Civilytics · Legal

Privacy Policy

Effective Date: July 24, 2026

This Privacy Policy explains how Civilytics, LLC (“Civilytics,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal information when you visit our websites, create or use an account, participate in a beta program, upload materials, communicate with us, or otherwise use our plan-analysis products and services (collectively, the “Services”).

The Services are designed for business and professional use. If you use the Services for an organization, that organization may control information associated with your account and submitted materials. Its own privacy practices may also apply.

1. Information We Collect

1.1 Information You Provide

We may collect:

account and contact information, such as your name, business email address, telephone number, job title, organization, mailing address, username, and authentication information;

enrollment, transaction, and agreement information, such as beta applications, order details, subscription status, acceptance records, signatures, and communications about an account;

uploaded and submitted materials, including plans, drawings, specifications, title blocks, project addresses, parcel information, client or consultant information, public zoning codes, ordinances, maps, comments, corrections, and other files or content;

support, research, and feedback information, including messages, survey responses, interview notes, annotations, error reports, and recordings when notice and any required consent are provided; and

any other information you choose to provide.

Please do not submit Social Security numbers, consumer financial account credentials, protected health information, classified information, export-controlled technical data, or other regulated sensitive information unless Civilytics expressly authorizes it in writing.

1.2 Information Collected Automatically

When you use the Services, we and our service providers may automatically collect:

device and network information, such as IP address, device type, browser type, operating system, identifiers, and general location inferred from IP address;

usage information, such as dates and times, pages or features viewed, links clicked, searches, uploads, interactions, referring URLs, errors, performance data, and session duration;

log, security, and diagnostic information, including authentication events, access records, crash data, suspected abuse, and audit logs; and

cookie and similar-technology information described below.

1.3 Information From Other Sources

We may receive information from your organization, administrators and authorized users, service providers, business partners, public records, municipal websites, public-code repositories, and other sources you direct us to use.

2. How We Use Information

We may use personal information to:

provide, administer, authenticate, maintain, and support the Services;

process applications, create accounts, provide Output, and communicate with you;

secure the Services; detect, investigate, and prevent fraud, abuse, unauthorized access, and other harmful activity;

troubleshoot errors and monitor availability, performance, and usage;

comply with law, respond to legal process, establish or defend legal claims, and enforce our agreements;

manage our business, transactions, records, and corporate operations;

send service messages and, where permitted, information about Civilytics products or events;

review, normalize, annotate, publish, and make eligible Public Code Materials available to users; and

conduct training, testing, evaluation, quality assurance, research, and product and service improvement as described below.

3. Plan Materials, Training, and Improvement

These activities may include copying, cropping, transforming, annotating, labeling, extracting features from, analyzing, and combining plan content with other training or evaluation materials. We may use service providers that support hosting, data processing, annotation, model development, testing, and security. Those providers may access plan content when needed to perform services for us and are subject to contractual restrictions.

We treat identifiable, nonpublic plan contents as confidential. We do not sell them as standalone files, publish them, use them in public marketing or case studies, or knowingly make them available to other customers without permission. We use commercially reasonable measures intended to prevent customer-facing results from reproducing recognizable copies of identifiable plans. This is not a representation that plans have been anonymized.

Plan and training materials may be retained indefinitely for the purposes above. Deleting a plan from a customer workspace or closing an account does not require us to identify, segregate, or remove copies used or retained in training repositories, datasets, annotations, evaluation sets, research records, derived features, model artifacts, security records, or backups, unless applicable law requires otherwise.

The Civilytics Terms of Service contain the license and authority requirements that govern these uses.

4. Public Code Materials

If a user submits an official zoning code, ordinance, amendment, or similar public legal material that the user has the right to permit us to redistribute, we may review, verify, normalize, format, annotate, index, publish, and make it available to all users or to the public.

Do not include private client information in a public-code submission. We may reject, correct, update, supersede, or remove submitted material and may respond to credible copyright, license, or other rights complaints.

5. How We Disclose Information

We may disclose personal information to:

hosting, cloud, authentication, analytics, communications, customer-support, document-processing, annotation, model-development, security, professional-adviser, and other service providers that perform services for us;

your organization, account administrators, and other authorized users associated with your account or project;

third-party products or integrations that you or your organization direct us to use;

government authorities, regulators, courts, law enforcement, or other persons when we reasonably believe disclosure is required by law or legal process, protects rights or safety, investigates wrongdoing, or enforces an agreement;

parties to an actual or proposed financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to appropriate confidentiality protections; and

other persons with your direction, consent, or as otherwise described when the information is collected.

We may disclose aggregated or de-identified information that does not reasonably identify an individual. Public Code Materials may be disclosed publicly as described above.

We do not currently sell personal information for money or share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising. If those practices change, we will update this Policy and provide any notice or choice required by law.

6. Cookies and Similar Technologies

We and our service providers may use cookies, local storage, pixels, software development kits, and similar technologies to operate the Services, keep users signed in, remember preferences, secure accounts, understand use, diagnose problems, and improve performance.

Where required, we will request consent before using nonessential technologies. Browser settings may allow you to block or delete cookies, but some features may not work properly. If we deploy session-replay, chat-recording, or similar technologies that capture the contents of electronic interactions, we will provide conspicuous notice and obtain consent where required.

7. Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including to provide Services, maintain business and transaction records, comply with law, resolve disputes, enforce agreements, protect security, and support training and improvement.

Retention periods vary by the type and purpose of information. Account and transaction records may be retained during the relationship and afterward for legal, tax, audit, and dispute purposes. Security logs are retained based on operational need. Plan and Training Materials may be retained indefinitely as described in Section 3. Public Code Materials may remain available until we decide to remove or supersede them. Backups may persist until overwritten under normal cycles.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information based on its nature and the risks involved. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

You are responsible for using appropriate account security, protecting credentials, limiting uploads to authorized materials, and maintaining your own copies of important files and Output. Please report suspected unauthorized access to support@civilytics.ai.

9. Privacy Choices and Rights

Depending on where you live and whether an applicable law covers our processing, you may have rights to:

confirm whether we process your personal information and access it;

correct inaccurate personal information;

request deletion of personal information;

receive a portable copy of certain personal information;

opt out of a sale, targeted advertising, or certain profiling;

withdraw consent where processing is based on consent;

appeal a decision about a privacy request; and

receive equal service without unlawful discrimination for exercising a privacy right.

These rights may not apply to business-contact information or communications made solely in a commercial or employment context, and they may be subject to verification, exceptions, retention rights, legal obligations, security needs, trade-secret protections, and the rights of others. A contractual request to remove a plan from a workspace is different from an individual’s statutory privacy request. We will comply with applicable law where it requires deletion notwithstanding contractual training-retention provisions.

To submit a request, email support@civilytics.ai with the subject “Privacy Request” or write to the address in Section 14. Describe your request and the state or country where you reside. We may ask for information reasonably necessary to verify your identity and authority. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and identity.

If we deny a request and applicable law provides an appeal right, reply to our decision with the subject “Privacy Appeal.” We will review and respond as required by applicable law.

Because we do not currently sell personal information or use it for targeted advertising, no sale or targeted-advertising opt-out is presently necessary. We will honor legally recognized opt-out preference signals if and when required.

10. Communications

You may opt out of promotional email by using the unsubscribe link or contacting us. You may continue to receive nonpromotional messages about your account, transactions, security, legal notices, and the Services.

11. Children

The Services are for business and professional users and are not directed to children under 18. We do not knowingly collect personal information from children. Contact support@civilytics.ai if you believe a child submitted personal information to us.

12. United States Processing

Civilytics is based in the United States. We and our service providers may process information in the United States and other locations where privacy laws may differ from those where you live. If legally required, we will use an approved mechanism for an international transfer.

13. Changes to This Policy

We may update this Policy from time to time. We will post the revised version and update the Effective Date. If a change materially expands our use of plan or personal information, we will provide additional notice or obtain consent when required by law. The version in effect when information is collected will govern unless applicable law or an agreement permits the updated version to apply.

14. Contact Us

Civilytics, LLC

3900 Bridgewood Dr

Murrysville, PA 15668

support@civilytics.ai