forbuilders runs on Microsoft Azure in the Central India region. Data is encrypted in transit (HTTPS, TLS 1.2 or higher) and at rest, secrets are kept in a key vault, and the database sits on a private network.
Microsoft Azure, Central India
Encrypted in transit and at rest
Private network for the database
The right people, the right projects
Five roles decide what each person can see and do. Owner and Finance see all projects; Project Leads, Site In-charge and Observers see only the projects they are assigned to.
Owner, Project Lead, Site In-charge, Finance, Observer
Project-by-project access
Site staff never see wages or money totals
Sign-in that protects you
Continue with Google, or email and password. Every new device is confirmed with a one-time code sent by email, and sensitive actions ask for a fresh code.
One-time code on every new device (expires in 5 minutes)
Growing delays, then a lock, after wrong passwords
See your devices and sign out everywhere
Alerts for important changes
Owners and users are emailed when something important happens, so nothing changes quietly.
New device, password or email change
Team and role changes, deleted money entries
Backup changes, Owner overrides, company exports
Backups and your own copy
We keep rolling recovery backups for up to 35 days. Owners can also back up to their own Google Drive every day; forbuilders sees only the files it creates or that you pick.
Daily Google Drive backup, owned by you
Choose what to back up and how long to keep it
Failures are emailed to Owners
Take it with you
Your company owns its data. Owners can download a complete export at any time, and every user can download their own data.
Full company export, any time
Download my data, for every user
Closed companies: 30 days to export or reopen, then deleted
Privacy
What we never do.
forbuilders is a business tool. Your records are there to run your sites, and nothing else.
No advertising or analytics cookies, and no third-party tracking.
We do not sell personal data.
We do not use your data to train artificial-intelligence models.
Location is read only when someone taps Punch in or Use my location. Never in the background.
Service providers are limited to Microsoft Azure, Cloudflare and Google, as listed in the Privacy Policy.
Your rights
Under India’s DPDP Act.
When your company enters details of workers, clients or vendors, your company decides how that data is used, and we process it on its behalf. For your own account, we are responsible.
See your dataSettings → Your data → Download my data.
Correct itIn Settings, or by writing to us.
Delete your accountSettings → Your data → Delete my account.
Withdraw consentFor example the daily summary email or Google Drive, in Settings.
ComplainTo our Grievance Officer, Dinesh Kumar, at grievance@forbuilders.in. Acknowledged within 24 hours, resolved within 15 days. You can then go to the Data Protection Board of India.
Certifications, stated honestly
We are a young company and we do not claim certifications we do not hold.
This page says exactly what we do. Found a security problem? Email contact@forbuilders.in with “Security report” in the subject. A person reads every report.
Your records, under your control.
Free during early access. Sign up with Google or email, add a project and invite your team in about five minutes.