Personal Data Processing Policy

Version 1 · Effective November 4, 2026

This policy explains what personal data PB Manage collects, what it is used for, who receives it, and how you can see it, correct it, or ask us to delete it. It complies with Colombian Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015). The Spanish version governs.

1. Who the controller is

Plano Base Arquitectos S.A.S., NIT 901.603.373-9, located at Calle 18 # 61-29, apartamento 411 C, Cali, Valle del Cauca, Colombia. Phone +57 301 426 4603.

• For anything about your data: privacy@pbmanage.com
• App support: support@pbmanage.com

Plano Base is the controller of PB Manage account data. The documents and records each client company uploads to its organization (drawings, submittals, photos, daily logs) belong to that company. For those, Plano Base acts as a processor and uses them only to provide the service.

2. What data we collect

• Your account: name, email, company, job title or role on projects and, if you provide it, phone number.
• How you use the app: what you upload, review, approve, or comment on, and when. This is kept in each document's record, because on a job site you need to know who did what.
• Technical data: IP address, browser and device type, sign-in date and time, and a device identifier for shared crew accounts.
• What you or your company upload: site photos (which may show people or places), documents, and comments.
• Location: only the job site's, which the company enters for weather and the daily log. PB Manage does not track your location.

We do not collect sensitive data (health, biometrics, ethnicity, religion, politics) or data about children. If a photo shows any by accident, the company that uploaded it can remove it.

3. What we use it for

1. To give you access to the app and to your company's projects.
2. To record who took each action on drawings, submittals, and documents.
3. To send you service notices and emails: invitations, sign-in codes, pending items.
4. To support you when you ask.
5. To keep the service secure: prevent abuse, investigate failures, and keep backups.
6. To meet legal obligations and respond to requests from competent authorities.

We do not sell your data. We do not use it for advertising. We do not use it to train artificial intelligence models.

4. Your rights

As the data subject, you can:

• See, update, and correct your data.
• Ask for proof of the authorization you gave us.
• Ask how we have used your data.
• Revoke the authorization or ask us to delete your data, except where the law or a contract requires us to keep it. Job records (for example, who approved a drawing) are kept because they belong to the client company; in that case your name can be replaced with "Former user."
• File a complaint with the Superintendence of Industry and Commerce (SIC) after completing the process with us.
• Look up your data free of charge, at least once a month and every time this policy changes.

5. How to submit a request or a claim

Email privacy@pbmanage.com from your account's address, or write to Calle 18 # 61-29, apartamento 411 C, Cali, Valle del Cauca, Colombia. Tell us who you are, what you are asking for, and attach anything that helps. If you write on someone else's behalf, attach the power of attorney.

1. Requests (to know what data we hold and how we use it): we answer within 10 business days of receiving it. If we need more time, we tell you why before the deadline and answer within 5 more business days.
2. Claims (to correct, update, delete, or revoke): we answer within 15 business days from the day after we receive it. If information is missing, we ask for it within 5 business days; if it does not arrive within 2 months, we consider the claim withdrawn. While it is open, the data is marked "claim in progress." If we need more time, we tell you and answer within 8 more business days.

6. Who else receives the data

We use cloud providers to run the service. They process data on our behalf, under contract, and only for that purpose. Some are in the United States, so there is an international transfer and transmission of data:

The SIC does not list the United States as a country with an adequate level of protection. The transfer is therefore made with your express authorization and with providers that commit by contract to protect the data with security, confidentiality, and limited-use measures (Article 26 of Law 1581).

The people at your company who manage the projects you work on can also see your account data. The Plano Base team sees it only to provide support or fix a failure.

7. How we protect it

Encryption in transit and at rest, access by organization (one company never sees another's data), a record of every support session, and backups. No system is infallible: if an incident affects your data, we notify you and the SIC as the law requires.

8. How long we keep it

While your account is active and your company uses PB Manage. Audit records are kept for one year and operational backups for 30 days. If your company closes its organization, its data is deleted after 30 days, unless it purchased the archive add-on.

9. Cookies and browser storage

PB Manage uses only what is essential for your session and the app to work: your session, your view preferences, and working copies so it can be used without a signal. We do not use advertising cookies or third-party trackers.

10. Effective date and changes

This policy is effective November 4, 2026. If we make a material change, we will let you know in the app and ask for your authorization again. The databases are kept for as long as the purposes described above apply.