Privacy Policy

This Privacy Policy applies to the Constructured website and product pages; demo, sales, support, and other business communications with us; hosted software services; and operational communications sent through our products. It does not replace any customer agreement, MSA, order form, data processing agreement, or other contract governing a customer's use of Constructured services.

Where Constructured processes data on behalf of an enterprise customer, the customer is responsible for the data it provides, the users it authorizes, and any notices, consents, or permissions required for its employees, contractors, customers, or other authorized personnel.

• Contact details such as name, company name, business email address, phone number, mailing address, and job title.
• Inquiry, demo, account, billing, support, and contract information provided during business interactions with us.
• Operational records and workflow data submitted or generated through Constructured services, including incident, dispatch, inventory, analytics, project, or service records.
• Communications data, including call, SMS, pager, email, and other communications metadata and related content when required to provide service functionality.
• Device, browser, IP address, approximate location, usage, diagnostic, audit, and application log information.

• Operate, maintain, secure, support, and improve our website and services.
• Provide Constructured and Osprey product functionality to customers and authorized users.
• Create, route, monitor, document, analyze, or support operational workflows such as dispatch, emergency callout, inventory, analytics, reporting, and account administration.
• Send service-related notices, operational alerts, support communications, security verification, and administrative messages.
• Respond to inquiries, provide demos, negotiate contracts, and manage customer relationships.
• Analyze usage, troubleshoot issues, improve performance, and protect against fraud, abuse, or security incidents.
• Comply with legal obligations and enforce our agreements.

Some Constructured services, including OspreyStrike and potentially other Osprey products, may use SMS, voice, pager, email, or similar communications for operational, transactional, security, or administrative purposes. These communications may include emergency callout orders, escalation notices, status and incident updates, security verification, account notifications, service updates, or other operational messages requested or enabled by an enterprise client.

Constructured does not use Osprey operational messaging programs to send marketing, promotional, or advertising messages. Message frequency varies based on customer account usage and operational activity. In periods of high operational activity, recipients may receive multiple messages within a short timeframe. Message and data rates may apply. Reply STOP to opt out of SMS messages. Reply HELP for help.

Constructured provides business-to-business services. Enterprise clients are responsible for authorizing operational messaging and for enrolling only employees, contractors, or other authorized personnel who may receive messages in connection with the client's business.

As part of the applicable agreement, each enterprise client consents to receive SMS, voice, and/or automated operational messages through Constructured services on behalf of its enrolled employees, contractors, and authorized personnel using company-provided or company-authorized contact information.

Enterprise clients are responsible for obtaining and documenting any required employee, contractor, or personnel consent, notice, authorization, or opt-in before enrolling a mobile number or other contact method. This may include consent obtained through onboarding, employment policies, contractor agreements, emergency notification procedures, company communications policies, or another documented internal process.

As a condition of platform use, enterprise clients contractually warrant that lawful consent, authorization, or documented opt-in has been obtained for every mobile number enrolled in a Constructured messaging program, and that such documentation is available upon request where required for legal, regulatory, carrier, or Twilio compliance.

Recipients may opt out of SMS messages at any time by replying STOP, CANCEL, END, QUIT, or UNSUBSCRIBE. Upon receipt of any of these keywords, the recipient's number will be added to a suppression list for the applicable messaging program. No further non-exempt SMS messages will be sent to that number through the applicable program unless the recipient later re-enrolls or re-consents where permitted by law. A one-time opt-out confirmation message may be sent to acknowledge the request.

Recipients who need assistance may reply HELP at any time. This will trigger an automated response with relevant support information, which may include the enterprise client on whose behalf the message was sent. Recipients may also contact Constructured directly at legal@constructured.com.

Constructured does not sell, rent, or share mobile phone numbers, SMS opt-in data, or text messaging originator information with third parties or affiliates for marketing or promotional purposes. Mobile opt-in information is collected and used only for Constructured operational messaging and is not transferred, sold, or used for unrelated campaigns.

We may disclose or process information with vendors, service providers, communications providers, hosting providers, security providers, professional advisors, legal/regulatory authorities, and enterprise customers as reasonably necessary to provide the services, operate and secure our systems, comply with law, support messaging compliance, or enforce agreements.

Customer data is maintained separately by customer or account. Consent or contact data provided by one enterprise client is not used by another enterprise client.

When an employee, contractor, or other authorized personnel opts out of operational messaging, Constructured may notify the applicable enterprise client or designated manager of that opt-out status for limited operational purposes, including maintaining accurate on-call lists, dispatch coverage, and compliance with emergency response requirements. Constructured does not share opt-out status outside the applicable enterprise client's organization or use it for marketing purposes.

Constructured messaging programs are designed to support Application-to-Person (A2P) 10DLC, Twilio, and downstream carrier compliance requirements where applicable. Applicable SMS campaigns may be registered with carrier registries or messaging providers, and Constructured may maintain programmatic controls intended to help ensure that operational messages are sent only through authorized, consented, and compliant messaging programs.

Enterprise clients are responsible for providing accurate campaign, use-case, sender, and consent information when required for registration, vetting, carrier review, Twilio review, audit, or compliance purposes. Constructured may use or disclose relevant messaging, opt-in, and consent information as reasonably necessary to support such compliance obligations, but not for marketing or unrelated campaigns.

We and our service providers may use cookies, local storage, analytics tools, and similar technologies to operate the website, understand usage, improve performance, and support sales, security, and service functionality.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, maintain business and audit records, resolve disputes, enforce agreements, support security and messaging compliance, and comply with legal obligations, unless a longer retention period is required by contract with an enterprise client.

We use commercially reasonable administrative, technical, and organizational safeguards designed to protect information processed through our website and services, including access controls, encrypted data transmission where appropriate, monitoring, and logically separated customer environments.

Depending on where you are located, you may have rights to request access to, correction of, deletion of, or restrictions on certain personal information. Because many Constructured services are provided on behalf of enterprise clients, we may direct requests relating to customer-controlled data to the applicable enterprise client.

If personal information is transferred across borders, we will take steps designed to ensure it receives appropriate protection as required by applicable law and customer agreements.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, messaging requirements, or applicable regulations. The effective date at the top of this page will reflect the most recent revision.

For questions about this Privacy Policy or our privacy practices, contact Constructured, Inc., 11001 W. 120th Ave., Suite 400, Broomfield, CO 80021, legal@constructured.com.