Privacy policy

This policy explains what March, LLC (“March”, “we”) collects, what we do with it, who else handles it, and what you can ask of us. It is written to be read. Some features are described before they are available; the parts about them apply once they are.

March is software that design and building companies run their business on. It touches three kinds of people:

• People who contact or work with a company that uses March: prospective clients, clients, and people they invite.
• Companies and their teams, who sign in and use it.
• Other people whose information a company handles in March, such as subcontractors, people in meetings or photos, and people on social networks.

Our terms of service are arranged the same way.

If you contact or work with a company

Who has your information

What you send goes to the company you contacted, and is held in March for that company. Only that company’s team, and people it shares your project with, can see it. Nobody at any other company can, and we never combine it with what other companies hold. The company decides how it uses your information in its relationship with you; we handle it to run the software described here. You can ask either the company or us about it.

What we collect

• What you send. Your name, email address, phone number, how you would rather be reached, and what you tell the company about the project, the site, the size, the budget, the timing, and how you found them. Later, your messages, replies, answers, approvals, and anything you upload.
• Where the site is. As you type a place, it is looked up with a mapping provider so it can be shown on a map. We keep the place name and coordinates the lookup returned.
• What the company adds. Notes, summaries, estimates, proposals, contracts, invoices, schedules, photos and video of your project, and the details of calls and meetings, including transcripts or automated notes where the company records them.
• Your agreements. When you agreed to our terms, which version, and the internet address and browser it came from. If you sign a proposal or contract, your name, your signature as typed or drawn, what you signed, and when.
• Your text consent. If you agree to texts, when and how you agreed, and when you stopped.
• What you do with what the company sends you. When an email or text is delivered and opened, which links you follow, when you open a welcome page, proposal, or the client portal, which videos you play and how far, which parts you read and for how long, what you approve, and any times you book.
• Payments. Whether a payment was made, its amount and status, and a reference from the payment provider. Your card or bank account details go to the payment provider and are held by it, not by us. If you link a bank account, the provider may share its name and the last digits of the number.
• Your devices. Your internet address and browser. If you use the app, a device identifier for notifications, if you allow them.
• In your own browser. Your form answers are saved on your device while you fill the form in, so you can come back and finish. That copy never leaves your device and is cleared when you send the form or after a week.

A proposal sets a cookie that remembers you have confirmed who you are, so you are not asked again for 90 days, and the portal uses cookies to keep you signed in. We do not use advertising cookies or advertising trackers, and we do not look you up elsewhere or buy information about you.

What we use it for

• To give your inquiry to the company and keep your project on file for them.
• To understand it. Software, including language models, reads your inquiry, messages, notes, and transcripts to pull out details, place the site, summarize, estimate, and help the company judge how well the project fits its work. It drafts messages, proposals, and estimates for the company to review. This assessment helps the company decide how to follow up. It is not used to make decisions about you that have legal or similarly significant effects, and a person at the company decides what to do. You can ask the company to review anything about how it has assessed your inquiry.
• To contact you for the company: emails and texts its team sends, and messages it has prepared to go out automatically, such as a welcome series and reminders.
• To offer times from the company’s calendar, and send you invitations.
• To show the company what you have opened, read, and approved.
• To show you proposals, contracts, invoices, photos, and project updates, and take your signature and payment.
• To share project details with the people the company brings onto your project.
• To help the company publish its work, including photos of your project, where it has your permission.
• To keep the service secure and stop automated and bulk submissions.

We do not sell your information, we do not share it for advertising, and neither we nor our providers use it to train language models. Your mobile number and text consent are not shared with anyone for their own marketing.

How long it is kept

• An inquiry and its history: for as long as the company uses March, so it can answer if you come back, unless you ask for it to be deleted.
• Signed contracts, signatures, and payment records: for as long as the company must keep them, which is often several years after the project ends.
• Recordings, transcripts, and meeting notes: as the company chooses, and no longer than it keeps your project.
• Records of your agreement to our terms and your text consent: for as long as the law requires us to be able to show them.

If you ask for your information to be deleted, we delete it, apart from what must be kept for the reasons above or by law.

What you can ask

You can stop emails with the link in any of them, and texts by replying STOP. You can ask what is held about you, ask for a copy, ask for it to be corrected or deleted, or ask not to be contacted again. Ask the company by replying to any message, or write to us at team@usemarch.com. We will work with the company and make sure it is done.

If you are a company or on its team

Two kinds of data, two owners

• Account data is about the people who sign in: your name, email address, role, and preferences. We are responsible for it.
• Company data is what a company puts into March or connects to it: its contacts, opportunities, projects, proposals, contracts, invoices, photos, video, messages, meeting notes, subcontractor records, and the drafts made from them. The company owns it and decides what happens to it. We handle it on the company’s behalf as its service provider, under its instructions and our terms of service. What people who contact the company send is company data too, handled as described above.

What we collect

• What you give us: your name and email address when you are invited, anything you add to your profile, and the settings you choose.
• What a company enters, uploads, records, or imports, as described above.
• What comes from accounts a company connects, only once someone at the company authorizes it: mail, calendar events and files from Google Workspace or Microsoft 365; invoices and balances from QuickBooks Online, read only; profile details, posts, messages, comments, followers, and engagement figures from the social accounts it links; reviews from its business profiles; meeting notes and transcripts from its meeting-notes tool; and payout and payment status from its payment provider.
• How the service is used: when you sign in, the internet address and browser a request came from, and what was approved, scheduled, and sent, and by whom. Changes to company records are kept in an audit trail.
• If you appear in video the company records for its marketing, that video.

We use cookies to keep you signed in and to remember your display preferences. We do not use advertising cookies or advertising trackers.

What we use it for

• To run March for the company: to store its records, show them to its team, and do what its team asks.
• To draft. Software, including language models, reads company data to summarize, estimate, and draft replies, proposals, captions, and follow-ups, and to suggest when to post. It may learn from the company’s own past work, and only that company’s, to draft for it. A draft does nothing on its own. A member of the company reads it and decides whether it is sent, posted, or charged.
• To send what the company approved or scheduled: email, texts, posts and messages on its social accounts, calendar invitations, proposals, invoices, and reminders.
• To keep the service secure, to keep one company’s data from another’s, and to find and fix what breaks.
• To answer you when you contact us, and to tell you about changes to the service or these terms.

We do not sell personal information, we do not use it to advertise, and we do not use company data to train language models, ours or anyone else’s.

Data from Google and Microsoft accounts

When a company connects Google Workspace or Microsoft 365, we use what we receive only to provide the features the company turned on, such as reading inquiries that arrive by email and finding open times on a calendar. We do not transfer it to others except as needed to provide those features, to comply with the law, or as part of a merger or sale with notice to the company. We do not use it for advertising or to train general-purpose models, and people at March do not read it unless the company asks us to for support, it is needed for security, or the law requires it. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

How long we keep it

We keep account data while you are on a company’s team, and company data for as long as the company uses March. When a company leaves, it can export its data, and we delete it within 90 days, apart from what we must keep by law, audit records, and copies in backups, which expire on their own schedule. A company can disconnect a connected account at any time, and we stop collecting from it.

If you are someone else a company works with

A company may hold information about you in March even if you have never used it. It is company data, the company decides how it is used, and you can ask the company, or us, about it.

• Subcontractors and suppliers: contact details, bids and prices, tax forms, insurance certificates, lien waivers, payment status, and the project details the company shares with you.
• People in calls and meetings: recordings, transcripts, or notes of what was said, where the company records them. The company is responsible for telling you and getting your consent.
• People in photos and video: images the company takes of its work. If you appear in one that is published and want it taken down, tell the company or us.
• People on social networks: public profile details, comments, messages, and follows on the company’s accounts, and reviews of the company. Replies and messages may be drafted with automated tools.
• People who email or message the company: the messages, where the company connects its inbox.
• People a client shares with, such as an attorney or co-signer: your name, email address, and when you opened what was shared.

For everyone

Who handles it

To run March, we pass the necessary parts of the data to providers, each under a contract that limits them to that purpose:

• Supabase, for the database, file storage, and sign-in.
• Vercel, for hosting and for routing requests to language models. It also counts page visits in aggregate, without cookies.
• Anthropic and other language-model providers, to read, summarize, estimate, and draft. They do not use the data to train their models.
• Resend, to send email and report whether it was delivered and opened.
• Mapbox, to look up places and draw maps.
• Google and Microsoft, for the calendars, mail, and files a company connects.
• Zernio, to publish to the social accounts a company links and report how posts did.
• Stripe, to process payments and bank account links.
• A text messaging provider, a meeting-notes provider, a video provider, and accounting software, when a company uses those features.

We will update this list when it changes. We also share information when the law requires it, to protect the safety or rights of people or the service, and with a buyer if March is sold or merged, who would be bound by this policy.

How we protect it

Data is encrypted in transit. The credentials that let March reach a company’s connected accounts are encrypted at rest, and the application can store them but cannot read them back. Each company’s data is kept separate by the database itself, not only by our code. Access by our own staff is limited to what running and supporting the service needs. No system is perfectly secure; if a breach affects your information, we will tell the company, and you where we are required to, without undue delay.

Your rights

You can ask us what we hold about you, ask for a copy, ask us to correct or delete it, or object to how we use it. Depending on where you live, including California and other US states, the law may give you further rights: to know the categories of information collected and why, to limit the use of sensitive information, and to opt out of sale, sharing for advertising, and certain profiling. We do not sell or share personal information for advertising, and we treat a browser’s Global Privacy Control signal as a request to opt out. You may use an authorized agent, and we may need to confirm your identity. You may appeal a decision we make about your request by writing to us again, and complain to your state attorney general or data protection authority. We will not treat you differently for asking. Write to team@usemarch.com. For company data, we will work with the company.

Where it is processed

March is operated from the United States and meant for use there. Data may be processed in the United States and other countries where our providers operate, under safeguards required by law.

Children

March is not meant for anyone under 18, and we do not knowingly collect their information, except where a company publishes a photo with the permission of a parent or guardian.

Changes

We may update this policy. The date at the top says which version this is. If a change is material, we will tell the companies that use March, and people who have agreed to our terms, before it takes effect.

Contact

March, LLC, team@usemarch.com.