Privacy Policy

DECMS is operated by Constructive Agents, LLC under the Vectora Systems product brand. Contact: john@constructive-agents.com.

This policy covers information processed through the DECMS web application, including public pages, signed-in workspaces and the demo-request form.

You provide information when you create an account, build projects and checklists, upload files, request a demo, or contact us.

• Email address, display name and password (passwords are handled by the sign-in service and are not visible to us).
• If you use Google sign-in: the name and email address Google shares with us.
• Role assignments, team and organization memberships, and account status.
• For new accounts: the Terms of Use and Privacy Policy versions accepted and the acceptance time.

The demo form collects name, work email, organization, role, country, project type and your message. We use it to respond to your request. Administrators can view and update the status of requests.

• Teams, organizations, projects, buildings/areas, Features of Work and Work Assemblies.
• Checklist statuses, notes, assignees, due dates and sign-offs.
• Equipment register entries and certification status.
• Files you upload (evidence, certificates and vendor datasheets), stored in private storage accessible to people with access to the project.
• A change history (audit log) recording who changed project and administrative records and when.

Our hosting and sign-in providers process technical information needed to deliver the Service, such as IP address, browser type and request logs. Search terms you type are used to return results in your browser session; we do not store a search history in our database.

DECMS uses your browser's local storage for functions you need: keeping you signed in, remembering recently opened projects, whether you dismissed the guide, and (for administrators) which new items were seen.

We do not currently use analytics, advertising or marketing cookies.

When a page error occurs, technical error details may be reported to our hosting platform to help us troubleshoot. Sign-in and database services keep security and access logs. We do not run third-party analytics tools.

If you choose to analyze a vendor datasheet, the file content is sent through the Lovable AI service to a third-party AI model to produce suggestions with quoted evidence. Suggestions are not applied automatically. Do not upload restricted or personal information for analysis.

• To provide, secure and maintain the Service and your workspaces.
• To control access according to roles you and your teams assign.
• To respond to demo requests and support inquiries.
• To troubleshoot errors and prevent misuse.
• To keep a record of legal acceptance and project changes.

Where applicable law requires a legal basis, we rely on performance of our agreement with you (operating your account), our legitimate interests (security, support, responding to inquiries), and legal obligations.

• Lovable — application hosting, database, authentication, file storage, AI service routing and error reporting. Lovable relies on its own sub-processors (including cloud infrastructure and AI model providers).
• Google — only if you choose Google sign-in.

Project content is shared with the people you or your team and organization grant access. We share information with the service providers above to operate the Service, and may disclose information if required by law, to protect rights and safety, or in connection with a business transfer. We do not sell personal information.

We keep account and project information while your account or the project exists, and demo requests while needed to respond and follow up, unless you ask us to delete them. Backups and logs held by providers follow their retention periods. A formal, owner-approved retention schedule has not yet been defined.

Access to data is restricted by role-based rules in the database, uploaded files are kept in private storage, and changes are recorded in an audit log. No system is completely secure; protect your credentials and avoid uploading restricted information.

You can update project content, remove files and leave teams within the app. Team and organization owners control membership. To delete your account, contact us.

Depending on where you live, you may have rights to access, correct, delete or obtain a copy of your personal information, or to object to certain processing. Email john@constructive-agents.com; we may need to verify your identity.

Our providers may process information in the United States and other countries. Where required, transfers rely on the safeguards offered by those providers.

DECMS is a professional tool not directed to children under 16, and we do not knowingly collect their information.

We will update the effective date when this policy changes and provide notice in the Service for material changes.

Constructive Agents, LLC — john@constructive-agents.com. See also our Terms of Use.

This policy is effective as of November 4, 2026.