Privacy policy

How SitePunch handles your information.

This policy explains how SitePunch handles personal information on this deployment, including phone-based login, project access records, uploaded photos, and security logs.

Last updated: March 28, 2026

What we collect

  • Phone numbers used for login and project access.
  • Profile data you choose to add, such as your display name.
  • Project content, including punch list items, comments, uploaded photos, and timestamps.
  • Security and operational data such as one-time code records, session records, invite token records, IP addresses associated with login requests, and SMS logs.

How we use it

  • To send one-time login codes.
  • To authenticate users, maintain sessions, and prevent abuse or fraud.
  • To operate the project workflow, including sharing project data with authorized users.
  • To maintain records, troubleshoot problems, and comply with legal obligations.

When information is shared

SitePunch may use service providers needed to operate the product, such as hosting, storage, and authentication vendors acting on behalf of this deployment.

Project data is also shared with the people who are given access to the same project. If you are granted access to a project, the owner and other authorized participants may see the information you add within that project.

Text messaging originator opt-in data and consent are not sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes.

The above excludes text messaging originator opt-in data and consent; that information is not shared with third parties.

Retention and security

Login codes are designed to expire after 10 minutes. Account records, project access records, project data, and SMS logs may be kept longer when needed for security, operations, backups, or legal compliance.

No system is perfectly secure. You should avoid uploading information you would not want shared with the people who have access to the project.

SMS disclosures and your choices

SitePunch currently uses service-related SMS text messages for login only. These messages include one-time login codes requested during sign-in. Message frequency varies. You will receive up to one message per login request. Message and data rates may apply.

Reply STOP to opt out. Reply HELP for help or email support@sitepunch.app. Carriers are not liable for delayed or undelivered messages.

Customer care email: support@sitepunch.app.

Support hours: Mon-Fri 9am-5pm ET.

Because this product relies on SMS for account access, revoking consent for these service-related texts or blocking them may prevent you from signing in to projects you have been granted access to.

State privacy rights

Some U.S. states require businesses to provide privacy notices or consumer privacy rights. If a state privacy law applies to this deployment, SitePunch will handle requests in the manner required by that law.

Changes to this policy

This policy may be updated as the product changes or legal requirements change. The current version will be posted on this page with a revised effective date.