Privacy Policy

1. Scope

This policy applies to personal information we collect through the Service, our website, and communications with us. It does not govern information collected by third parties under their own privacy notices, including Stripe when it processes payments.

When an organization provides Customer Data through the Service, that organization may control the information in the Customer Data. In that situation, we process the information to provide the Service and under the organization’s instructions, subject to our agreement with that organization.

2. Information We Collect

We collect information in the following categories:

• Account and contact information. Name, business name, work email address, phone number, account credentials, role, and other details provided when an account is created or administered.
• Billing and transaction information. Subscription plan, payment status, invoices, and transaction identifiers. Payment-card and other payment details are collected and processed by Stripe, our payment processor; we do not intentionally store full payment-card numbers on our systems.
• Customer Data and uploaded documents. Information you submit to use Service features, including bid packages, specifications, project details, building characteristics, jurisdictional information, prompts, and files. These materials may contain personal information depending on what you or your organization chooses to submit.
• Usage and device information. Log data and technical information such as IP address, browser type, device type, operating system, pages or features used, dates and times of access, actions taken in the Service, error reports, and performance information.
• Communications. Information in messages, support requests, survey responses, and other communications with us.
• Cookies and similar technologies. Information collected through cookies, pixels, local storage, or similar tools, as described in Section 10.

Please do not submit information that is unnecessary for the Service, including highly sensitive personal information, unless you have determined that you are authorized to do so and that the Service is appropriate for that information.

3. How We Use Information

We use personal information to:

• provide, operate, maintain, and secure the Service;
• create and manage accounts, authenticate users, and administer subscriptions;
• process payments and prevent fraudulent or unauthorized transactions;
• generate requested Service features, including code-compliance assistance, specifications, estimates, proposals, bid comparisons, and project timelines;
• respond to inquiries and provide support;
• monitor performance, troubleshoot, improve functionality, and develop product features;
• communicate about account, billing, security, policy, and Service changes;
• enforce our Terms of Service and protect the rights, safety, and property of Elevator Intelligence, our customers, and others; and
• comply with legal obligations and resolve disputes.

4. Legal Bases for Processing

Where the GDPR or UK GDPR applies, we process personal data on one or more of the following legal bases:

• Contract. To provide the Service, process a subscription, and perform our agreement with you or your organization.
• Legitimate interests. To secure, maintain, improve, and administer the Service; prevent fraud; understand Service use; and communicate about our relationship, where those interests are not overridden by your rights.
• Consent. Where we request it, including for certain optional cookies or marketing communications.
• Legal obligation. To comply with applicable laws, lawful requests, and recordkeeping obligations.

5. AI Processing and Model Training

The Service may use artificial intelligence to process Customer Data and generate requested outputs. For example, documents and prompts may be processed to provide cited code-compliance assistance, specifications, estimates, proposals, bid comparisons, and timeline support.

We do not use customer-uploaded documents or Customer Data to train general-purpose models without the customer’s consent. We may use de-identified, aggregated, or otherwise non-identifying operational information to maintain, secure, analyze, and improve the Service, subject to applicable law and our agreements with customers.

You are responsible for ensuring that you have the authority to submit Customer Data and for independently reviewing AI-assisted output before using it.

6. How We Share Information

We may share personal information only as reasonably necessary for the purposes described in this policy:

• Service providers and subprocessors. Providers that help us host, support, secure, operate, analyze, or deliver the Service. Stripe processes payments on our behalf and under its own privacy terms.
• Authorized users and customer organizations. Account administrators and authorized users within the organization associated with an account may access information available in that account.
• Professional advisers and transaction parties. Lawyers, auditors, insurers, and prospective or actual acquirers, investors, lenders, or successors in connection with a corporate transaction, subject to appropriate confidentiality protections.
• Legal and safety disclosures. Government authorities, law enforcement, courts, or other parties when we reasonably believe disclosure is required by law, legal process, or necessary to protect rights, safety, security, or property.
• With your direction or consent. Other parties when you ask or authorize us to share information.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

7. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, maintain business and security records, resolve disputes, enforce agreements, and meet legal obligations. Account and Customer Data retention following cancellation is described in our Cancellation Policy. We may retain de-identified or aggregated information where permitted by law.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include access controls, authentication safeguards, encryption in transit where supported, logging and monitoring, and limiting access to personnel and service providers with a business need to know.

No method of transmission or storage is completely secure. You are responsible for using strong credentials, safeguarding your account, and notifying us promptly of suspected unauthorized access.

9. Your Privacy Choices and Rights

Depending on where you live and applicable law, you may have rights to request access to, correction of, deletion of, restriction of, objection to, or portability of your personal information. You may also withdraw consent where processing depends on consent, without affecting prior processing.

To exercise a privacy right or ask a question, contact us using the details in Section 13. We may need to verify your identity and authority before acting. If we process your information on behalf of a customer organization, we may direct you to that organization because it controls the information.

9.1 California residents: CCPA/CPRA notice

California residents may have the right to know the categories and specific pieces of personal information collected; request deletion or correction; obtain information about disclosures; and be free from discrimination for exercising privacy rights. We collect the categories described in Section 2 and use and disclose them for the purposes in Sections 3 and 6.

We do not sell personal information or share it for cross-context behavioral advertising. We do not knowingly sell or share the personal information of consumers under 16 years of age.

An authorized agent may submit a request on your behalf where permitted by law. We may require proof of authorization and verification of the consumer’s identity. California residents may appeal a denied request by replying to our decision notice and explaining the basis for the appeal.

9.2 EU/UK users: GDPR and UK GDPR notice

If you are in the European Economic Area, Switzerland, or the United Kingdom, you may have the rights described above and the right to lodge a complaint with your local data-protection authority. Our primary establishment is in the United States. Depending on the context, Elevator Intelligence may act as a controller for account, website, billing, and direct relationship information, and as a processor/service provider for Customer Data submitted by an organization.

For transfers of personal data to the United States or other countries that may not provide the same level of protection, we use appropriate safeguards where required, such as contractual protections, and take into account applicable transfer requirements.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to operate the website and Service, remember session and preference information, protect security, understand performance and usage, and improve the user experience. You can control cookies through browser settings. Disabling cookies may affect Service functionality.

Where required by law, we will seek consent before using non-essential cookies and provide available choices through the website or Service.

11. Children’s Privacy

The Service is a business and professional platform and is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to address the issue.

12. International Transfers

Elevator Intelligence is based in the United States. Information may be processed in the United States and other locations where we or our service providers operate. Those locations may have data-protection laws different from the laws in your place of residence. When required, we use appropriate safeguards for cross-border transfers as described in Section 9.2.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy with a revised Last Updated date and, when required, provide additional notice. Your continued use of the Service after an update takes effect is subject to the updated policy to the extent permitted by law.

14. Contact Us

Elevator Intelligence LLC
55 Summer Rhapsody Ave, Henderson, NV 89015, United States
Phone: +1 215-214-9098
Email: hzammam@aiainspection.com
Website: https://elevatorintelligence.co/