Privacy

Last updated 13 October 2026

Vessel is field software for construction teams, built and run in New York. This page says what Vessel collects, why, who else gets it, how long it is kept, and what you can have deleted.

What Vessel collects

What you capture is stored on your phone, and it is also stored on our servers, so a lost or broken phone does not take the job with it.

One note about photos: Vessel keeps the time a photo was taken, because a dated photo is the whole point of a field record.

Why it is collected

For one purpose: to hold your field record, put your documents together, and show it to the people you choose. Vessel does not sell it, does not use it for advertising, and does not train a model on it. Vessel does not read your jobs for its own purposes.

Who else gets it

Where your record is stored

Everything in the list above is held with the company that runs Vessel's servers, including the photo, video and PDF files.

Service providers for text — when you generate minutes, and for a recorded walk's report

When you press generate on a set of minutes, that walk's record goes to an AI service provider that puts it into your format and sends it back: the job and client name, the walk's own number, its date, type and attendees, and every item on it — its own reference, its number, trade, division, its issue type, whether it was added after the walkthrough, when it was captured, status history, the note you typed, the location you typed, and the names on it: who answers for it, and anyone else you listed as involved. If you ask for changes to a draft, what you typed to describe the change and the draft you're changing go along too, so the draft can be edited as you asked. The AI service providers are xAI (speech to text), Anthropic (reports and minutes) and TypeSafe (checking the minutes). These service providers process it only to run Vessel, are bound by their terms with us to protect it, and may not use it to train AI. They keep it only as long as needed to provide and secure the service, or as the law requires. This page does not promise it is discarded right away. Photos are not part of what goes. Nothing goes unless you press the button. One exception: when your company has voice on (Account settings, "Meeting records"), pressing the button also sends what is listed under "Service providers for voice and text" below, whether or not that walk was recorded, and a recorded walk's report is made by an AI service provider when you close the walk or open its minutes, without a press. The sound of a walk never goes from this button: it goes to an AI speech-to-text service provider after the walk ends, as set out below.

Service providers for voice and text — when your company has voice on

Recording is off until your company's owner turns on Meeting records in Account settings; from then on every walk records by itself from the moment it starts, unless it is turned off there. Before a walk's sound is written up, each person taps “I agree” once, and the company's owner taps “Allow” once. The sound is kept on Vessel's server only as long as needed to run and secure the service; the written words stay with the walk.

The AI service providers are xAI (speech to text), Anthropic (reports and minutes) and TypeSafe (checking the minutes).

After the walk ends, each piece of sound goes to an AI service provider that turns it into text, with the names of the people, companies, trades and places on that job as spelling hints. Videos keep their own sound, as part of the video, until the video is deleted; that sound is not sent to that provider.

To write the report and the minutes, other AI service providers receive the job's name, the walk's words and the notes typed on it, the names, trades and companies of the job's people, the job's open items and those closed since the last meeting, the previous meeting's minutes and the answers subs and link holders sent back since then — a price is only mentioned as sent, never its amount.

Another AI service provider receives each line of the draft minutes with the job's context — its name and client, the attendees and the job's people, its open items and the walk's report — to check it is clear before anyone sees it.

These service providers process it only to run Vessel, are bound by their terms with us to protect it, and may not use it to train AI. They keep it only as long as needed to provide and secure the service, or as the law requires. Account settings has two switches. "Record my walks" is per phone: it stops recording on that phone and deletes the sound not yet sent from it. "Meeting records" is set by your company's owner and applies to everyone at the company: turning it off stops recording and deletes the sound already kept at once; the written minutes stay. The drawn signatures that come back through these links are not sent to any AI service provider. If you raise an item from an answered RFI, that item's note carries the answer and the name of whoever gave it, and goes to them like any other note.

Your location, only when a walk starts or you tap

Vessel checks your location to file a walk to the nearest project you pinned, when you start a walk without a project or tap Locate by GPS, and when you pin a project to where you stand. It never tracks you in the background. Each tap on "Locate by GPS", "Pin the project where I am" or "Move the pin to where I am" takes one more reading. A pinned spot stays on your phone; it is not sent to our servers.

Apple Maps, if you tap Open in Maps

When you tap “Open in Maps” on a job you have pinned, your phone opens Apple Maps with that job's pinned location and its name. Apple then has them, under Apple's own terms rather than ours. Nothing is sent to Apple Maps unless you tap.

Crash reports

Vessel's app includes a crash-reporting tool. When the app crashes or hits an error, it sends a crash-reporting company a crash report that is not tied to you or your account: what went wrong, the phone model, the iOS version and the Vessel version, along with the ordinary technical details any web request carries, such as the phone's network address. Vessel does not attach your name, your email address or your account to it, and the app does not send screenshots, a record of your taps or how you use the app. A crash report does carry a random code the phone makes for the install of Vessel; it is not tied to your account. An error message inside a report could, rarely, contain a word from your work. That company processes crash reports only to run Vessel, is bound by its terms with us to protect them, and keeps them only as long as needed to provide and secure the service, or as the law requires.

An app-update service provider — app updates only

Vessel can ship a fix without making you reinstall, so on launch the app asks an app-update service provider whether a newer version exists. That request tells the provider which version of Vessel your phone is running, along with the ordinary technical details any web request carries and a random code the update service makes for the install of Vessel.

Apple — installing Vessel

You get Vessel from Apple. Apple knows you installed it and keeps what it collects under its own terms, not ours.

Who sends the sign-in code, and the form on this site

The sign-in inside the app and the sign-in on this website are the same one, and both mail the code through an email-delivery service provider. That provider gets the email address you type on that screen and the message carrying the code.

WhatsApp, if you tap it

Tap WhatsApp on a Book entry and your phone opens WhatsApp with that person's number in it. That hands their number to WhatsApp, the same way tapping a phone number hands it to your dialler.

Messaging apps and email, if you share a link

Vessel does not send the link to a change order, submittal or RFI, and does not email the person you send it to. It leaves your phone through whatever you share it with. To make a preview, a messaging app, an email app or a mail scanner may open the link itself and receive what the page shows, a change order's total included, under its own company's terms. The preview card Vessel draws holds only the job, the document's number and subject, and its due date.

No advertising network, no data broker, no usage-measurement company and no CRM is in that list, and none gets any of it. The website has its own list, further down.

What the app asks your phone for

Five permissions, each refusable:

• Camera — to take the walkthrough photo and record walk video.
• Microphone — Vessel records sound during a walk, to write that meeting's minutes, only once your company's owner has turned on Meeting records in Account settings. It also records sound as part of the videos you shoot. Account settings has two switches: "Record my walks" is per phone and deletes the sound not yet sent from it; "Meeting records" is set by your company's owner, applies to everyone and deletes the kept sound.
• Photo library — to add site photos you already took today, and to save a report or walk card back to your camera roll.
• Location — Vessel checks your location to file a walk to the nearest project you pinned, when you start a walk without a project or tap Locate by GPS, and when you pin a project to where you stand. It never tracks you in the background. Each tap on "Locate by GPS", "Pin the project where I am" or "Move the pin to where I am" takes one more reading.
• Contacts — to bring people from your address book into your Book. Vessel reads your whole address book to put a list on screen for you to pick from. The people you pick become entries in your Book, and what is in your Book is stored on our servers — their names, numbers, emails and everything else the Book holds about them. The ones you do not pick are not kept.

It asks for nothing else. Vessel sends no push notifications.

The photographs, and the people in them

This is the part most privacy pages skip, so here it is plainly. On a walk you photograph work — and sometimes people are in the frame. A crew doing the install. A driver signing for a delivery. Whoever happened to be standing at the wall.

Vessel does not do face recognition, and will not. It does not group photos by person, identify anyone, or build a profile of anybody.

But those photographs, the names and mobile numbers in your Book, and the signature on a delivery ticket are other people's information, held in your account, gathered on your client's property. Vessel's job is to keep it where you put it. Whether you are permitted to capture it in the first place is governed by your contract, your client's site rules and your own obligations — and that judgement is yours, not the app's.

Who else can see your record

People you add to a project. Add someone to one of your jobs and, on their own phone, they see that job's name, location, address and working hours, its progress photos, and its requests for information and documents. How much depends on the role you gave them: an outside party sees only the photos marked for sharing, and only the requests and documents that are both finished and addressed outward.

The owner of a job you walk on. If someone added you to their job and you capture photos, items or a whole walk on it, the owner gets all of it on their own phone. That is what being added to a job is for.

Anyone holding a link to a walk. The app can turn one walk into a web link. Whoever opens that link sees the job name, the walk's date and type, each item on it — number, title, status, trade, division and the name of the person answering for it — and that walk's photos. They need no app, no account and no invitation. There is no button in the app that closes a link once it is made: write to hello@walkvessel.com to have one closed.

Anyone holding a link to a submittal or an RFI. Whoever opens it sees that one document. That means the job's name and client, your company's name and the person who signs for it, and its number, revision, subject and due date. It also means who it is addressed to, and what you filled in on it: the question, spec section, division, product, deviations, drawing reference, location, lead time and cover note. An RFI's PDF also holds the photos of the item it was raised from. They see the attached files by name and can open or download them; a PDF downloads. Each file opens from its own link, which works for fifteen minutes and stops when the document's link closes. They need no app, no account and no invitation. They can answer once, and the answer comes back to your phone.

Anyone holding a link to a change order. Whoever opens it sees the change order: the job's name and client, your company's name, its number, revision, subject, description, reason, schedule days, type and terms, the total with its lines and fees, who it is addressed to, its due date, and the backup files you chose to include, such as a sub's quote. Those files open for as long as the link does. Once it is signed, the page also shows who signed and when.

When a link closes because it was answered, replaced by a newer revision or withdrawn, opening it still shows why: who answered (the company it was sent to, or the name typed when it went to no one) and when, that a newer revision replaced it, or that it was withdrawn, with the job, the document's number and your company's name.

A file or a page someone saves stays with them. Closing a link or deleting the job does not reach what they saved.

How long it is kept, and deleting it

Your record is kept until it is deleted. The exceptions: walk sound, and what the voice, text and crash-reporting service providers above receive, are kept only as long as needed to provide and secure the service, or as the law requires. A signed change order's record can outlast an account; see "Everything, at once" below.

A job. Delete it for good from the Archive and this goes from our servers with it: every walk, every item and its history, the photos and the actual image files, the video you recorded and its sound, the pins, the requests for information, submittals and change orders, the files attached to them, and the answers, names and signatures that came back through their links, the exclusions and coordination decisions with their evidence files, the material requests, the deliveries, the manpower reports and the minutes PDFs.

One thing it leaves behind. What someone else captured on a job you shared stays — deleting a shared job does not reach into what another company's phone put there. Write to hello@walkvessel.com to have that removed too.

A note. Delete it and it is gone.

Everything, at once. You can delete your own account from inside the app, or write to hello@walkvessel.com and the account is closed by hand. While any other phone is still part of your company — even one that has not been signed into — deleting your account removes only you, and your company's jobs and records stay as they were. If you are the last person in your company and every phone still in it is signed in as you, deleting your account takes the company and every one of its jobs with it. When a company is deleted this way, Vessel keeps the signature record of each change order signed through its link: what was signed (the change order as the signer saw it: number, revision, subject, description, reason, lines and fees, schedule days, type, terms and who it went to), the name, the drawn signature, the time and which version was signed. The live change order is deleted. The signature record is kept as the sending company's record of the agreement, until that company or the person who signed asks for it to be removed at hello@walkvessel.com. No link opens it any more. If the job was deleted for good first, it is already gone. Either way, once it is done there is no window to undo it. If a whole company is closing down, write to hello@walkvessel.com and it is done by hand.

A link to a walk stays open until it is closed by hand, at that same address, or until that walk is deleted for good. Deleting the whole job for good closes the links on every walk you captured on it. A walk captured by another company's phone on a job you shared is outside that delete, and its link keeps working. The website's sign-in cookie lasts seven days.

Links to change orders, submittals and RFIs. A submittal's link closes once it is answered or a new revision replaces it. An RFI's link closes once it is answered. A change order's link closes when a new revision replaces it, or when you record its answer in the app before it is signed. Once it is signed, its link stays open, so the signer can see what they signed. Deleting the job for good closes all of them. Recording an answer in the app closes the link too. To close one without an answer, write to hello@walkvessel.com. A document sent from another company's phone on a job you shared is outside your delete.

If you answered a link. Your answer, your name and your signature are part of the record of the company that sent you the link. Write to hello@walkvessel.com to see them or to have them removed. A signed change order is kept as that company's record of the agreement.

This website

The company that hosts this site serves every page you load here. This page asks a font-hosting service for its two typefaces, so opening it gives that service your IP address and the ordinary technical details any web request carries. Signing in to the dashboard sets a cookie that lasts seven days. Opening a link to a change order, submittal or RFI loads that page from this site, served by the same hosting company as every other page here. To stop abuse, the page counts how often each IP address opens or answers it in one minute. That count is kept in memory, separately on each server this site runs, so it does not always hold. The address is not stored with the answer. These pages set no cookie. Attached files open from the company that runs Vessel's servers. If a form appears here asking for your email, company and what you are working on, that goes to one address, which forwards to a person. The invite form asks how you heard about Vessel, and notes the tag in the link that brought you, if it has one. What you typed, and the IP address it came from, are also kept in this site's own operational logs, so nothing is lost even if delivery fails silently. Delivery of that one message runs through the same email-delivery service provider that sends the sign-in code. The six-a-minute limit counts requests by the IP address they come from, not by email address, separately on each server this site runs — so it does not always hold. If you buy a subscription, the payment runs through Stripe, our payment processor, which also receives the company name you give at checkout and your answer that other people at your company will use Vessel.

Children

Vessel is professional software for people running construction work. It is not intended for, or directed at, anyone under 18.

If this page changes

The date at the top changes, and anyone already using Vessel hears about it directly from a person. There are no quiet edits.

Contact

Yurii Kuznetsov, President, YK 11 Estates Corporation · New York, NY · hello@walkvessel.com
A person reads that address and answers it.