Privacy Policy
Last updated 10 August 2026
What we collect, why, and who else sees it. Written to be read, not to be survived.
What we collect
| Data | Why |
|---|---|
| Email address and password (hashed with bcrypt, never stored in readable form) | To let you sign in |
| Business name, contact phone, contact email | Shown to your clients on share links; where reminders and subcontractor replies go |
| Projects: job type, square footage, dates, crew size, finish grade, site ZIP code | To compute your schedule |
| Progress you log: actual dates, punch items, weather delays, change orders | To track a job against its baseline |
| Subcontractor names and their date confirmations | To coordinate who is on site when |
| Page views and feature usage inside the app | To see which parts are used and which are not |
Why we are allowed to hold it
The law wants a stated reason for each purpose, not one blanket answer:
| Purpose | Basis |
|---|---|
| Your account, your projects, and the schedules computed from them | Performing the contract — this is the service you signed up for |
| Order-by and inspection reminders | Performing the contract. You can switch them off without losing the service |
| Email to subcontractors and homeowners you share a job with | Performing the contract — you asked us to send it |
| Which features get used, and whether people come back | Legitimate interest in knowing which parts of the product are worth keeping. Counts, not reading anybody's jobs |
| Keeping backups | Legitimate interest in not losing your work, and our own legal obligation to hold what we hold securely |
We do not collect card details. We do not use tracking or advertising cookies. The only cookie set is the one that keeps you signed in.
Who else sees it
Four outside services are involved in running this, and nothing beyond what each needs:
- Our hosting provider — runs the server your data sits on.
- Resend (Plus Five Five, Inc., San Francisco) — delivers email we send you and your subcontractors. This one is outside the EEA, so it is covered separately below.
- Hetzner Object Storage (Helsinki) — holds the off-site backup copy.
- Zippopotam — receives the site ZIP code, and nothing else, to turn it into a place name and coordinates.
- Open-Meteo — receives those coordinates, and nothing else, to return a forecast. It never sees the ZIP code itself.
Neither receives your identity or anything about your project.
We do not sell personal data, and there is no advertising on this service.
Other contractors do not see your history
No contractor can see another contractor's data. Every query the app makes is scoped to the account that owns the row, and the schedule calibration feature learns from your own logged actuals only, never from anyone else's.
Authorised staff can access account data where it is needed for support and for administering the service — investigating a fault you have reported, or checking that the service is being used as intended. That access exists, it is limited to those purposes, and you can ask us what was looked at.
Data that leaves Europe
Almost none of it does. The server is in Vilnius and the backups are in Helsinki, both inside the EU.
The exception is email. Resend is a US company and processes there, so sending a reminder or a subcontractor request moves that message — an address, a project name, a date — to the United States. Resend's data processing agreement covers this under the EU Standard Contractual Clauses, and Resend is additionally certified under the EU-US Data Privacy Framework.
How long we keep it
While your account exists. Backups are kept for 14 days and then deleted, so data can persist in a backup for up to two weeks after you delete it.
Your rights
Write to support@contractorgantt.com and we will do any of these. Under the GDPR they are rights if you are in the EU or UK; we handle everyone the same way regardless of where they are.
- See it — a copy of what we hold about you.
- Correct it — anything wrong or out of date.
- Delete it — your account and everything in it.
- Take it with you — your projects and schedules in a machine-readable file, to keep or to hand to somebody else. The app already exports schedules to Excel, MS Project and PDF; ask and we will export the rest.
- Pause it — ask us to hold your data but stop using it, while a correction or an objection is being sorted out.
- Object — to anything we do on the basis of legitimate interest, which here means the usage counts. Say so and we will stop counting you.
- Withdraw consent — where we asked for it. Reminders are the case that comes up, and the switch is under Account.
If you think we have handled your data badly, tell us first — we would rather fix it. You can also complain to a data protection authority. In Lithuania that is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt); elsewhere in the EU it is the authority for the country you live in.
Email you can turn off
Order-by and inspection reminders can be switched off under Account, and every reminder carries an unsubscribe link. Email about your account itself — a password reset, a billing change — is not something you can opt out of while the account exists.
Children
This is a tool for businesses. It is not directed at anyone under 18 and we do not knowingly collect their data.
Who holds this data
Dimetris, UAB is the data controller for everything described on this page — the company that decides what is collected and why, and the one to write to about any of it. ContractorGantt is a service of that company, not a separate legal entity.
ContractorGantt is a service of Dimetris, UAB.
| Company | Dimetris, UAB |
|---|---|
| Company code | 304952121 |
| VAT number | LT100012143513 |
| Registered address | Giruliu g. 10-201, LT-12112 Vilnius, Lithuania |
| support@contractorgantt.com |