Legal · Privacy

Privacy
Policy

Effective 28 May 2026 Last updated 28 May 2026 Applies to commonprojekts.com & the Common Projekts client portal app

Scope

Common Projekts LLC (“Common Projekts”, “we”, “us”) is a New York-based architectural design firm. This policy explains what personal information we collect, why we collect it, and what we do with it, both on this website and inside the Common Projekts client portal application available on the Apple App Store.

The client portal is provided to active clients of the studio. Access is invitation-only, there is no public sign-up. If you have not been invited and wish to engage the studio, please use the contact page.

Data we collect

We collect only what is necessary to operate the studio and the portal. All collected data is linked to your account identity, none of it is used for advertising, tracking across other companies’ apps, or sale to third parties.

Email Address
Provided when we invite you to the portal. Used to sign you in and to send project-related notifications.
Name
Provided by you or by Common Projekts staff when your portal account is created. Displayed on chat messages and selection comments.
User ID
An internal identifier (Supabase auth UID) generated when your account is created. Used to associate your data with you.
Photos & Videos
When you choose to attach images or videos to a chat message, field report, or selection comment. Stored in our private project file library.
Chat & Comment Content
Messages, reactions, replies, and selection or budget comments you send within the portal. Visible to your project team and to Common Projekts staff.
Customer Support Content
If you contact us for help via the support email or the in-app contact link, the content of that correspondence.
Usage Data
Which screens you open and how you move through the portal, recorded against your account. We use this only to understand how the portal is used and to improve it, never for advertising or to track you across other companies’ apps or websites.

What we do not collect

  • Device identifiers used for advertising
  • Precise or coarse location
  • Health, financial, or biometric data
  • Crash logs or diagnostic data sent off-device (we may add opt-in crash reporting in a future release; this policy will be updated before that happens)
  • Browsing or purchase history on other sites or apps

How we use data

Almost every category of data we collect is used for the purpose Apple defines as App Functionality: providing and supporting the features of the client portal. The one exception is Usage Data, which we use for Analytics: understanding how the portal is used so we can improve it.

  • Authenticate you and keep you signed in across sessions and devices
  • Display project-specific information, chat, selections, budget, schedule, files, to the people authorized to see it
  • Send push and email notifications related to your project
  • Respond to your support requests
  • Diagnose and fix problems in the app
  • Understand which portal features are used, in aggregate, so we can improve them

We do not use your data to target advertising, build behavioral profiles, or sell to third parties.

Sharing & processors

We do not sell personal information. The only third parties that process data on our behalf are the infrastructure providers strictly required to run the portal:

  • Supabase Inc.: database, authentication, and file storage. Acts as a data processor under our instructions.
  • Apple Inc.: Apple Push Notification service, for delivering notifications to the app.
  • Vercel Inc.: hosting for the public website.
  • Resend: transactional email delivery (project notifications, password resets).

We may disclose information if required by law, to enforce our terms, or to protect the rights and safety of clients, the studio, or the public.

Retention

We keep portal data for the duration of the active client relationship plus a reasonable archival period, so that you can return to your project record later. You can request earlier deletion at any time (see Account deletion).

Backups are retained on standard infrastructure-provider schedules and overwritten on a rolling basis.

Your rights

Subject to applicable law, you can:

  • Request a copy of the personal data we hold about you
  • Ask us to correct inaccurate information
  • Ask us to delete your account and personal data (see below)
  • Object to processing or ask us to restrict it

To exercise any of these rights, email david@commonprojekts.com. We respond within 30 days.

Account deletion

You can delete your portal account from inside the app at any time: open Settings → Account → Delete Account and confirm. Deletion is permanent and removes your authentication record and the personal data linked to it.

Content you contributed to a shared project record, chat messages, comments, selections, may be retained in anonymized form so that the project history remains coherent for the other participants. If you would like that content removed as well, email david@commonprojekts.com and we will handle it manually.

If you cannot access the app to delete your account, email david@commonprojekts.com from the address on file and we will process the request.

Children

The Common Projekts portal is intended for adult clients engaging with our architectural services. It is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

Tracking

We do not track you across other companies’ apps or websites. The Common Projekts app does not display advertising and does not use the App Tracking Transparency framework, because no tracking occurs.

The public website uses minimal first-party analytics where applicable. No cross-site tracking cookies or advertising pixels are used.

Changes

When we update this policy in a material way, we will update the effective date at the top of this page and, where appropriate, notify portal users by email or in-app message.

Contact

Questions, requests, or concerns about this policy or your data: