Privacy policy

Mi Chalan AI is software that construction companies use to write estimates, collect signatures, bill change orders and document jobs. It is provided by Mi Chalan LLC (“we”, “us”). This page covers the app, the website at michalan.ai, and the document links we send to a contractor's clients.

Two kinds of people use this app

Companies and their crews. The company decides what goes into the app. For that information the company is the one in charge of it and we act on their instructions.

Clients who receive a document. If you are a homeowner who opened an estimate, invoice or change order, the contractor who sent it decided to put your details in. Questions about why they have your information, or requests to correct or remove it, go to them first — we will help you reach them.

What we collect

From the person signing in

• Name, email address, and a password stored only as a one-way hash — never as text.
• If you choose Continue with Google, your Google account's name, email address and profile picture. We never receive your Google password.
• Your role in the company and what the owner allows you to see, so the app can enforce it.
• A session cookie that keeps you signed in, and a record of sign-ins, invitations and access changes so an owner can see who did what.

What the company puts in

• Company profile: business name, address, phone, email, logo and license numbers.
• Clients and contacts: names, addresses, phone numbers, email addresses, and notes the company writes.
• Jobs and documents: scopes of work, prices, estimates, change orders, invoices, payments recorded, terms and conditions.
• Photos, videos and 360° captures of job sites, along with the file's own details such as when it was taken and, if the device recorded it, where.
• Calendar tasks, photo reports and files uploaded to a job.

When a document is signed

• The drawn signature image and the typed name of whoever signed.
• The date and time, the internet address the signature came from, and the exact version of the document that was signed. This is the audit trail that makes the signature worth something to both sides; it is kept with the document.
• Whether the link was opened, and when — so the contractor knows the document arrived.

Automatically

• Ordinary server logs: internet address, browser or app version, the pages or actions requested, and errors. We use them to keep the service working and to investigate abuse.

We do not use advertising trackers, we do not build profiles for advertising, and we do not sell personal information.

Why we have it

• To run the app the company is paying for: write documents, deliver them, collect signatures, bill and keep the records.
• To prove what was agreed — the signature audit trail exists for exactly this.
• To keep accounts secure and to enforce the access an owner has granted.
• To answer support requests.
• To meet legal, tax and accounting obligations.

Who else sees it

We share information only with the services that make the app work:

• Amazon Web Services — runs the application and its database, and stores photos, videos, tours and PDF files in private storage: files are not public, and the app hands out short-lived links. It also finds an address's place on the map (Amazon Location Service), once, when an address is saved.
• Resend — delivers the emails the app sends: documents a company sends to its clients, invitations and password resets.
• Google — only if you choose Google sign-in, and to show maps and suggest addresses as you type one.
• Apple — delivers the iPhone app's notifications (Apple Push Notification service): a short message such as which document was opened, never the document itself.
• OpenAI — when someone uses Mi Chalan AI's assistant, dictation or photo descriptions, the text, recording or photo they give it, and the job details needed to answer, are sent to OpenAI to produce the reply. It is used to answer that request, not to train models on your data. A dictation's recording is deleted once it has been turned into text. If a company never uses these, nothing goes there.

On the phone. The phone app keeps a copy of what you work on, on the phone itself, so it keeps working without a signal; it sends your changes when the phone is back online.

Text messages do not pass through us. When a contractor sends a document by text, the app opens their own phone's messaging app with the message ready to send. We never see or store the message.

We may also disclose information if the law requires it, to protect someone's safety or our rights, or as part of a merger or sale of the business — in which case this policy follows the information.

Where it is kept, and for how long

Information is stored on servers in the United States. We keep a company's records for as long as their account is open, because that is the point: an estimate signed three years ago still has to be there.

When a company closes its account we delete its data within 90 days, except records we must keep longer for tax, accounting or legal reasons, and signed documents that the other party to the agreement is entitled to. Backups roll off within 35 days.

How it is protected

• Everything travels over encrypted connections, and stored files are encrypted at rest.
• Passwords are stored only as one-way hashes.
• Every company's data is isolated from every other company's, and the server re-checks on every single request that the person asking is allowed to have it.
• Owners control, person by person, which parts of the app someone can open and which jobs they can see — a crew member can be limited to their own jobs with no client names or prices at all.
• Nightly backups. No security is perfect; if a breach ever affects your information we will tell you and the authorities as the law requires.

Your choices

• See or correct your information. Most of it you can edit in the app. For the rest, write to us.
• Delete your account. The steps are on the support page. We delete it within 30 days.
• Get a copy. Ask, and we will send your company's records in a readable format.
• Emails about documents are part of the service, not marketing. We do not send marketing email to a contractor's clients.

Depending on where you live you may have further rights — to object, to restrict processing, or to complain to a regulator. Write to us and we will honour them. We do not discriminate against anyone for exercising a privacy right.

Children

The app is for people running or working for a business. It is not for anyone under 18, and we do not knowingly collect information from children. If you believe a child's information is here, tell us and we will remove it.

Changes

If we change this policy we will update the date at the top, and for anything significant we will tell account owners by email.

Contact