Privacy Policy

Bruto AI LLC ("Bruto AI," "we," "us," or "our") operates Bruto, an AI-assisted construction bidding, estimating, and project-management platform (the "Service"), available at app.bruto.ai. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. This website (bruto.ai) has no accounts, forms, or analytics, and does not ask you for any personal information. It does load fonts from Google Fonts, which means your IP address and browser details are sent to Google when a page loads. Apart from that, the site only links you to the Service.

1. Information We Collect

Account information

When you create an account, we collect your name, email address, and phone number. Your phone number is used to send a one-time SMS verification code and, where enabled, for account security.

Company and business information

We store the business details you choose to enter for your company, such as business address, license number, tax ID, and insurance information, so you can run your business on Bruto.

Project, estimate, and customer data

We store the information you and your team enter to bid and manage work: customers, properties, projects, scopes of work, measurements, assemblies, estimates, proposals, and calendar events.

Job-site photos, documents, and receipts

Photos, documents, and receipts you upload for a project (for example, job-site photos used for measurements or AI takeoff) are stored in our cloud storage and linked to the relevant project.

AI assistant conversations

We store your conversations with Bruto's AI assistant, including any voice messages you choose to record, so the assistant can help you scope and estimate your projects.

Payment information

Subscription payments are processed by Stripe. Bruto AI does not collect or store your full card number; Stripe handles payment details under its own privacy policy and PCI-compliant infrastructure. We store your Stripe customer and subscription identifiers so we can manage your billing.

Proposal signatures

When you or a customer sign a proposal in Bruto, we record the typed signature, the time it was signed, and the IP address and browser used to sign it, to keep a reliable record of consent.

Location for maps and addresses

Property and project addresses you enter are sent to Google Maps Platform to power address autocomplete and to display project locations on a map.

Usage and device information

We automatically collect standard technical information, such as IP address and browser or device type, to keep the Service secure and to understand how it's used.

2. How We Use Your Information

• Provide, operate, and maintain the Service, including bidding, estimating, proposals, and cost tracking.
• Verify your identity and secure your account, including SMS verification codes.
• Generate material and labor cost estimates and material suggestions using AI.
• Process subscription payments and manage billing through Stripe.
• Send transactional communications, such as team invitations, proposal notifications, and account or security alerts.
• Provide customer support and respond to your requests.
• Maintain, secure, and improve the Service.

3. AI-Powered Features

Bruto's estimating assistant is powered by OpenAI's models. When you use AI-assisted estimating, the project information relevant to that request (for example, measurements, selected assemblies, job-site photos, and your questions) is sent to OpenAI to generate a response, including transcribing voice messages you record in the app. We do not use your project data to train third-party foundation models.

4. How We Share Information

We do not sell your personal data. We share information only with the service providers that help us run Bruto, and only as needed to provide the Service:

• Supabase — our database, authentication, and file storage provider (including job-site photos and documents).
• Google Cloud Platform — application hosting and infrastructure.
• OpenAI — AI processing for estimate generation, assistant conversations, and voice transcription, as described above.
• Google Maps Platform — address autocomplete and map display for project and property locations.
• Stripe — subscription billing and payment processing.
• Microsoft 365 — delivery of transactional account emails (such as proposal links and verification codes).
• Our authentication provider's SMS delivery infrastructure — delivery of SMS verification codes.

We may also disclose information if required by law, to protect the rights and safety of Bruto AI and our users, or as part of a merger, acquisition, or sale of assets, subject to this policy.

5. Cookies and Local Storage

Bruto uses cookies and similar local storage only for what's necessary to keep you signed in and to remember your session and basic preferences. We do not use third-party advertising or analytics cookies.

6. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide the Service. You can permanently delete your account at any time from Settings → Danger Zone in the app. Deleting your account removes your personal account access; if you're the sole owner of a company workspace, deletion also removes that company's workspace data. Some information may be retained where required for legal, tax, or accounting obligations.

If you'd rather not do this in the app, or need help, email support@bruto.ai and we will process your deletion request.

7. Data Security

Traffic to and from the Service is encrypted in transit (HTTPS/TLS). We use industry-standard safeguards, including access controls and role-based permissions, to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Children's Privacy

Bruto is a business tool intended for contractors and construction professionals. It is not directed to children, and we do not knowingly collect personal information from anyone under 16.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Continued use of Bruto after a change takes effect means you accept the updated policy.

10. Contact Us

Questions about this policy, your data, or a deletion request? Contact us at support@bruto.ai.