Effective date: October 5, 2026
ChangeNod is a product of Vexa Automations LLC, an Oklahoma limited liability company ("Vexa Automations," "we," "us," or "our"). This policy explains what personal information we collect through ChangeNod, why we collect it, who receives it, how long we keep it, and the choices you have. It applies to the changenod.com website, the ChangeNod dashboard, the text messages ChangeNod sends and receives, and the approval and project-ledger pages that homeowners open from those texts.
ChangeNod is intended for use in the United States. Questions about this policy go to support@changenod.com.
Who this policy covers
ChangeNod serves two kinds of people, and this policy addresses both, as well as visitors to the site.
- Contractors. The construction businesses that subscribe to ChangeNod, and the owners and team members who sign in to the dashboard or text change orders from their mobile numbers.
- Homeowners and other clients. The people a contractor works for. If you are one, you do not have a ChangeNod account. Your contractor entered your name and mobile number so that change orders on your project could be sent to you for approval and invoiced. Everything ChangeNod sends you is about your own project.
- Visitors to changenod.com.
What we collect
We collect the following categories of personal information, from the following sources.
From contractors
- Account and business details: business name, owner name, team members' names, email addresses and mobile numbers, time zone, and settings such as quiet hours and reminder schedules.
- Sign-in information: a password (stored only as a cryptographic hash), and, if you turn on two-factor sign-in, a two-factor secret and backup codes (stored encrypted). Each sign-in records the time, your IP address and your browser's identifying string.
- Payment connections: your Stripe account identifier, used so that invoices are raised on your own Stripe account. We never receive your bank account or card numbers. If you subscribe to ChangeNod through our self-service checkout, Stripe holds your payment method; we receive only your subscription status.
- What you text us: the content of change orders you send, including photos and voice notes, and your replies.
From contractors, about their clients
- Client details: the client's name, mobile number, and, if the contractor adds them, an email address, a property or project address, and free-text notes.
- Project details: project title, address, base contract amount, the change orders raised on it, including descriptions, line items and amounts, and the date the contractor marks the job closed.
From homeowners and other clients
- Your replies: any text you send to a ChangeNod number, including STOP, START and HELP, and the delivery status of texts we send you.
- Your approval record: when you approve a change order on the approval page we record the name you typed, the exact consent statement you accepted and its version, the date and time, your IP address, and your browser's identifying string. If you decline, we record that and any reason you give.
- Project ledger use: when you open your project-ledger link we record when it was last used.
From everyone
- Web requests: when you open any ChangeNod page, our hosting providers receive your IP address, browser type and the pages requested, as any website does.
What we do not collect
We do not collect payment card or bank account numbers (homeowners pay on a page hosted by Stripe), government identification numbers, or precise location, and we do not knowingly collect information from children (see "Children" below).
How we use personal information
- To run the service: to read a contractor's text into a change order, send the homeowner a link to review and approve it, record the approval, raise the invoice on the contractor's Stripe account, send payment reminders, and pass a homeowner's replies to their contractor.
- To keep the record of what was approved: the approval record is the contractor's and the homeowner's evidence of the change that was agreed and the price.
- To honour your choices: to stop texting a number that has opted out, and to keep the record that it did.
- To secure and support the service: to verify sign-ins, prevent abuse, diagnose problems, and respond to requests sent to support@changenod.com.
- To communicate with contractors about their account, their subscription, and changes to the service.
- To comply with law and carrier requirements for business text messaging.
We do not use personal information for advertising, we do not build profiles of homeowners, and we do not make automated decisions that have legal effects on you without a person involved: every change order is confirmed by the contractor before anything is sent to a homeowner, and every approval is given by the homeowner.
Automated reading of texts
ChangeNod uses Anthropic's Claude models to read a contractor's text into a structured change order (the work, the price, which project). For that we send Anthropic the text of the change order and its conversation thread, the contractor's list of open projects (title, client name, address and keywords, so the right project can be matched), descriptions and prices from the contractor's past change orders, and any photos attached to the change order. We do not add phone numbers, email addresses or any account identifier to what we send; the text of a change order goes as the contractor wrote it. The result is shown to the contractor, who confirms or corrects it before any homeowner sees it.
Text messages
ChangeNod sends and receives text messages (SMS and MMS) through Twilio. The ChangeNod messaging program is described in full in our SMS terms. In short:
- Texts to homeowners are about their own project: a one-time program disclosure, change-order approval links, reminders while an approval is waiting (by default on the third and seventh day), invoice links, and reminders while an invoice is open (by default on the third, seventh, fourteenth and twenty-first day). Contractors can change these schedules and can switch off approval reminders. Texts to homeowners go out between 8 a.m. and 8 p.m. in the contractor's time zone unless the contractor changes that window. If you reply to a text, your reply is passed to your contractor; ChangeNod does not carry free-form conversation back to you. Message frequency varies with the activity on your project. Message and data rates may apply.
- Texts to contractors are confirmations, notifications about their change orders and invoices, and a weekly summary.
- You can stop texts at any time by replying STOP, and get help by replying HELP or emailing support@changenod.com.
- We keep a record of the disclosure text sent to each number, when it was sent, and every opt-out, so that we can prove consent was given and honoured.
We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes at any time. Your opt-in applies only to the ChangeNod program for your project and is not transferred to anyone else.
Who receives personal information
We share personal information only as described here. We do not sell it, and we do not share it for other companies' advertising.
Service providers that process information for us
- Twilio (text messaging): mobile numbers, the content of texts, and photos and voice notes sent by text.
- Anthropic (reading change orders): as described under "Automated reading of texts."
- Stripe (invoicing and payments): for invoices, the homeowner's name, mobile number and email address are recorded as a customer on the contractor's own Stripe account, together with the invoice lines, the amount, and a note of who approved the work and when. The homeowner pays on Stripe's own pages. If a contractor subscribes to ChangeNod through our checkout, Stripe also handles that subscription on our account.
- Cloudflare (web hosting and file storage): serves the ChangeNod web pages and stores photos and voice notes in private storage.
- Railway (application and database hosting): runs the ChangeNod application and the database that holds the records described above.
- Sentry (error reporting), when enabled: technical details of errors, including which contractor account and which job or event was involved, but not message content or personal details by design.
- Google Fonts: when a ChangeNod page loads, your browser requests one typeface from Google, which receives the request including your IP address.
- OpenAI (speech-to-text), only if voice-note transcription is enabled for a contractor: the audio of a voice note, for transcription.
Each provider receives only what it needs for its role and handles it under its own terms and privacy commitments. The categories of third parties with whom we may share personal information are: these service providers; the contractor or client on the other side of your project; and the recipients described under "Other circumstances" below.
Between a contractor and their client
A homeowner's details, texts, photos and approval record are visible to the contractor they hired, because that is the contractor's project record. A contractor's business name and project details are visible to the homeowner on the approval page and the project ledger.
Other circumstances
- When the law requires it, such as a subpoena, court order or other legal process, or to protect the rights, safety or property of a person or of Vexa Automations.
- In a business transfer, such as a merger, acquisition or sale of assets, in which case this policy will continue to apply to the transferred information.
- At your direction, when you ask us to share something.
Cookies and tracking
ChangeNod uses cookies only to keep contractors signed in to the dashboard: a session cookie, a short-lived cookie during the second step of two-factor sign-in, and, if a contractor chooses "don't ask again on this device," a cookie that remembers that choice for 30 days. ChangeNod sets no cookies on the approval and ledger pages that homeowners use.
We do not use analytics, advertising or social-media tracking, and no third party collects information about your activity across other websites or over time through ChangeNod. Because nothing on ChangeNod tracks you, we do not respond to browser Do Not Track signals; there is no tracking to turn off.
How we protect personal information
- Connections to the ChangeNod website and application are encrypted.
- Passwords are stored only as salted hashes; two-factor secrets and backup codes are stored encrypted.
- Approval and ledger links are long random tokens that we store only as hashes; approval links expire 14 days after they are sent and cannot be reused once the change order has been actioned.
- Each contractor's data is isolated in the database so that one business cannot read another's records.
- Incoming messages from Twilio and Stripe are verified by signature before they are processed; the approval pages and sign-in are rate-limited.
- Contractors can protect their account with two-factor sign-in, which we may require for accounts connected to Stripe.
No service can guarantee perfect security. If a security breach affects your personal information, we will notify you and the relevant authorities as applicable law requires.
How long we keep personal information
Retention runs on the project. When the work on a job is done, the contractor marks the job closed in the dashboard, and that date starts a seven-year clock for the records on that job. An automated purge runs once a day and deletes whatever has passed its date.
- Deleted seven years after the job is closed: the text messages on that job, from the contractor and from the homeowner, including the copies relayed between them; the photos and voice notes; every change order that was never approved (declined, cancelled, expired or still waiting); and the homeowner's project-ledger links. When every job for a homeowner has reached that point, the homeowner's email address, project address and notes are deleted too, and if no signed record remains for them at all, their name and mobile number are deleted with the last job.
- Kept beyond seven years: signed change orders, meaning those a homeowner approved, with their lines and amount, the name typed, the consent statement accepted, the date and time, the IP address and browser string, and the invoices raised for them. They are the record of the transaction for the contractor and the homeowner alike. We do not currently delete them; if we set a date for that, we will update this policy.
- Deleted seven years after they happened, whether or not they belong to a job: texts that were not about a particular job (for example STOP, HELP and START replies, a reply relayed to the contractor when nothing was pending, and the weekly summary sent to contractors), change orders that were never matched to a job and never approved, and the raw copies of the notifications we receive from Twilio and Stripe.
- Kept for as long as we operate the service: opt-out records and the record of the program disclosure sent to each number and when, because they are the proof that a number asked us to stop and that it was told about the program; and the audit trail. The audit trail is append-only and records what happened to each record and when: record identifiers, statuses, amounts, the number a suppressed or deferred text was addressed to, and the IP address from which an approval, decline or dashboard action was taken. It never contains message content, photos, names or addresses.
- Approval links stop working 14 days after they are sent.
- Sign-in sessions last seven days, are extended while you keep using the dashboard, and end when you sign out.
A contractor can reopen a closed job until its records have been purged, which stops the clock. Backup copies of the database may be kept by our hosting provider under its own retention schedule.
Your choices and rights
If you are a homeowner or other client:
- Reply STOP to any text to stop receiving texts; see the SMS terms for what that means for your project.
- Ask your contractor to correct your name, number, email or address; they can do it from their dashboard.
- Email support@changenod.com to ask what personal information we hold about you, to correct it, or to ask us to delete it. We respond within 30 days. Before acting on a deletion request we confirm that it came from you, by replying to the mobile number or email address we hold for you.
- When we delete your information on request, we delete your texts, photos and voice notes, every change order you did not approve, your project-ledger links, your email address, project address and notes, the raw copies of your texts received from Twilio, and your mobile number from our records, and we delete the customer record we created for you on your contractor's Stripe account (Stripe keeps the invoices it already issued, as your contractor's financial record). If you approved a change order, that signed record and its invoices are kept, with your name on them, as the record of the transaction, and we tell you what was kept and why. If you never approved one, everything about you is deleted. Your opt-out record and the record of the program disclosure sent to your number are kept, so that STOP keeps being honoured.
If you are a contractor:
- You can view and edit your business details, team members, clients and settings in the dashboard.
- Mark a job closed when the work is done; that starts the retention clock described above. You can reopen it until its records have been purged.
- Email support@changenod.com to close your account, to request a copy of your data, or to ask us to delete it. We respond within 30 days.
We verify requests before acting on them, we do not charge for them, and we do not treat anyone differently for making one. If you are not satisfied with our response you may contact the consumer-protection authority where you live. Residents of states with consumer privacy laws may have additional rights under those laws; we will honour the requests above from anyone, wherever they live.
Children
ChangeNod is a business tool for adults. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us with personal information, email support@changenod.com and we will delete it.
How we tell you about changes
When we change this policy we post the new version at this address with a new effective date. If a change materially reduces your rights or materially changes how we use personal information, we will also email contractors at the address on their account before the change takes effect. Your continued use of ChangeNod after the effective date means the updated policy applies.
Contact
Vexa Automations LLC (ChangeNod), 14675 Whitaker Diagonal, Meridian, Oklahoma 73058, United States. Email: support@changenod.com.