**Effective date:** 9/17/26

 

## Who we are

 

Versacon AI LLC ("Versacon," "we," "us") is a Texas limited liability company located at 5900 Balcones Dr Ste 100, Austin, TX 78731. You can reach us at support@versacon.ai.

 

## What Versacon is

 

Versacon is construction operations software for subcontractors and small general contractors. It runs as an app inside Microsoft Teams, and can also be used from Outlook and the rest of Microsoft 365. It also includes an optional email assistant — a Gmail add-on or Outlook add-in — that turns emails you send to it into documents.

 

This policy explains what information Versacon collects, how we use it, where it is stored, and the choices you and your company have.

 

## Information we collect

 

**From Microsoft sign-in.** Versacon does not have its own username and password. You sign in with your organization's Microsoft account, through Microsoft Entra ID and Microsoft Teams single sign-on. When you sign in, Microsoft sends Versacon a signed token containing your display name, work email address (user principal name), your organization's Microsoft tenant ID, and your Microsoft user object ID. Versacon never sees or stores your password.

 

**Information you or your company enter.** Once signed in, Versacon stores the information your company enters to run its construction projects, including:

 

- Company profile: name, address, licence number, logo reference, tax rate, payment terms

- Users: name, email, role, title, phone number

- Projects, budgets, commitments and contracts, invoices, pay applications, change orders, RFIs, submittals, and daily logs

- Timesheets: worker names, hours, cost codes, and approvals

- Contractors directory and contacts: owners, general contractors, architects, and vendors

- Vendors

- The settings your company chooses within Versacon

 

**Documents and files — and where they live.** Versacon generates documents, such as PDFs and Word files, and lets you upload photos and attachments. These files are not stored on Versacon's own servers. They are stored in your company's own Microsoft SharePoint site, or — for companies that choose it — your company's own Google Drive.

 

Versacon reaches SharePoint through Microsoft Graph, using permissions your Microsoft 365 administrator grants. Versacon only uses those permissions for the specific site and folder your company nominates, typically a folder called "Versacon Documents." In its own database, Versacon keeps only a reference to each file — an identifier and a link — not the file's content. Your Microsoft 365 administrator can revoke Versacon's access at any time in Microsoft Entra.

 

**From the email assistant, if you use it.** If you use Versacon's optional email assistant, we process the emails and attachments you send to it in order to generate the document you asked for. To understand your request and draft the document, the content of those emails and attachments is sent to Anthropic's Claude API, an AI service. Anthropic processes it only to return the result to Versacon and, under its commercial API terms, does not use it to train its models. This applies only to what you send to the email assistant — nothing you enter in the Teams app is sent to an AI provider.

 

**Automatically — logs.** Versacon keeps operational logs recording who did what and when: your email address, your company, the action taken, timestamps, and any errors. These logs are used for security and troubleshooting.

 

**Website cookies.** Our marketing website, versacon.ai, is built on Wix. Wix sets its own cookies on that site for site operation and analytics. This is separate from the Versacon application itself, which you reach through Microsoft Teams.

 

## How we use this information

 

We use the information above to:

 

- Run and operate the Versacon service for you and your company

- Keep the service and your data secure

- Provide support when you contact us

- Bill your company for its subscription

- Meet our legal and accounting obligations

 

## Where it is stored and who processes it

 

Versacon's database — everything listed under "Information you or your company enter" above — is a cloud Postgres database hosted by Supabase in the United States (Amazon Web Services, Oregon).

 

Versacon's application servers run on Google Cloud (Cloud Run) in the United States. Google Cloud also stores our operational logs and encrypted daily database backups, kept for up to 365 days.

 

Your documents and files are stored in your company's own Microsoft SharePoint, or Google Drive, accessed through Microsoft Graph as described above.

 

We also use Google Workspace for Versacon's own company email, and Wix to host our marketing website.

 

In short, the providers that process data on Versacon's behalf are: Microsoft (Entra ID, Teams, Microsoft Graph, SharePoint), Google Cloud (application hosting, logs, backups), Supabase (database), Anthropic (AI processing for the email assistant only), Google Workspace (our email), and Wix (our website).

 

## Sharing

 

We do not sell or rent your data, and we do not show advertising in Versacon. We share information only:

 

- With the providers listed above, so they can host and run the service

- Within your own company, according to each user's role — for example, an Admin can see more than a Field user

- When required by law, such as in response to a valid legal request

 

## Security

 

- All data is encrypted in transit (TLS) and at rest, by the providers listed above

- Every request to Versacon is authenticated using a Microsoft-signed token

- Data is kept separate by company

- Access is controlled by role, Admin or Field, and this is enforced by the service itself, not only by what a screen shows

 

## Retention and deletion

 

We keep your company's data for as long as your subscription is active, plus a short wind-down period afterward. If your company's administrator asks us in writing to delete your data, we will do so within 30 days; backup copies age out within 365 days after that. Some records — for example, those needed for tax or accounting purposes — may be kept longer where the law requires it.

 

## Your choices and rights

 

- Your company's administrator can access, correct, export, or delete your company's data by emailing support@versacon.ai

- If you are an individual user and want your own information corrected or removed, please ask your company's administrator first — they control access to your company's Versacon account

- Your Microsoft 365 administrator can revoke Versacon's access to your SharePoint or Google Drive at any time, in Microsoft Entra

 

## Children

 

Versacon is a business product for construction companies. It is not directed at children, and we do not knowingly create accounts for anyone under 16.

 

## AI

 

The Versacon app in Microsoft Teams does not send your company's data to any AI provider. The optional email assistant does: the emails and attachments you send to it are processed by Anthropic's Claude API to draft the document you asked for, as described above, and are not used to train AI models. If we add AI-assisted features to the Teams app in the future, we will update this policy before any customer data is processed by an AI provider.

 

## Changes to this policy

 

We may update this policy from time to time. If we make a material change, we will update the effective date above and, where appropriate, let your company's administrator know.

 

## Contact

 

Questions about this policy? Email support@versacon.ai.