer your request.
2. What we collect
Account information
- Name, email address, phone number, job title and role; password (stored only as a secure hash by our sign-in provider).
- Company details: name, address, phone, email, website, trades and settings.
Work content you or your team add
- Jobs and projects: names, addresses, contacts (general contractor, owner, architect), schedules, contract values and scope.
- Field records: daily reports, notes, issues, field verifications, photos, drawings and other files.
- Voice notes: audio you record is converted to text so it can be added to reports and notes.
- Crew time: clock-in and clock-out times, breaks, work logs, pay and bill rates.
- Warehouse and orders: order and receiving lists you import, inventory, labels, deliveries and sign-offs.
- Money: customers, quotes, invoices, payments and job costs.
- Fleet: vehicles, drivers, trips, mileage, pre-trip checks, fuel receipts and service records.
- Emails and attachments you forward to your CINTOS inbox address.
Location
When someone clocks in or out, uses a crew link, or signs off a delivery, CINTOS asks the device for its location to confirm they are at the job site. The location is read only while that screen is open and is saved with that clock or delivery record. CINTOS does not track location in the background. Your device lets you allow or refuse location access; if refused, some site checks may not work.
Connected services
If a company owner or admin connects another service — QuickBooks Online, Procore, Autodesk Construction Cloud or Bluebeam — we receive a sign-in token from that service and the information needed to provide the features you use (see section 5).
Text-message alerts
If you choose to get job alert texts, we keep the mobile number you add and confirm, which alerts you turned on, and a record of the texts we sent. We only text you the alerts you turn on, about your own company’s jobs. Message frequency varies (at most 25 texts a day). Msg & data rates may apply. Reply STOP to any text to opt out, or HELP for help, or turn texts off on your Plan & account page. We never sell or share your mobile number or text-message consent with anyone for their marketing; mobile numbers are shared only with our text-message provider to deliver the alerts.
Technical information
- Sign-in cookies that keep you signed in. We do not use advertising or cross-site tracking cookies.
- IP address, browser and device type, and an activity log of changes made in your company (who changed what, and when).
- Server logs used to keep the service running and secure.
3. How we use information
- To provide CINTOS: run your jobs, reports, time, warehouse, money and fleet features, and the integrations you turn on.
- To provide AI features: drafting reports, sorting voice notes, reading drawings and labels, checking field work and building quotes.
- To send email you ask for (reports, invitations, alerts, password resets).
- To keep accounts and data secure, prevent abuse, and keep the activity log.
- To support you, fix problems and improve CINTOS.
- To meet legal obligations and enforce our Terms of Service.
We do not sell personal information, we do not share it for advertising, and we do not use your content to train AI models.
4. AI processing
When you use an AI feature, the content needed for that task (for example, the text of your notes, a photo or a drawing page) is sent to an AI provider — Anthropic, OpenAI or Google — to produce the result, which is returned to CINTOS. AI output can be wrong; always check it before relying on it.
Website chat. The “Ask about CINTOS” chat on our website sends your questions to Anthropic to write an answer. We keep the questions and answers (without your IP address) to improve the assistant, and if you ask us to contact you, we keep the name, email, company and message you give. Don’t share passwords or payment details in the chat.
5. Connected services (QuickBooks, Procore, Autodesk, Bluebeam)
- Only a company owner or admin can connect a service, by signing in to that service and approving CINTOS. Each company connects its own account; one company’s connection is never used for another company.
- We use data from a connected service only to provide the features you use — for example, sending your invoices and customers to QuickBooks and reading payment status back, or listing and importing drawings from a Procore project you can access.
- Sign-in tokens are encrypted before they are stored and are never shown in the browser.
- You can disconnect at any time in Settings → Integrations, or from the other service. When you disconnect in CINTOS we ask the service to cancel the tokens and delete our copy. Records already created in CINTOS (such as an invoice marked paid) stay part of your company’s data.
- Your use of those services is governed by their own terms and privacy policies.
6. Who we share information with
We share information only as needed to run CINTOS, with:
| Provider | What for |
|---|---|
| Vercel | Hosting the website and app |
| Supabase | Database, file storage and sign-in |
| Anthropic, OpenAI, Google | AI features (section 4) |
| Resend, Postmark | Sending email and receiving forwarded email |
| Twilio | Sending text-message alerts you opt in to |
| Google Workspace | Our own business email and support |
| Services you connect | Only what you send or ask us to read (section 5) |
Inside your company, people see information according to the roles your owner or admin gives them. We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of our business (in which case this policy continues to apply to your information).
7. How long we keep information
- We keep your company’s data while your account is active.
- Demo companies and their sample data are deleted automatically after the demo period ends.
- If your company closes its account, we delete or anonymize its data within 30 days of a written request from the owner, except where we must keep it for legal, tax or security reasons. Backups roll off on their normal schedule.
- Disconnected integrations’ tokens are deleted immediately.
8. Security
We use HTTPS for all traffic, role-based access inside each company, database rules that keep each company’s data separate, encrypted storage of connected-service tokens, hashed API keys and passwords, and an activity log that records changes. No system is perfectly secure; if you believe your account has been compromised, contact us right away at support@cintos.app.
9. Your choices and rights
- You can see and correct most of your information in CINTOS. Company owners and admins can export key records (for example invoices, timesheets and the activity log) as files.
- You can ask us to access, correct, export or delete personal information. Depending on where you live (for example Texas or California), you may have further rights under state law. We will not treat you differently for using these rights.
- If your request concerns a customer’s business records about you, we will pass it to that company.
Email support@cintos.app to make a request. We may need to verify who you are first.
10. Children
CINTOS is a business tool and is not directed to children under 16. We do not knowingly collect their information.
11. Where data is processed
CINTOS is operated from the United States, and information is processed in the United States.
12. Changes
We may update this policy as CINTOS changes. We will post the new version here with a new effective date, and tell account owners about important changes by email or in the app.
13. Contact
Gulf Coast Systems Technology LLC · support@cintos.app