Legal
Client Portal Privacy Policy
Effective August 25, 2026
1. What we collect.
Three things: (a) account information — your name, email, company name, and password (passwords are stored scrambled; we cannot read them); (b) the building and work data you enter — properties, work orders, photos, compliance records, documents, vendor records; (c) basic technical records — sign-in times and network addresses, kept for security.
2. How we use it.
Only to run the client portal for you: showing you your data, sending the emails you set up (notifications, invites, password resets, daily digests), answering your support requests, and keeping the service secure. We do not sell your data. We do not run advertising. We do not use third-party trackers.
3. Cookies.
One cookie, which keeps you signed in. That is the entire list.
4. Who else handles data.
Our infrastructure providers touch data only as needed to provide the service: the company that hosts our servers and database, the email delivery service that carries our messages, and — once paid plans launch — a payment processor (your card number goes directly to them and never touches our servers). Each is bound by contract to protect your data and use it for nothing else.
5. Security.
Data is encrypted on its way to and from us and where it is stored; passwords are scrambled; two-step login is available on every account; sign-in attempts are rate-limited. Honest note: no system on earth is breach-proof. If a breach ever affects your data, we notify you without undue delay.
6. How long we keep it.
As long as your account is active. Close your account and your data is deleted within 30 days, with residual copies in routine backups clearing on a rolling schedule after that.
7. Your rights.
Ask at any time for a copy of your data, a correction, or full deletion — through bifscorp.com/portal/support. We honor California privacy rights for California residents.
8. Age.
The client portal is a business tool, not for anyone under 16.
9. Changes.
We email account holders at least 30 days before any change to this policy takes effect.