L Larkmore

Before publishing: replace every [bracketed] placeholder below with your real legal entity name, contact email, and jurisdiction, and have a lawyer review this document. It is a thorough starting draft, not legal advice.

Privacy Policy

Last updated: [DATE]

This Privacy Policy explains how [COMPANY / PROPRIETOR LEGAL NAME] (“we”, “us”, “our”), the operator of the Larkmore application and website (the “Service”), collects, uses, stores, shares and protects information when you use the Service. By creating an account or using the Service you agree to this Policy.

1. Who this Policy applies to

Larkmore is a business tool for construction and real-estate projects. Accounts are created by a workspace owner, who may invite partners, accountants, site engineers and read-only members. The workspace owner is the controller of the project data they enter; we process that data on their behalf as described here.

2. Information we collect

Category	Examples
Account & identity	Name, email address, role, and password (stored only as a secure hash — never in plain text).
Contact details you enter	Partner and vendor names and phone numbers.
Financial & project data	Payments, amounts, categories, stages, vendor bills, credit/payable terms, loan and partner-contribution figures, and bank/UPI account details you choose to record (account number, UPI ID, IFSC, bank name).
Files & media	Payment screenshots, bills, receipts, site photos and documents you upload.
Technical data	IP address and basic request logs used for security and rate-limiting.

We do not collect location data, contacts from your device, advertising identifiers, or biometric data. We do not use third-party advertising or analytics trackers in the app.

3. How we use your information

To provide the Service — record payments, generate reports, track approvals, and store proof.
To authenticate you and keep accounts and workspaces secure.
To operate features you enable, such as sharing a read-only report link or syncing a report to a Google Sheet you connect.
To maintain, debug and protect the Service (including rate-limiting and abuse prevention).
To comply with legal obligations.

We do not sell your personal information, and we do not use your project or financial data for advertising.

4. Sharing a report link and Google Sheets sync

A workspace owner may generate a read-only report link, or connect a Google Sheet. If you do:

Anyone with the link can view that project's report and open its proof files without logging in, until the owner turns the link off. Only share it with people you trust.
If you connect a Google Sheet, we push the report's contents into the Google Sheet you specify, using credentials the owner authorises. Google's handling of that Sheet is governed by Google's own privacy policy.

5. Where your data is stored and who processes it

We use trusted infrastructure providers to run the Service. These sub-processors may store or process data on our behalf:

Supabase — database, authentication and file storage.
Cloudflare R2 — file/object storage (when enabled).
[HOSTING PROVIDER, e.g. Render] — application hosting.
Google — only if you enable the optional Google Sheets sync.

Data may be stored on servers located in [REGION/COUNTRY]. We require our providers to protect your data with appropriate safeguards.

6. How we protect your data

Data is transmitted over encrypted connections (HTTPS/TLS).
Passwords are stored only as salted hashes.
Access is scoped per workspace, and read-only members cannot modify records.
Uploaded files are access-controlled and served through authenticated or token-gated endpoints.

No system is perfectly secure, but we work to protect your information using industry-standard measures.

7. How long we keep your data

We retain your data for as long as your workspace is active and as needed to provide the Service. You can delete individual records in the app. To delete an entire workspace/account and its associated data, contact us at the address below; we will delete it within a reasonable period, except where we must retain certain records to comply with law.

8. Your rights

Subject to applicable law, you may request to access, correct, export or delete your personal data. To exercise these rights, contact us at [PRIVACY CONTACT EMAIL].

9. Children

The Service is intended for business use and is not directed to children under 18. We do not knowingly collect data from children.

10. Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above, and material changes will be communicated through the Service.

11. Contact us

[COMPANY / PROPRIETOR LEGAL NAME]
[ADDRESS]
Email: [PRIVACY CONTACT EMAIL]