Privacy Policy

Who We Are

Cinderblock is provided by:

Cinderblock Inc 3511 W Commercial Blvd. Ste 307 Fort Lauderdale, FL 33309 USA

This Privacy Policy explains how Cinderblock collects, uses, discloses and protects personal information when you visit our public website, use our free tools at tools.cinderblock.com, use the Cinderblock web or mobile application, or access documents shared through Cinderblock. Website analytics choices are described separately from application features and monitoring.

Information We Collect

Information you provide directly:

Name, email address, and password when you register for an account
Business name, address, and contact details
Name, email address, password, and contact details of secondary users
Business and operational data you enter into Cinderblock
Messages and file attachments submitted via the website or within the web or mobile applications

Information collected automatically may include:

Device and browser information.
IP address and approximate location.
Pages viewed, referring pages and interactions with our website or application.
Information about application feature use, errors and performance.
Cookie identifiers and other browser-storage information used for the purposes described in this policy.

Optional public-website analytics information is collected according to the regional rules and choices described below. Information needed to operate requested features, provide support and protect forms is handled separately.

Free Tools

Document and calculation content entered into our free tools stays in your browser. It does not transfer into a Cinderblock Application account. We cannot recover these records if your browser storage is cleared or lost.

If you opt in, we collect your company name, email, address, and phone number and use our third-party CRM service to manage these details for marketing emails and sales follow-up by email. You can unsubscribe at any time.

You can decline the optional company-details saving and marketing workflow and still create and download documents. Unsubscribing does not remove company details already saved in your browser.

Technical information collected for analytics and security is described separately below.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Cinderblock application and website
Process your account registration and manage your subscription
Respond to support requests and inquiries
Send transactional communications, including receipts, billing notices, and account notices.
Send marketing emails and sales follow-up by email where you have opted in.
Analyze product usage to improve features and fix issues
Detect and prevent fraud, abuse, or security incidents
Comply with applicable legal obligations

We do not sell your personal information to third parties. We disclose information to providers as described below to help operate Cinderblock and deliver its services. Your business records, including jobs, customers, estimates, invoices and documents, remain your business data.

Third-Party Services

Cinderblock uses third-party providers for hosting, analytics, support, forms, security, payments and integrations. We disclose information relevant to the service being provided. The descriptions below distinguish public-website services from application services. Provider privacy notices give additional information about their practices.

Website

Analytics

In the United States, Australia and Canadian provinces and territories outside Quebec, website analytics starts by default with a notice and a control to turn it off. In Quebec, the United Kingdom, the European Economic Area and all other locations, we ask you to accept before starting analytics. Unknown locations also require acceptance. A saved decline or Global Privacy Control blocks analytics.

Google Analytics 4 measures website visits and interactions using cookies and browser and device information. Google Privacy Policy
Ahrefs Web Analytics measures visits and interactions without cookies or persistent browser identifiers. It processes page addresses, referrers and browser and device information, and creates a daily visitor identifier using IP address and browser information. Ahrefs states that it discards raw IP addresses and does not track visitors across days. Ahrefs Privacy Policy
Google Tag Manager deploys website analytics tags when analytics is allowed under these regional rules and your choices. The website keeps advertising consent denied and disables Google signals and advertising personalization in its Analytics configuration. Google Privacy Policy

Cloudflare provides country and, for Canadian visitors, province or territory codes so that we can choose the appropriate analytics notice. The endpoint returns only those codes, without an IP address, city or precise coordinates. We do not save these location codes in your browser. Cloudflare Privacy Policy

Support and communication

Freshchat, provided by Freshworks, supplies support chat when you open it. It processes technical information and the messages, attachments and contact details you provide so that we can respond and maintain support history. Browser storage supports conversation continuity. Freshchat also uses Cloudflare security services to help prevent bots and abuse.

Freshsales, provided by Freshworks, manages prospect and customer contact information, including information submitted through the free-tool marketing opt-in.

Freshworks Privacy Notice
Cloudflare Privacy Policy

Forms

Static Forms processes contact and partner application form submissions. Static Forms Privacy Policy
Google reCAPTCHA helps protect website forms from spam and abuse. It processes browser, device and interaction information and communicates with Google for risk analysis. Google Privacy Policy
Cloudflare Turnstile protects the opt-in process in our free tools at tools.cinderblock.com against automated submissions and abuse. It processes technical information, including IP address and browser information, with Cloudflare for security checks. Cloudflare also uses these signals to improve Turnstile’s bot detection. Cloudflare’s Turnstile Privacy Addendum

Application

Hosting and Storage

Heroku provides Application hosting and infrastructure. Salesforce Privacy Statement
Google Cloud provides Application hosting and storage. Google Cloud Privacy Notice

Analytics & Product Improvement

Amplitude: product analytics used to understand how users interact with the Cinderblock web application. Privacy Policy
Microsoft Clarity: session recording and heatmap tool used on the web and mobile app to understand how users navigate and interact with the product. Clarity may record mouse movements, clicks, and scrolling behavior. Session recordings use data masking. Privacy Policy

Error Tracking & Performance

Sentry: error and performance monitoring used on the web and mobile app to detect and diagnose application issues. Privacy Policy
Firebase Performance Monitoring (Google): monitors mobile app performance including startup time, network requests, and screen rendering. Privacy Policy

Payment Processing

Stripe: processes credit card and ACH payments. Cinderblock does not store card details; payment data is handled directly by Stripe. Privacy Policy
Cardknox (Sola): alternative payment processor for credit card and ACH payments. Privacy Policy

Accounting Integration

QuickBooks Online (Intuit): optional integration that syncs customers, invoices, payments, and items between Cinderblock and QuickBooks. Only activated if you connect your QuickBooks account. Privacy Policy

Email Delivery

Postmark sends transactional emails, including account notifications and documents sent on our customers’ behalf. Privacy Policy

Recipient Data

Cinderblock allows Users to send links to their customers, vendors, and other third parties (Recipients) for the purpose of reviewing, signing, or making payment on documents such as estimates, invoices, purchase orders, and payment requests.

If you are a Recipient who has received one of these links, this section applies to you.

What we collect from Recipients

When a Recipient accesses a link or takes action through it, the following information may be collected:

Name, email address, and other contact details provided by the Recipient
Payment information submitted when making a payment (handled exclusively by Stripe or Cardknox/Sola; Cinderblock does not store full payment details)
A partial payment record (last four digits, payment method, and card type) for reference purposes
Device information and IP address, collected automatically upon access
IP address and identifying attributes captured at the time of signing, for the purpose of legal enforceability of electronically signed documents

How Recipient data is used

Recipient data is stored within the sending User’s Cinderblock account. Cinderblock acts as a data processor on behalf of the User and does not use Recipient data for its own tracking, marketing, or sales purposes.

Cinderblock may send transactional emails to Recipients on behalf of the User, such as document acceptance confirmations and payment receipts. These emails are not used for marketing.

When a Recipient views a shared link, the User who sent the link may receive a notification that the document has been viewed. This notification does not include detailed personal information about the Recipient.

Data retention

Recipient information is retained as part of the sending customer’s records, subject to the customer’s instructions, our retention practices and applicable legal requirements. It is not necessarily deleted when a document is viewed, signed or paid.

Recipients may contact the sending customer to request access, correction or deletion of those records. They may also contact us, and we will assist as appropriate to our role and applicable law.

Cookies and browser storage

Our public website uses cookies and browser storage to remember your analytics choice, support chat you request and protect website forms.

Google Analytics and Ahrefs follow the regional rules described above. Select Turn analytics off or Decline to stop optional website analytics. You can change or withdraw your choice through Cookie settings in the footer. We remember an explicit choice for 30 days using cookies and local storage when browser storage is available. A regional default is not saved as your consent. When a saved choice expires, the regional rules apply again.

Support chat loads when you open it. Chat and form protection use separate browser storage and are not controlled by the analytics choice.

The application uses separate technologies for its features and services, including signed-in sessions and the application analytics and monitoring described above. The public website’s analytics choice does not control those application services.

You can block or clear cookies and other site data through your browser settings. Doing so may affect features that depend on that storage. See our Cookie Policy for the public website’s technologies, purposes and storage durations.

Data Storage and Security

Cinderblock is based in the United States. Personal information may be processed in the United States and other countries where our service providers operate. We use encryption in transit and at rest to help protect personal information.

Access to business records within the Application is controlled by the permissions configured for the customer’s team. Authorized Cinderblock personnel may access relevant business data as needed to fulfill customer requests, provide support, investigate security incidents or abuse, and comply with legal obligations. Accessing a customer’s Application account on their behalf requires permission.

Data Retention

We retain Application account and business data while the account is active. After subscription or trial access ends, the data may become eligible for deletion once at least 12 months have passed, provided access has not been restored. Deletion is discretionary rather than automatic at 12 months. Customers may request earlier deletion, subject to applicable law and any permitted retention for legal, accounting, security, or dispute-related purposes.

Website analytics, support information and marketing contact information are retained according to the purpose for which it was collected, including measuring website use, responding to inquiries, maintaining support history and managing opted-in communications. Browser-storage expiry does not determine how long information is retained on our servers or our providers’ servers. Clearing browser storage or withdrawing analytics consent does not automatically delete information already collected.

You may request deletion of your data by contacting us at [email protected].

Your rights

Depending on your location and the law that applies, you may have the right to:

Access personal information and obtain information about its collection, use and disclosure.
Correct inaccurate personal information.
Request deletion of personal information.
Receive a portable copy of certain personal information.
Object to or restrict certain processing.
Opt out of processing for sale, sharing or targeted advertising, where applicable.
Lodge a complaint with a relevant privacy regulator.

These rights may be subject to conditions and exceptions. We do not sell personal information. We will not unlawfully discriminate against you for exercising a privacy right.

Where processing relies on your consent, you may withdraw that consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. To withdraw consent to optional website analytics, use Cookie settings in the website footer.

To submit another privacy request, contact [email protected]. An authorized representative may submit a request on your behalf where permitted by law. We may request information needed to verify identity or authority when appropriate to the request. If we process the relevant records on a customer’s behalf, we may refer your request to that customer or assist it in responding.

Children’s Privacy

Cinderblock is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

Changes to this policy

We may update this policy when our practices change. We will update the Last updated date when we revise it. Where applicable law requires additional notice or consent for a change, we will provide that notice or request consent.

Contact Us

For questions about this Privacy Policy or your data, contact us at:

[email protected]

Cinderblock Inc 3511 W Commercial Blvd. Ste 307 Fort Lauderdale, FL 33309 USA