Privacy Policy

1. Who we are and what this covers

Big State AI ("BSA," "we," "us") is a product of Big State Solutions, LLC. This Privacy Policy explains what information we collect when you use the BSA website and application, how we use and share it, and the choices you have. It applies to the BSA marketing site (bigstate.ai) and the BSA application (app.bigstate.ai). It does not cover third-party sites we link to, which have their own policies.

By using BSA you agree to this Policy. It works alongside our Terms of Service and the AI-Output & Professional Notice.

2. Information we collect

Information you give us.

• Account information — your email address, company name, and the credentials used to sign in (authentication is handled by our identity provider; see §6).
• Content you submit — the project information you provide so BSA can do its job: plain-language scope and narratives, and any files you upload (e.g. RFPs/specifications, estimates, drawings, daily reports, and Primavera P6 / Microsoft Project schedule files). We call this "Your Content."
• Generated outputs — the schedules, Basis of Schedule documents, narratives, and other deliverables BSA produces from Your Content.
• Communications — messages you send us (e.g. support or access requests).

Information collected automatically.

• Usage and metering data — records of the actions you take (e.g. schedules generated or revised), used to operate the product and account for credit usage.
• Technical/log data — basic technical information needed to run and secure the service (e.g. session, device/browser type, and error logs).

Payment information. When billing is enabled, payments are processed by Stripe. We do not collect or store full payment card numbers; Stripe handles card data under its own security and privacy terms. We receive limited transaction information (e.g. that a purchase succeeded, the amount, and an identifier) to grant the corresponding credits.

We do not knowingly collect special categories of sensitive personal information, and you should not upload personal information that isn't necessary to build your schedule.

3. How we use information

We use the information above to:

• provide, operate, and maintain BSA — including processing Your Content to generate schedules and documents (see §4);
• authenticate you and secure your account;
• meter usage and, when billing is enabled, process purchases and grant/track credits;
• respond to your requests and provide support;
• monitor, debug, and protect the service against fraud, abuse, and security incidents;
• comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not show third-party ads or let advertisers target you in BSA.

4. How BSA processes Your Content (AI processing)

BSA generates schedules using an AI model provided by our AI sub-processor (Anthropic, the Claude API). To do this, the inputs you provide — your narrative and the relevant content of files you upload — are transmitted to that sub-processor to produce your output. A few specific commitments:

• Your Content is processed to serve you, not to train AI models. Content sent to our AI sub-processor through its commercial API is not used to train that provider's models.
• Identity is minimized on ingestion. Where BSA uses an uploaded schedule as a structural reference, it strips client/project identifying details (project and client names and similar identifiers) before that reference is used — consistent with our internal "anonymize on ingestion" rule.
• Your Content stays yours. You retain ownership of Your Content and your generated outputs. We use them only to provide the service to you, as described here.

BSA outputs are an AI-generated professional first draft that must be reviewed by a qualified scheduler before use — see the AI-Output & Professional Notice.

5. Aggregated and de-identified data

We may use aggregated, de-identified information that does not identify you or your projects — for example, counts of how features are used — to operate and improve BSA.

We do not use Your Content to build shared datasets or a schedule "library." If we ever introduce learning from schedule patterns in the future, it will use only anonymized, de-identified patterns, will be done only with your explicit, separate consent, and your identifiable content will never be pooled into a shared dataset without that consent. You will be told before any such program begins, and you will be able to decline.

6. How we share information (sub-processors)

We share information only with service providers ("sub-processors") that help us run BSA, and only as needed to provide the service. Each is bound to protect the information. Our current sub-processors:

• Anthropic — the Claude API that generates schedules from Your Content (see §4).
• Microsoft Azure — cloud hosting and storage, identity/sign-in (Entra External ID), and email delivery (Azure Communication Services) for sending your generated files and account messages.
• Stripe — payment processing when billing is enabled.
• Hostinger — DNS and hosting for the marketing site.

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of BSA, our users, or others; and we may transfer information as part of a merger, acquisition, or sale of assets, subject to this Policy.

7. Data retention and deletion

• Uploaded files you submit to generate a schedule are retained only as long as needed to produce and deliver your outputs and are then automatically removed. (Persistent per-project storage is a future feature; when introduced it will carry its own retention and deletion controls.)
• Generated outputs are available to you; you can download and keep your own copies at any time.
• Account and billing records (including the credit ledger) are retained for as long as your account is active and as required for legal, accounting, and audit purposes.

You can request deletion of your account and associated personal information by contacting ai@bigstate.ai; we will delete or de-identify it except where we must retain certain records by law.

8. Security

We take reasonable measures to protect your information, including per-tenant isolation (your data is kept separate from other customers'), encryption in transit and at rest, access controls, and keeping secrets and keys out of source control. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to any incident.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to withdraw consent where processing is based on consent. To exercise these, contact ai@bigstate.ai. You can also:

• download your generated outputs at any time;
• decline (or later withdraw consent for) any future aggregated-pattern program (§5);
• close your account.

We will not discriminate against you for exercising these rights.

10. Cookies and similar technologies

BSA uses only the cookies and local storage needed to sign you in and keep your session — it does not use third-party advertising or cross-site tracking cookies. The marketing site uses minimal, essential technology to function.

11. Children's privacy

BSA is a business tool intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact ai@bigstate.ai and we will delete it.

12. Where information is processed

BSA is operated from the United States, and your information is processed and stored on U.S.-based cloud infrastructure (and our sub-processors' infrastructure). If you access BSA from outside the U.S., you understand your information will be processed in the U.S.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new "last updated" date and, where appropriate, notice in-app. Continued use after an update means you accept the revised Policy.

14. Contact

Questions or requests about privacy: ai@bigstate.ai, Big State Solutions, LLC (Texas).