Privacy Policy

Information you provide

• Inquiries and quotes: your first and last name, email, phone, and company, plus any project details you choose to share (facility type, number of entry points, current setup, budget, timeline, desired features, and any notes or message).
• Accounts: if you create an account, your name, email, company, and phone. Sign-in credentials and any Google or Microsoft sign-in are handled by our authentication provider.
• Orders: your billing and shipping address, email, phone, and what you ordered. Payment card details are entered on our payment processor’s hosted checkout and never reach our servers.
• Newsletter: your email address, if you subscribe.

Information collected automatically

• Device and browser information, pages viewed, and referring URLs, collected through analytics.
• Your IP address, used to serve and secure the site and to rate-limit form submissions. We do not store your IP address alongside your inquiry.
• Cookies and similar technologies, described in our Cookie Policy.

Advertising and campaign data

If you reach us from an online ad, we may capture campaign parameters (for example utm_source), a Google click identifier (gclid), and a LinkedIn ad identifier (li_fat_id). These are stored on your device for up to 90 days and attached to an inquiry if you submit one, so we can measure which campaigns work. We do not capture them if you have opted out through Do Not Sell or Share My Personal Information or your browser sends a Global Privacy Control signal.

• Respond to your inquiries and prepare quotes.
• Process, fulfill, and support your orders.
• Create and manage your account.
• Send transactional messages such as confirmations and updates.
• Send marketing communications where you have opted in, which you can stop at any time.
• Measure and improve the site, our products, and our advertising.
• Prioritize and route inquiries to the right specialist (see automated evaluation below).
• Protect against fraud and abuse, and comply with legal obligations.

We use Google Analytics 4 and Google Tag Manager under Google Consent Mode v2. Analytics and advertising storage default to denied until you accept, so those cookies do not run beforehand. We also use Google Ads and LinkedIn to measure ad conversions, which involves the gclid and li_fat_id identifiers described above.

For the full list of cookies and storage keys, their purposes, and durations, see our Cookie Policy. To opt out of advertising specifically, use Do Not Sell or Share My Personal Information. Our web fonts are self-hosted, so loading a page does not send a request to a third-party font service.

Some browsers offer a “Do Not Track” setting. Because there is no common industry standard for how to respond to it, we do not respond to Do Not Track signals. We do honor Global Privacy Control as an opt-out of advertising, as described in your rights below.

We are not in the business of selling your personal information for money. We share information in the following ways:

• Service providers (subprocessors): vendors that operate the site and process data on our behalf, listed below.
• Advertising partners: Google and LinkedIn, for measuring and improving our advertising. Under some US state laws this can be considered “sharing” or “selling” for cross-context behavioral advertising. See your rights below and the opt-out.
• Business partners: authorized dealers or installation partners, where needed to support your specific project.
• Legal and safety: when required by law or legal process, or to protect our rights, property, and safety.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets.

Our subprocessors

• Supabase. Database and authentication. Stores lead, account, and order records. Privacy policy.
• Stripe. Payment processing and sales-tax calculation via hosted checkout. Processes card, billing, and shipping details. Stripe is PCI-compliant; card numbers never reach our systems. Privacy policy.
• Resend. Transactional and notification email (quote confirmations, order confirmations, internal alerts). Privacy policy.
• Google (Analytics, Ads, Tag Manager, Maps). Website analytics, advertising and conversion measurement, tag management, and the map embed on our contact page. Privacy policy.
• LinkedIn. Advertising and conversion measurement for LinkedIn ad campaigns. Privacy policy.
• Vercel. Website hosting and content delivery. Processes request metadata, including IP address, to serve and secure the site. Privacy policy.
• HubSpot. Customer relationship management. When enabled, receives lead contact details and inquiry context. Privacy policy. Active only when we enable it.

We keep personal information only for as long as needed for the purposes in this policy or as required by law. Our current schedule is below. Automated deletion tooling is planned; today these describe our policy commitments.

Depending on where you live, you may have the right to access, correct, delete, or receive a portable copy of your personal information, to opt out of marketing, and to opt out of advertising or the sharing of your information.

To exercise these rights, contact us using the details at the bottom of this page. We will verify your request and respond within the time required by applicable law (up to 45 days for US state requests, with an extension where permitted). You can stop marketing email at any time using the unsubscribe link, and opt out of advertising through Do Not Sell or Share My Personal Information.

If you are a resident of California or another US state with a comprehensive privacy law, you have additional rights. This section uses the categories from the California Consumer Privacy Act, as amended by the CPRA.

Categories of personal information we collect

• Identifiers: name, email, phone, IP address, and online identifiers such as gclid and li_fat_id.
• Customer records: company, billing and shipping address.
• Commercial information: products and services you inquired about or purchased.
• Internet or network activity: pages viewed and interactions with the site.
• Geolocation: approximate location inferred from IP address.
• Professional information: your company and the facility or project you describe.
• Inferences: a lead priority score we derive from the details you provide.

We collect these from you directly, automatically as you use the site, and from advertising partners that refer you. We use them for the purposes described in “How we use your information.” We do not collect or use sensitive personal information to infer characteristics, and we do not knowingly sell or share the personal information of anyone under 16.

Categories we “share” for advertising

We share identifiers and internet activity with Google and LinkedIn for cross-context behavioral advertising. We do not receive money for this, but it may be treated as a “sale” or “share” under state law.

Your rights

• Know and access the personal information we hold about you.
• Delete your personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information for cross-context behavioral advertising, at Do Not Sell or Share My Personal Information.
• Not receive discriminatory treatment for exercising your rights.

We honor Global Privacy Control signals as a valid opt-out of sharing. You may use an authorized agent to submit a request, and we may ask for proof of authorization and verification of your identity. Where your state provides an appeal process, you may appeal our decision by contacting us again.

We calculate a priority score from the details you submit (such as facility type, timeline, and budget) so we can route your inquiry to the right specialist quickly. This scoring supports our team and does not produce a legal or similarly significant decision about you on its own. You can contact us with questions about it.

We use appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a security incident affects your personal information, we will notify affected individuals and the appropriate authorities as required by applicable law, without undue delay.

This is a business-to-business site that is not directed to children. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

Our site may link to or embed third-party services, such as the map on our contact page. Those services have their own privacy practices, and we are not responsible for their content or handling of your information.

We operate from the United States and serve US customers. The site is hosted and your information is processed in the United States. If you access the site from outside the United States, you do so on your own initiative.

We may update this Privacy Policy from time to time. Changes take effect when posted, with an updated date at the top of this page. We encourage you to review it periodically.