Privacy Policy

Effective: October 28, 2026

SubmittalWorks is a marketplace that connects technical professionals with clients for CAD, BIM, and submittal services. This policy explains what we collect, how we use it, and your rights.

1. Information we collect

Account and profile data

When you send a request, we store how you found us — the campaign tags from the link you used.

• Name, email, professional title, company, location, bio, portfolio samples.
• Project postings (clients) and bids/proposals (professionals).
• Messages sent through the SubmittalWorks messaging system.

Payment information

• We do not store credit card numbers or bank credentials on SubmittalWorks servers.
• All payments are processed by Stripe. Professionals complete Stripe Connect onboarding directly with Stripe, and clients enter payment details on Stripe Checkout.
• Stripe receives and processes payment data under their own Privacy Policy.
• SubmittalWorks retains only transaction references (Stripe account IDs, payment intent IDs) needed to reconcile payments and issue payouts.

Usage and technical data

• Session cookies required for login and CSRF protection.
• Request logs (IP address, user agent, page visited) used for abuse prevention and debugging.
• Uploads to portfolios, project rooms, and deliverables are stored in Cloudflare R2 (our file storage provider) under their standard data processing terms.

2. How we use your information

Optional converter analytics

If you choose Allow analytics, we use Google Analytics 4 to measure converter visits, sign-ups and sign-ins, checkout starts, confirmed purchases, and successful conversions. We store your choice in this browser and use a cookie with a random identifier to associate consented events. Our server may send Google that identifier, a fixed public converter page address, event names, conversion format and funding type, and purchase currency, value, item details and a random analytics transaction identifier. We do not include account details, uploaded filenames, file contents, private URLs or payment credentials in these analytics payloads; advertising personalization is disabled. Analytics is optional and choosing no does not affect conversion access. Use No Google Analytics / withdraw in the Optional analytics controls on this page to withdraw permission for this browser. Once saved, withdrawal prevents new collection and pending events are checked against that permission before sending; a request already in flight may finish. Withdrawal does not automatically delete events already sent to Google or stored analytics records. Delivery is not guaranteed. For questions or deletion requests, contact hello@submittalworks.com.

• Provide the core marketplace: letting clients find professionals, professionals submit bids, and projects proceed to paid delivery.
• Process payments and payouts through Stripe Connect.
• Moderate project postings and proposals for compliance with our terms.
• Send transactional email (verification, password reset, bid acceptance, payment notifications).
• Prevent fraud, abuse, and spam.

3. Who sees your information

• Clients and Professionals on the platform see each other's profiles, bids, messages, and deliverables within the projects they're involved with.
• SubmittalWorks administrators have access to all content for moderation and support purposes.
• Stripe receives payment-related data as described above.
• We do not sell your data. We do not serve ads.

4. Data retention

We keep account and project data for as long as your account is active. You can request deletion of your account and associated content at any time by emailing hello@submittalworks.com.

Payment records are retained as required to satisfy accounting, tax, and dispute-resolution obligations.

5. Your rights

• Update or correct your profile at any time via the Profile page.
• Request a copy of the data we hold about you.
• Request deletion of your account.
• Opt out of non-essential email (you cannot opt out of transactional email required to use the service).

6. Security

We use HTTPS everywhere, store passwords with modern hashing (Argon2), and limit data access to what each user and admin needs. No system is perfectly secure — you're responsible for keeping your password safe.

7. Children

SubmittalWorks is not intended for users under 18. We do not knowingly collect data from children.

8. Changes to this policy

We will post updates here with a new effective date. Material changes will also be communicated via email to active accounts.

9. Contact

For privacy questions or requests: hello@submittalworks.com