Privacy Policy

Updated June 26, 2025

Pursuant to our Terms, this document describes how we treat personal information related to your use the Website and Services, including information you provide when using either. If you do not agree with any of the terms set forth herein, please do not use the Website or Services.

In this document, references to "we" "us" or "our" means Facility Grid, LLC, a Delaware limited liability company; "you" or "your" means the users of or visitors to our Website and Services; "Privacy Policy" means this privacy policy; and "Services" means those of our products, services and any associated documents, software, applications, websites, subdomains, portals, repositories and associated content or other materials that we provide or make accessible to you either without charge via our public website at facilitygrid.com, or for a fee via our paid customers-only web portal at facilitygrid.net pursuant to a separate purchase order, subscription agreement, or similar agreement or order provided by us. "Personal information" or "personal data" means personally identifiable information, personal information, or personal data, as defined in applicable laws. "Terms" means our Terms of Use (available at Terms of Use). Capitalized terms used herein but not otherwise defined shall have the meanings ascribed to them in the Terms.

 1. Personal Data collected and when it is collected.

We only collect and use your personal data when: (1) you consent to our doing so; (2) we need to fulfill an obligation we have to you; (3) it is necessary for our legitimate interests in providing and offering any Services and/or content available on our Website; or (4) in limited situations where we are required to do so by law.

We collect or use your personal data because of legitimate interests in doing so for several reasons, including:

Browsing the Website. You can access the Website without having an account, in which case only your IP address, country of origin and other non-personal information about your computer or device (such as web requests, browser type, browser language, referring URL, operating system and date and time of requests) will be recorded for log file information, aggregated traffic information and in the event that there is any misappropriation of information and/or content.

Registering on the Website. Registration of an account is required for uploading data and documents and accessing other features on the Website. We require at least the following personal information at the time of registration: your username and password (which you generate), email address, and name. We may also collect your employer name, job title, role, and job responsibilities.

Usage Information. We may record information about your usage of the Website such as the documents and data you access, which users you communicate with, the frequency and size of data transfers and other statistics. If you have registered and are logged in, we may associate that information with your account.

Uploaded Content. We collect information when you voluntarily provide us with information in connection with your use of the Services, including personally identifiable information or building-related information.

Payment and Transactional Data. When you pay for use of certain areas or features of the Service, if applicable, our payment processor or the applicable app store collects the financial information required to process your payments, including name, payment card information, bank account number, billing information. In addition to this Privacy Policy and our Terms, information related to your payments or purchases is also processed according to such app store's services agreement and privacy policy.

Correspondences. We may keep a record of any correspondence between you and us.

Cookies. When you use the Website, we may send cookies to your computer to uniquely identify your browser session. We may use both session cookies and persistent cookies. By using the Website, you are consenting to such use of cookies. Most Web browsers can be set to inform you when a cookie has been sent to you and provide you with the opportunity to refuse that cookie.

Automated Information. When you access our Website, we automatically receive and record information from Your browser. The information can include your IP address or unique device identifier, and data about which pages you visit. This information helps us operate and provide the Services available on our Website. It is collected automatically and stored in log files. We may combine this information from your browser or your mobile device with other information that we or our partners collect about you, including across devices. This information is used to prevent fraud, to keep our Website and the Services secure, and to analyze and understand how you and other visitors use our Website. We may also automatically collect device-specific information when you access our Website. This information may include information such as the hardware model, operating system information and debugging information, browser information, IP address, and device identifiers.

We will respect your choices relating to online tracking, whether you choose to reject individual cookies or set your web browser to reject cookies and other tracking technology. However, refusing a cookie may, in some cases, preclude you from using, or negatively impact the display or function of, the Website or certain areas or features of the Website.

 2. How Your Personal Information is Used.

When we collect and use your personal data, we do so based on a number of legal bases, including the following:

* We need to fulfill a contractual obligation we have to you;

* You have consented to us collecting and using that data;

* Our legitimate interests in providing and offering the Services available on our Website; and

* The limited situations where required to do so by law or legal order.

When we collect or use your personal data out of a contractual obligation to you, it means that we need such personal information to fulfill an order you have placed or to provide Services you have purchased or access to the Website.

You consent for us to collect and use your personal data after you request to be contacted by us, sign up for the Website, or when you consent to our collection of your analytics and automated data collection.

When we collect or use your personal data for legitimate interests, we do it for several reasons, including:

Providing and Improving Our Website and Services. We may collect and use your personal data to improve our Website and Services. Such use is necessary for our legitimate interest in improving our Website and Services and in understanding how they are used by our customers.

Marketing Purposes. We occasionally may contact you about new Services and features, or how to use existing Services and features. You may remove your name from our mailing lists to stop receiving these emails. If you have any questions regarding the foregoing, or our privacy practices, you may contact us at support@facilitygrid.com.

Keeping Our Website and Services Safe and Secure. We may also collect and use your personal data for safety and security purposes, including sharing your information for such purposes. We do so because it is necessary to pursue our legitimate interests in ensuring the security of our Website and users, including you.

Legal and Safety. We may also retain, preserve, or release your personal data to a third party in the following limited circumstances: in response to lawful requests by public authorities, including to meet legitimate national security or law enforcement requirements; to protect, establish, or exercise our legal rights or defend against legal claims, including to collect a debt; to comply with a subpoena, court order, legal process, or other legal requirement; or when we believe in good faith that such disclosure is reasonably necessary to comply with the law; prevent imminent physical harm or financial loss; or investigate, prevent, or take action regarding illegal activities, suspected fraud, threats to our property, or violations of our Terms. In these cases, our use of Your data may be necessary for our legitimate interests in keeping our Website secure, preventing harm or crime, enforcing or defending legal rights, or preventing damage, and complying with a legal obligation, a court order, or exercising or defending legal claims. It could also be necessary in the public interest (such as to prevent crime) or to protect vital interests (in rare cases where we may need to share data to prevent loss of life or personal injury). In case we are asked to disclose any of your personal data out of public interest, vital interest, or because of a legal action, we will disclose no more than necessary to achieve the applicable interest.

Service Providers. We may also engage certain third-party companies and individuals (including payment and to provide the Services available on it. These third parties have only limited access to your data, and they may not use your data except to perform these tasks on our behalf. They are obligated to us not to disclose or use your data in any other way. Our engagement of service providers is often necessary for us to provide the Services available on our Website. We engage third parties to inform you of how to use our Website and Services, to inform you of new Services or features, or otherwise out of our legitimate interest to make our Website and Services better.

Notwithstanding anything to the contrary in this Privacy Policy or in the Terms of Use, we may freely use any information collected from You, including personal data, provided that information is anonymized and aggregated. We will do any such anonymization and aggregation in compliance with the law.

 3. How your data is transferred and where it is hosted.

We do not sell, trade, or otherwise transfer your personal data to third parties except as disclosed in this policy, as permitted by law, when such transfer is in accordance with our legal basis for collecting your data, or with your consent to do so.

As with any other business, it is possible that in the future we could sell or buy subsidiaries or business units. In any such transaction, as well in the event all or substantially all of our assets are acquired by a third party, personal information of our users will generally be one of the transferred assets. We reserve the right to include your personal information, collected as an asset, in any such transfer to a third party.

We will transfer your personal information to other countries only if and when permitted by our legal bases for collecting and using your personal data to begin with, and only to the countries we are permitted to do so by law. Please be aware that the privacy laws and standards in certain countries may differ from those in your country of residence.

The hosting facilities, servers and central database for the service and Website are located in the United States. If you are accessing the Services or Website from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States by us as data controller and as data processor. By signing up for and using the Website you agree to this transfer.

Please be assured that we take commercially reasonable steps to ensure that your privacy is protected and that we take commercially reasonable steps to ensure that any personal data we transfer remains subject to appropriate security measures.

 4. Data Retention

We will retain your profile information and content for as long as reasonably necessary to: provide the use of our Services; invoice charges and to maintain records until invoices cannot be lawfully challenged and legal proceedings may no longer be pursued; resolve disputes; enforce our agreements; communicate with you regarding other Services that we offer; comply with applicable laws, regulations, and court orders; enforce our contractual agreements; or fulfill any of the purposes for which we collected the personal information as listed in this Privacy Policy.

If You close your account, we may still retain certain information associated with your account for analytical purposes and recordkeeping integrity, as well as to prevent fraud, collect any fees owed, enforce our terms and conditions, take actions we deem necessary to protect the integrity of our Website or our users, or take other actions otherwise permitted by law.

Deactivating your account does not automatically delete your account or content from our database, but regardless of any retention policy we will take commercially reasonable efforts to enable you to delete your personal information from our database upon request. However, if certain information has already been provided to third parties, retention of that information will be subject to those third parties' policies. Additionally, if you have provided your information to third party services or otherwise made it available to the public, you may not be able to remove or edit your information from some internet databases.

 5. Security

If you have an account on the Website and have a password giving you access to certain parts of the Website, you are responsible for keeping the password confidential. Anyone else with your password may access your account and other personal information of yours. You are solely responsible and solely liable for (and will hold us harmless from) any action or inaction taken from your account. Any information or content transmitted to us by you is at your own risk and You are solely responsible for the content of any such information or content.

We scan our Website on a commercially reasonable basis for security risks and known vulnerabilities to make your use of the Website as safe as possible. Our security measures include:

* Regular malware scanning;

* Secured networks and that are only accessible by a limited number of people with special access rights to such systems, and they are required to keep the information confidential.

* Other commercially reasonable efforts to maintain the security of our Website.

 6. Children's privacy

We do not knowingly seek or collect personal information from anyone under the age of 18. You may not use our Website or the Services available through them if you are under the age of 13. f you are the supervisor of a user who is between the ages of 13 and 18, you are responsible for their actions while using our Website or the Services provided through them. If we become aware that a person under the age of 18 has provided us with personal information, we will take steps to remove such personal information.

 7. Privacy information for California residents.

Under the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"), California residents have certain rights relating to collection, use, and sharing of their personal information for companies that do a minimum amount of business in or with California resident, and we are required to provide you with the following additional information about: (1) the purpose for which we use each category of "personal information" (as defined in the CCPA) we collect; and (2) the categories of third parties to which we (a) disclose such personal information for a business purpose, (b) "share" personal information for "cross-context behavioral advertising," and/or (c) "sell" such personal information. Under the CCPA, "sharing" is defined as the targeting of advertising to a consumer based on that consumer's personal information obtained from the consumer's activity across websites, and "selling" is defined as the disclosure of personal information to third parties in exchange for monetary or other valuable consideration. We do not sell or share personal information with third parties except as provided herein.

Separate from the CCPA and CPRA, California's Shine the Light law (California Civil Code Section 1798.83) gives California residents the right to ask companies what personal information (as that term is defined in Section 1798.83) they share with third parties for those third parties' direct marketing purposes. We do not disclose your personal information to third parties for the purpose of directly marketing their goods or services to you unless you request such disclosure. If you are a California resident with questions regarding this, please contact us at copyright@facilitygrid.com.

To the extent that the cookies and web beacons we use to track your interaction with the Website, customize our Website for you, and to collect certain information and data related to your use of the Website, as set forth in this Privacy Policy above, are deemed to be "pen registers" under Section 638.51 of the California Invasion of Privacy Act, by agreeing to this Privacy Policy and using the Services, you provide us with consent to use such cookies and web beacons.

 8. Privacy information for users in Europe or the United Kingdom

If you are located in the European Economic Area ("EEA") or the United Kingdom ("UK"), you may also have certain rights under the General Data Protection Regulation ("GDPR") and the UK implementation of the same ("UK GDPR"). Personal information that you provide to us as described in this Privacy Policy is only collected with your consent, and may be transmitted outside of the EEA or UK to us (or computer servers maintained for our benefit) pursuant to that consent.

In general, under the GDPR or UK GDPR, you may:

* request access to your personal information;

* have incomplete or incorrect data corrected;

* have your personal information deleted;

* suspend or restrict our use of your personal information, or withdraw your consent;

* request a copy of your personal information; and,

* complain to a supervisory authority if you believe your rights under the GDPR or UK GDPR are not being respected.

Should you request a copy of your personal information, we will supply to you a copy of it. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. Should you request the deletion of your personal information, we will generally do so as soon as practicable, although your right to have your personal information deleted is subject to exceptions, such as, for example, compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work or the place of the alleged infringement, or the UK.

Contact us through our Privacy Officer at support@facilitygrid.com, if you have concerns regarding your Personal Data, or wish to exercise any of these listed rights.

Note that, if you are in the EEA or UK, we may transfer your personal information outside of the EEA or UK, including to the United States. By way of example, this may happen if your personal information is transferred to our servers located in a country outside of the EEA or UK. These countries may not have similar data protection laws to the EEA or UK. By submitting your personal information, you're agreeing to this transfer, storing or processing. If we transfer your information outside of the EEA or UK in this way, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy.

 9. CAN-SPAM Act.

In accordance with the CAN-SPAM Act, we agree to:

* NOT use false or misleading subjects or email addresses;

* Identify the message as an advertisement in some reasonable way;

* Include the physical address of our business or site headquarters;

* Monitor third-party email marketing services for compliance, if one is used;

* Honor opt-out/unsubscribe requests quickly; and

* Allow users to unsubscribe by using the link at the bottom of each email.

 10. Third Party Links.

Occasionally, at our discretion, we may include or offer third-party products or Services on our Website. These third-party sites have separate and independent privacy policies. We have no responsibility or liability for the content and activities of these linked sites.

 11. Changes to this Privacy Policy.

Please note that this Privacy Policy may change from time to time. We will post any Privacy Policy changes on this page and, if the changes are significant or involve changes to the way we use personal information, we will notify you by delivering an announcement via our Website or your account email. If you opt out of communications from us, you may not receive these notifications, however they will still govern your use of the Website, and you are responsible for proactively checking for any changes. If you continue to use the Website after changes have been posted, you agree to abide by and be bound by the modified privacy policy. Each version of this Privacy Policy will be identified by its effective date found at the top of this page.

This Privacy Policy is governed by the laws of the Commonwealth of Massachusetts, without giving effect to any principles of conflict of law. If you are outside of the United States, your information will be processed and stored in the United States and you consent to such processing and storage under the laws of the United States.

You are entitled to access, correct or delete your information on the Website and may request us to do so by contacting us at copyright@facilitygrid.com.