This Privacy Policy explains how Point Data Inc. ("Point Data," "we," "us," or "our") collects, uses, shares, and protects information when you use the FoundationDraw™ mobile app, the FoundationDraw™ website, and the related online services (together, the "Service").

By using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

Definitions

• Account means the unique account created for you to access the Service.
• Master Account Holder means the person or business that established and manages the company account you belong to. For example, this may be your employer. If you work for yourself, you may be your own Master Account Holder. Company administrators act on behalf of the Master Account Holder.
• Client means any person or business whose information you or your company enter into the Service, such as a homeowner or property owner.
• Project means the drawings, photos, notes, measurements, elevation data, and documents (including exported PDF Projects and Benchmark® reports) created in FoundationDraw™ for a property.
• Personal Data means information that identifies, or can reasonably be linked to, an individual.
• Service Provider means a company that processes data on our behalf to help us operate the Service.

Information we collect

Information you provide

• Account information: your name, email address, and mobile phone number. We use your phone number for account security, sign-in verification, and service messages.
• Sign-in information: if you sign in with Apple or Google, we receive basic profile details from that provider, such as your name, email address, and a unique account identifier. If you use Apple's "Hide My Email," we receive a relay address instead. We never receive your Apple or Google password.
• Company information: company name, address, contact details, logo, branding and layout preferences, user roles, and the company symbol library.
• Project data: property addresses, Client names and contact details, floor drawings, symbols and markups, measurements, pier installation logs, notes, and the PDF Projects and Benchmark® reports you create.
• Scan and camera data: LiDAR and camera scan data used to create floor outlines, interior and exterior scans, exterior walkouts, and drawings imported from photos.
• Photos and notes: photos you take or import, camera marker positions, and the notes attached to them.
• Elevation survey data: floor elevation readings and the 3D heat maps and Benchmark® reports generated from them.
• Support communications: information you send when you contact us.
• Location: if you tap "Use my location," the app uses your iPhone's location once to fill in the property address. We store the property's map coordinates with the property record. You can type or search for the address instead.

Information collected automatically

• Device and diagnostic information: device model, operating system and app version, IP address, crash logs, performance data, and basic logs of how the Service is used (for example, sign-ins, syncs, and exports). We use this to keep the Service secure, fix problems, and improve FoundationDraw™.

FoundationDraw™ accesses your camera, LiDAR sensor, photo library, and location only when you use a feature that needs them, and only with your permission. You can change these permissions at any time in your device settings.

How we use information

We use information to:

• Provide, operate, and maintain the Service, including syncing Projects across your company's devices.
• Create and manage your Account and your company account, including roles and permissions.
• Generate the drawings, heat maps, PDF Projects, Benchmark® reports, and exports you request.
• Process billing and manage licenses.
• Send transactional texts and emails, such as sign-in and verification codes, account and service confirmations, security alerts, and replies to support requests.
• Send marketing emails or texts about FoundationDraw™ and Point Data products, only if you opt in. You can opt out at any time.
• Monitor, secure, troubleshoot, and improve the Service.
• Keep a limited research record of property locations, elevation readings, and pier install details, separated from company, client and user information (see "Research data" below).
• Comply with legal obligations and enforce our terms.

Scan, camera, and photo data are used only to provide FoundationDraw™ features. They are never used for advertising or marketing.

What we do not do

• We do not sell your personal data or your Clients' personal data.
• We do not use your information for targeted or behavioral advertising.
• We do not track you across other companies' apps or websites, and we do not share your data with data brokers.
• We do not share your information with business partners for their own promotions.

How information is shared

We share information only as described below.

• Within your company account: The Master Account Holder and company administrators can view and manage the company's Projects and users, including information about your use of the Service for the company. Point Data does not control how your company uses or distributes the Projects and exports it creates.
• Point Data staff (support and service): To provide support and service, and when a company asks us for help, Point Data staff with the Owner or Admin role may open a session of that company's account in the FoundationDraw™ web portal. A session is either view-only or an edit session, and each one ends automatically after one hour. In both, staff can see the company's account data, such as Projects, photos, property addresses, team members, and billing status. In a view-only session they cannot change anything. In an edit session they can change and save the company's settings on its behalf: company details, logo, PDF layout, symbols and cut sheets, team members, invites and roles, and cloud storage settings. Staff cannot change billing or payment details, start a subscription, accept agreements or Terms for the company, connect a cloud storage account, or delete the company. Every session is logged with the staff member's name, the time, the pages viewed and files downloaded, and, for edit sessions, each change saved (what was changed, with its earlier and new value where available). Changes are recorded as made by Point Data staff, never by a member of the company. We keep this log for two years. The company's administrators can see in their FoundationDraw™ web portal when Point Data staff viewed or edited their account, and how many changes were saved.
• When you share Projects: if you export, email, or send a Project or file (for example, a PDF Project, DXF file, or an export to your CRM), it goes to the recipients or systems you choose. Their own policies then apply.

• Service Providers: we use trusted providers to run the Service, including:

  • Cloudflare: hosting, data storage, and content delivery.
  • Stripe: payment processing and billing.
  • Apple and Google: sign-in, if you choose to use them.

  These providers may use the data only to provide their services to us and must protect it. - Legal and safety reasons: we may disclose information if required by law or valid legal process, or if we believe in good faith that it is necessary to protect the rights, property, or safety of Point Data, our users, or the public, or to prevent fraud or misuse of the Service. - Business transfers: if Point Data is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will give notice before your information becomes subject to a different privacy policy. - With your consent: for any other purpose, only with your permission.

Company data and Client data

• Company data belongs to the company account. Projects, Client information, photos, drawings, and the company symbol library belong to the Master Account Holder's company account, not to individual users.
• If a user leaves the company, or is removed by an administrator, the Projects that user created stay with the company account.
• Client data: Point Data stores Client Personal Data as a service to your company. We do not use it for our own purposes, except for the limited research record described in "Research data" below, and we do not contact your Clients. Your company is responsible for having the right to collect Client information and for how it shares Projects with others. Your company can edit or delete Client data in the Service.

Connected cloud storage

• Connected cloud storage: if your company connects Dropbox, Google Drive or OneDrive, we store an encrypted sign-in key and the account's email so we can copy Project files there and fetch full-size photos when you ask. We only access files and folders FoundationDraw™ created. You can disconnect at any time, and we then delete the sign-in key.
• Photo copies: for Projects unchanged for 30 days whose photos are confirmed in your cloud storage, we keep a smaller copy of each photo instead of the full-size original.
• Generated PDFs: customer PDFs and crew packets are deleted from our servers after 30 days.
• Agreement records: we keep a record of who accepted the cloud storage agreement, when, and the version accepted.
• Billing: storage usage is measured per company each day and billed through Stripe; we don't store full card numbers.

Research data (property elevation and pier records)

When elevation readings or pier installs are recorded for a property, Point Data keeps a research record that contains only the property address and map coordinates, the elevation readings, and pier install details (pier type, install depth, pressure or torque readings, and survey and install dates). It may also include the type of instrument or equipment used.

The research record is separated from company, client and user information. We remove the company name and company details, client and homeowner names and contact information, user and account information, photos, and notes. Because a property address can identify a property, we do not describe this record as anonymous.

We use these records, including on maps and in statistics across many properties, for research and to improve foundation analysis and our FoundationDraw™ and Benchmark® tools. We never disclose, sell, or publish company, client, or user information from these records. We do not sell research records, use them to market to homeowners or property owners, or use them for advertising.

Research records are kept separately from your account and may be retained after a Project, a user account, or a company account is deleted.

Payments

FoundationDraw™ licenses are billed through Stripe. Payment details are entered directly with Stripe, through Stripe Checkout or the Stripe customer portal. Point Data never receives or stores full card numbers. We receive limited billing information from Stripe, such as the customer name, billing email, plan, license count, payment status, and the last four digits and expiration date of the card. Stripe follows the Payment Card Industry Data Security Standard (PCI-DSS), managed by the PCI Security Standards Council (a joint effort of Visa, Mastercard, American Express, Discover, and others). Stripe's use of your information is governed by its own privacy policy.

Account deletion

Deleting your account in the app: open Settings, choose delete account, type DELETE, and confirm with the code we email to you.

• If you belong to a company with other users: your personal account is deleted, and the company's Projects stay with the company account.
• If you are the only user of your company account (a solo company): deleting your account also deletes the company account and its Projects. You can restore it within 30 days by contacting us. After 30 days, the data is permanently deleted.

Deleting by email: you can also request deletion by emailing [email protected] from the email address on your account. We may need to verify your identity before we act on the request.

Some limited records may be kept after deletion where the law requires it, for example billing and tax records, or for security and fraud prevention. Research records of property locations, elevation readings, and pier install details (see "Research data") may also be kept after a Project or account is deleted. When you accept our Terms, Privacy Policy, a tester NDA, or billing terms, we keep a record of that acceptance (the time, your IP address, and your device and app information), and we keep it even after your account is deleted, as proof of your consent. Data that has been deleted may remain in encrypted backups for a short period until those backups are overwritten.

Data retention

We keep Personal Data only as long as needed for the purposes in this policy:

• Account and company data is kept while the account is active.
• Projects are kept until the company deletes them or the company account is deleted.
• Generated PDFs (customer PDFs and crew packets) are kept on FoundationDraw™ servers for 30 days, then deleted. You can make them again anytime from the Project. To keep permanent copies, connect your company's Dropbox, Google Drive or OneDrive. Deleting our copy never deletes the copy in your company's cloud storage.
• Research records containing only property locations, elevation readings, and pier install details may be kept after the related Project or account is deleted, as described in "Research data."
• Diagnostic and usage logs are kept for a shorter period, unless needed for security, troubleshooting, or legal reasons.
• Logs of Point Data staff sessions (view-only and edit), including the changes saved, are kept for two years.
• Billing records are kept as required by tax and accounting law.

Where data is processed

Point Data is based in the United States. Your information is processed and stored in the United States by us and our Service Providers. Some providers, such as Cloudflare's global network, may process data temporarily in other locations to deliver the Service. If you use the Service from outside the United States, you understand that your information will be transferred to the United States, where data protection laws may differ from those in your country.

Security

We use reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit, access controls, and role-based permissions within company accounts. However, no method of transmitting or storing data is 100% secure, and we cannot guarantee absolute security. Please keep your sign-in credentials secure and tell us right away if you suspect unauthorized access.

Your choices and rights

• Access and correction: you can view and update your account information in the app, or contact us for help.
• Deletion: see "Account deletion" above.
• Marketing messages: reply STOP to any marketing text, use the unsubscribe link in any marketing email, or contact us.
• Device permissions: you can turn camera, photo, location, and other permissions on or off in your device settings.

Depending on where you live, you may have additional rights under local law, such as the right to know, access, correct, or delete your personal information, or to appeal a decision about a request. To make a request, contact us using the details below. We will not discriminate against you for exercising your privacy rights. If your data is part of a company account, we may refer your request to the Master Account Holder.

Text messages and emails

• Transactional messages: we send texts and emails needed to run your account, such as sign-in and verification codes, account and service confirmations, and security alerts.
• Marketing messages: we send marketing emails or texts only to people who opt in. You can opt out at any time. To stop texts, reply STOP. To stop emails, use the unsubscribe link. Opting out of marketing does not stop transactional messages needed for your account.
• Your mobile number: we never sell your mobile number or SMS opt-in information, and we never share them with third parties or affiliates for their marketing. We may share them only with service providers that help us deliver messages or provide support.
• Rates: message and data rates may apply. Message frequency varies. Reply HELP for help.

Cookies (website)

The FoundationDraw™ app does not use advertising cookies. Our website and web-based account pages, such as sign-in and billing, use essential cookies and similar technologies to keep you signed in, secure your session, and remember basic preferences. These essential cookies cannot be turned off without breaking those features. Our website may also use basic analytics cookies to understand site traffic. You can control or delete cookies in your browser settings.

Do Not Track: our Service does not currently respond to browser "Do Not Track" signals. Because we do not track you across other websites, this does not change how we handle your information.

Children's privacy

FoundationDraw™ is a professional tool for businesses and is not directed to children under 13. We do not knowingly collect Personal Data from children under 13. If you believe a child has provided us with Personal Data, contact us and we will delete it.

Links to other websites

The Service may link to websites or services we do not operate, such as Stripe or your CRM. We are not responsible for their content or privacy practices. Please review their privacy policies.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy here and change the effective date above. If we make material changes, we will notify you in the app or by email before they take effect. Continued use of the Service after the effective date means you accept the updated policy.

Contact us

If you have questions about this Privacy Policy or want to make a privacy request, contact:

Point Data Inc.
724 Chenault Bridge Rd.
Lancaster, KY 40444
United States

Email: [email protected]

---

FoundationDraw™ and Benchmark® are trademarks of Point Data Inc.