MBM Construction
Effective 09/22/2026
Who We Are
MBM Portal is a private, invitation-only job-costing and homeowner application built and administered by Moshe Posner for MBM Construction. There is no public sign-up. Questions about this policy or your data go to moshepo91@gmail.com.
What We Collect
- Account details: name, email address and role for each login, and a one-way hash of the password (the password itself is never stored).
- Job records: job addresses, vendor and homeowner contact details, transactions, checks, contracts, signatures and uploaded documents.
- Bank data, through Plaid, only for bank accounts that MBM staff choose to connect: the institution name, each account's name and last four digits, and each transaction's date, amount, description and pending status. We do not receive or store bank login credentials, full account numbers, routing numbers or balances. Bank credentials are entered at Plaid or at the bank, never in this application.
- Technical records: the date, time and IP address at which consent was given, and error reports used to fix problems.
How We Use It
Bank data is used only to reconcile MBM Construction's own books: matching bank lines to recorded job transactions. We do not sell, rent or share your data, use it for advertising, or disclose it to anyone except the service providers below or where the law requires.
Plaid
We use Plaid Inc. to connect bank accounts. By connecting an account you also agree to Plaid's handling of your information under the Plaid End User Privacy Policy.
Service Providers
- Render — hosts the application, its database and uploaded files.
- Plaid — bank connections.
- Resend — delivers sign-in, invitation and password-reset email.
Security
All traffic is encrypted in transit with HTTPS. Plaid access tokens are encrypted in the database with a key held only in the hosting environment. Access is limited by role: homeowners see only the jobs they have been granted, and bank data is visible only to MBM staff.
Retention and Deletion
- Bank data is kept while its bank connection is in use, as part of MBM Construction's accounting records.
- When a bank connection is deleted in the portal, it is removed at Plaid (ending Plaid's access to that bank) and its downloaded bank lines are deleted.
- A connection whose lines are already reconciled to the books can instead be disconnected: it is removed at Plaid the same way, and those lines are kept as part of the accounting record.
- You may ask for your data to be deleted by writing to moshepo91@gmail.com. We will respond within 30 days, keeping only what the law requires us to keep.
Consent
No bank is connected until the person connecting it has agreed to this policy. The date, time and IP address of that agreement are recorded. If this policy changes materially, consent is asked for again.
Changes
The effective date above changes whenever this policy does.