Privacy Policy
Effective 10/04/2026
Hoshmand AI ("we", "us") operates RunF9, a construction scheduling application. This policy explains what RunF9 collects, why, who processes it, how long it is kept and the controls you have. If your organization has a signed agreement with us, that agreement takes precedence where it differs.
1. What we collect
- Account data: your name, work email, organization, role, and a one-way hash of your password (bcrypt). If you turn on two-step verification, its secret is stored encrypted and recovery codes are stored only as hashes.
- Project data your organization adds: interview answers and notes, generated schedules, overrides with reasons, reviews and quality decisions. When you upload a schedule file (P6 XER, MS Project XML, Excel/CSV, PDF), RunF9 extracts the activities, relationships, calendars and dates and stores those; the original file is not kept.
- Ask AI history: questions you ask about a schedule and the answers.
- Security and audit records: sign-ins and failed sign-ins, the actions taken in RunF9 (for example "exported plan", "changed a role"), with time, IP address and browser type. Your organization uses these to prove who did what.
RunF9 uses one strictly necessary cookie to keep you signed in. It has no advertising or analytics trackers.
2. How we use it
To provide the service (scheduling, analysis, exports, AI features your organization allows), to secure accounts and detect abuse, to keep the audit record your organization relies on, and to support you when you ask. We do not sell personal data or use your organization's project data to train AI models or to serve other customers.
3. AI processing
- Your organization controls AI. An admin can switch AI off completely, in which case nothing is sent to any model and RunF9 runs on its built-in rules.
- In cloud AI mode, the parts of a schedule needed to answer a request are sent to one cloud AI provider's API: Anthropic (Claude) by default, or OpenAI where a deployment selects it. Only one provider is active at a time. Projects marked CUI or classified are never sent to a cloud model.
- In on-premises / air-gapped deployments, requests go only to a model inside your own network.
- Interview answers marked "Can't share" are never sent to any model.
- Each AI request is logged with the model, purpose, size and a fingerprint (hash) of the request, but not its content, so your organization can audit AI use.
4. Who processes data for us
| Provider | Purpose | Data |
|---|---|---|
| Vercel Inc. | Application hosting and request logs | All application traffic |
| Neon Inc. | Managed PostgreSQL database and backups | Account, project and audit data |
| Anthropic, PBC | AI features (default cloud AI provider), only when cloud AI is enabled for your organization | Request content described in section 3 |
| OpenAI, L.L.C. | AI features (alternate cloud AI provider), only where a deployment selects it and cloud AI is enabled for your organization | Request content described in section 3 |
| Resend, Inc. | Transactional email (confirmation links, password resets, invitations) | Recipient email address and message text |
| GitHub, Inc. | Encrypted off-site copies of database backups, when that backup is enabled | Encrypted database backups |
On-premises deployments use none of these providers. We will update this list before adding a new provider that processes customer data.
5. How long we keep it
| Data | Kept |
|---|---|
| Account data | While the account exists; deleted when you or your organization delete it |
| Project data | Until your organization deletes it, or automatically after a period of inactivity your admin sets |
| Ask AI history | 365 days by default (your admin can change this) |
| Audit records | For the life of the organization; deleted with it (a record that the deletion happened is kept) |
| Ended sign-in sessions | 30 days |
| Rate-limit counters | 2 days |
| Database backups | Roll off on the database provider's backup schedule |
6. Your choices and rights
- Download your personal data, or delete your account, under Account & security.
- Organization admins can export all of the organization's data, set retention, remove members, and delete the organization under Organization.
- For any other request (access, correction, objection), email privacy@hoshmand.ai. Because project data belongs to your organization, we may refer requests about it to your organization's admin.
7. Security
Connections are encrypted with TLS, including the connection to the database (with certificate verification); data is encrypted at rest by our database provider. Access inside an organization is limited by role, every firm's data is kept separate, and sensitive actions are recorded in a tamper-evident audit log. See our security overview for details.
8. Changes and contact
We will post changes here with a new effective date and notify organization admins of material changes. Questions: privacy@hoshmand.ai · Hoshmand AI, hoshmand.ai.