How Sledge collects, uses, and protects personal information.
Effective Date: November 27, 2026 · Last updated: October 28, 2026
We at Sledge (DMR Corp, doing business as Sledge) respect your privacy and are committed to protecting it. This Privacy Policy explains how we collect, use, share, and protect personal information when you use our website at getsledge.com, the Sledge web app, the Sledge mobile apps for iOS and Android, Sledge AI, and our integrations, APIs, emails, texts, and support (together, our "Services").
This policy does not cover third-party services you connect to Sledge, such as your email or accounting provider. Those services have their own privacy policies.
Contents: 1. Personal information we collect · 2. How we use personal information · 3. Google and other integrations · 4. How we share personal information · 5. Selling, sharing, and sensitive information · 6. Cookies · 7. How long we keep information · 8. Your rights and choices · 9. Information in a contractor's workspace · 10. Children · 11. Security · 12. International transfers · 13. Changes to this policy · 14. SMS / Text Messages · 15. How to contact us
Information you give us. When you sign up, use Sledge, or contact us, you may give us:
Information we receive when you use Sledge. We automatically receive some information when you use our Services:
Information from the mobile apps. Our mobile apps only access your device when you give permission, and only for the feature you are using:
You can turn this permission off at any time in your device settings. If we add features that need other permissions, such as the camera or microphone, the app will ask you at the time and we will update this policy.
Information from integrations you connect. If you connect other services to Sledge, we receive information from them, such as email messages and attachments (Gmail or Outlook), accounting records (QuickBooks), bid invitations (BuildingConnected and public bid sites), and bank account information (through Stripe Financial Connections). See Section 3 for details.
Information from other sources. We may also receive information:
We use personal information to:
How Sledge AI uses your information. The Sledge assistant runs on Google's Gemini models, and the voice Sledge speaks with runs on the open Kokoro model; both are reached through OpenRouter. Reading the documents you upload, turning what you say into text, and the search index behind similarity matching run on OpenAI's models, reached directly rather than through OpenRouter. OpenAI also provides a stand-in voice if the Kokoro model is unavailable. Your request reaches only the provider of the model handling it. In the mobile apps, before Sledge AI first sends your information to these outside AI providers, we tell you which providers are involved and ask for your permission.
AI providers do not train on your information. Every provider we use has agreed not to train its models on what you send.
How Sledge AI learns. Sledge improves its own AI by learning from how it is used. Here is how that works:
AI can make mistakes, so please review results before you rely on them.
When people at Sledge look at AI conversations. Our team does not routinely read your Sledge AI conversations. A person may review a specific conversation or result for support, security and legal purposes, for example when you ask us for help, when you flag a result, when we investigate abuse or a security issue, or when the law requires it. Authorized members of our team, or contractors working for us under confidentiality duties, may also review a small sample of de-identified AI conversations and results to check quality and safety and to improve Sledge AI. Every such access is logged.
Voice. When you talk to Sledge AI, we record and transcribe what you say so we can carry out your request. We do not use your voice to identify you.
No significant automated decisions. We do not use automated tools to make decisions about people's jobs, credit, housing, insurance, or similar matters. Sledge AI drafts and suggests. People make the decisions.
De-identified and aggregated information. We may turn information into a form that no longer identifies you, your company, or any person, and combine it with information from other customers. Sledge owns this information and may use it for any lawful purpose, including to improve Sledge, train AI, and publish or share industry insights and benchmarks. We keep it in that form, will not try to re-identify it, and require anyone we share it with not to re-identify it.
Legal bases (for people in the EEA, UK, and Switzerland). We use your information when it is needed to provide the Services you signed up for; when we have a legitimate interest, such as keeping Sledge secure, improving it, and telling businesses about it, and that interest is not outweighed by your rights; when you have given consent, such as for marketing cookies and text messages; and when the law requires it. We train and improve Sledge's own AI on de-identified information based on our legitimate interest in making Sledge more accurate for the construction industry. You can object to this at any time by emailing privacy@getsledge.com, and an owner or admin can turn it off for the whole workspace.
When you connect an integration, we use the information only for the features you turned on. We never sell it, never use it for advertising, and never use it to train AI models. We delete integration data within 30 days after you disconnect, unless it has become part of your workspace records, such as an invoice you saved.
Google (Gmail and Calendar). We use Gmail access to find and read invoices, bids, and documents in your email, mark processed emails as read, send emails you ask Sledge to send, and verify your identity. If you connect Google Calendar, we read and write calendar events so Sledge can show your schedule and add meetings you ask it to. Sledge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. People at Sledge do not read your Gmail or Calendar data unless you ask us to for support, it is needed for security, or the law requires it.
Microsoft (Outlook and Outlook Calendar). We use Outlook access to read, sync, and send email for the same purposes as Gmail, and to read and write calendar events when you connect Outlook Calendar. We follow the same rules.
QuickBooks. We use QuickBooks access to sync vendors, customers, invoices, bills, and transactions in both directions.
Stripe. Stripe handles subscriptions, invoice payments, payouts, identity and business checks, and bank linking through Stripe Financial Connections. Stripe collects card numbers, bank account details, tax IDs, and identity documents directly. We never see your full card number or bank login. We receive what we need to show your payments, such as amounts, dates, status, and the last four digits. If you link a bank account through Stripe Financial Connections, we also receive the transactions from that account so Sledge can match them to your bills and invoices. Sledge stores your business tax ID itself. Stripe and its partner banks also use your information for their own legal duties, such as preventing fraud, verifying identity, and tax reporting, as described in the Stripe Privacy Policy. When payroll is offered, our payroll provider, Check, will handle payroll information the same way.
BuildingConnected and public bid sites. We use these to bring bid invitations and project details into your leads.
Mapbox. We use Mapbox to look up and check addresses, and to draw maps. Only address information is sent.
We do not sell personal information for money. We never sell or share your workspace content, integration data, or mobile app data.
On our website only, if you accept marketing cookies, advertising tools such as the Meta pixel, the LinkedIn Insight Tag and our visitor identification service may receive information about your visit. California law may treat this as "sharing" for advertising. You can opt out at any time through "Your Privacy Choices" in our website footer, the cookie banner, or a Global Privacy Control signal from your browser. In the past 12 months, we have not knowingly sold or shared personal information of anyone under 16.
Some information we collect counts as "sensitive" under California law: your login details, bank account details used for payments, and precise location from the mobile apps. We use it only to provide the Services you asked for, keep accounts secure, and prevent fraud. We do not use it to make guesses about you.
We keep personal information only as long as we need it for the reasons in this policy and to meet our legal duties. Here are our main timelines:
When you delete something, we remove it from our live systems within 30 days, unless we need to keep it longer. We may keep information longer when the law requires it (for example, a court order), to prevent fraud or abuse (including the minimum information needed to enforce an account ban), for financial records, or to keep a record that we completed a deletion request. To decide how long to keep each kind of information, we look at why we need it, how sensitive it is, the risk if it were exposed, and what the law requires.
Choices everyone has. You can update your account details, disconnect integrations, turn off mobile permissions and notifications, unsubscribe from marketing emails, reply STOP to our texts, and change your cookie choices.
Deleting your account. Email support@getsledge.com from the address on your account and we will delete it. Where self-serve deletion is switched on, you can also delete it yourself — on the web under Profile, then Account, then Delete account, or in the mobile app under Profile, then Delete account; Delete your Sledge account has the full steps. Either way we confirm by email, lock the account straight away and hold it for 30 days so you can undo the request, and you can restore it by signing in or from the link in that email at any point in those 30 days. If you would rather not wait, choose Delete now and the account is deleted within the hour, or once any payments in progress have settled.
California residents. Under California law, you have the right to:
In the past 12 months, we collected these kinds of personal information, for the purposes described in Section 2, and kept them as described in Section 7:
People in the EEA, UK, and Switzerland. You have the right to access, correct, delete, restrict, or move your personal information, to object to how we use it for our legitimate interests or for marketing, and to withdraw consent at any time. You may also complain to your local data protection authority.
Canada. If you live in Canada, you can ask to access or correct your personal information and withdraw consent, subject to legal limits, under Canadian privacy law.
Residents of other U.S. states. If you live in a state with its own privacy law, such as Colorado, Connecticut, Virginia, Texas, or Oregon, you have similar rights to access, correct, delete, and opt out of targeted advertising. If we deny your request, you can appeal by replying to our decision, and we will respond as your state's law requires.
Turning off AI improvement. An owner or admin can turn off de-identified AI improvement for the whole workspace by emailing privacy@getsledge.com. Any user can ask us not to use their own AI conversations by emailing privacy@getsledge.com.
How to make a request. Email privacy@getsledge.com or visit Your Privacy Choices. To protect your information, we will confirm it is you, usually by emailing the address on your account. Someone else can make a request for you if they send your signed permission. We respond within 45 days for U.S. requests, 30 days for Canadian requests, and one month for EEA and UK requests, and will let you know if we need more time.
If Sledge AI gets something wrong about you. AI can make mistakes. If a Sledge AI result contains wrong information about you, email privacy@getsledge.com and we will correct or remove it where the law and the technology allow.
Who is responsible for what. For Sledge's own information (your account, billing, support requests, and how you use our website and apps), Sledge decides why and how it is used, and is the data controller. Sledge is also the controller when it uses workspace content for its own limited purposes: security, fraud prevention, creating de-identified and aggregated information, and AI improvement as described in Section 2. For the work a contractor puts inside their workspace, the contractor decides what goes in and why, so the contractor is the controller and Sledge is only the processor acting on their instructions under our Data Processing Agreement.
Contractors use Sledge to run their businesses. When a contractor adds information to their Sledge workspace, such as details about their crew, clients, subcontractors, or vendors, that contractor controls it and we handle it for them under our Data Processing Agreement. If your information is in a contractor's workspace, please contact that contractor first. If you contact us, we will pass your request to them and help them respond.
Sledge is built for businesses and is not meant for anyone under 18. We do not knowingly collect information from children. If you believe we have, please contact us and we will delete it.
We work hard to protect your information. We use encryption when information moves and when it is stored, access controls, two-step sign-in for our team, logging, and monitoring. No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission. If a security incident affects your personal information, we will notify you and regulators as the law requires.
Sledge is based in the United States and stores information in the United States. If you use Sledge from outside the U.S., your information will be transferred here. For transfers from the EEA, UK, or Switzerland, we use the European Commission's Standard Contractual Clauses (and the UK Addendum) or another lawful transfer method. Information from Canada is also stored in the United States, where it may be accessed by U.S. authorities under U.S. law.
We may update this policy from time to time. When we do, we will post the new version with a new Effective Date and keep past versions available. For important changes, we will let you know by email or in Sledge before they take effect, and ask for your consent again where the law requires. We will not use information we collected before a change for a materially new purpose without your consent.
Privacy and AI laws change often, in the U.S. and around the world. We review this policy regularly, update it when laws, regulators, or best practices change, and work to comply with every privacy law that applies to us. If you think something here should be added, fixed, or made clearer, please email privacy@getsledge.com or legal@getsledge.com.
If you opt in to quiz text messages, we collect your mobile number, your consent record (date, time and page where you opted in), and your replies. We use this only to send the quiz messages you agreed to (up to 3) and to respond to you.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. This excludes service providers that help us deliver messages, which may use it only to provide that service.
Reply STOP to opt out, HELP for help, or email support@getsledge.com.
If you have questions about this policy or your information, please contact us:
Sledge (DMR Corp) 3722 Las Vegas Blvd S, Unit 2709 Las Vegas, NV 89158-4330 United States privacy@getsledge.com support@getsledge.com
Related pages: Cookie Policy · Subprocessors · Data Processing Agreement · Your Privacy Choices · Terms of Service
November 5, 2026. Added an SMS / Text Messages section (14) for the Sledge quiz texts (your result plus up to 2 follow-ups, 3 at most), and stated that mobile information and text opt-in data are never shared with third parties or affiliates for marketing. Contact moved to Section 15. Named the LinkedIn Insight Tag among the advertising tools that marketing cookies allow.
October 28, 2026. Added de-identified AI improvement with an opt-out, identifiable training kept opt-in, use of AI feedback, team review of de-identified AI samples, ownership and sharing of aggregated insights, longer retention for abuse investigations, and Sledge's controller role for its own limited purposes. Added Canadian rights and the legitimate-interest basis and right to object for AI improvement.
October 27, 2026. Named the Meta pixel among the advertising tools that marketing cookies allow.
October 23, 2026. Named the AI providers behind Sledge AI and how we route their requests, corrected what Stripe shares with us, added browser location, calendar sync, meeting recordings and job applicants, restored the SMS keywords and the controller/processor explanation, replaced the retention timelines with the ones the product actually runs, and corrected how to delete your account.