Noetic Privacy Policy

Noetic Incorporated ("Noetic," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our site plan review platform (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

When you create an account, we collect:

• Name
• Email address
• Company/organization name
• Authentication credentials (or OAuth tokens if you use a services like Google or Microsoft to sign-in)

When you use the Service, you upload:

• Documents (site plans, supplementary documents)
• Project information (project name, location, etc.)
• Any notes or comments you provide

We automatically collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (device type, operating system)
• How you interact with the Service (features used, time spent)
• Error logs and performance data

If you contact us for support:

• Email correspondence
• Feedback and questions
• Support ticket information

If you buy Credits by card, Stripe, Inc. collects your card details on its hosted checkout page. We receive and keep the billing email address, the amount, and the payment status. When we show you a receipt, we read the card brand and last four digits from Stripe at that moment; we do not store them, and we never receive or store your full card number.

We use the information we collect to:

• Process and analyze your site plan documents
• Generate reports and regulatory analysis
• Store your documents and analysis results
• Provide customer support

• Understand how users interact with the Service
• Identify and fix technical issues
• Develop new features and functionality
• Conduct research and analysis (using de-identified data)

• Send service-related announcements
• Respond to your inquiries and requests
• Request feedback about your experience
• Provide updates about the pilot program

• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service
• Comply with legal obligations

We only share information with service providers who help us operate the Service:

AI Processing Services: Anthropic, Google and OpenAI process site plans and your questions to generate analysis. We instruct these providers not to use your data to train their models.

Hosting, Storage and Processing: Cloud providers in the United States host the Service, run document processing and workflow orchestration, and store our database, your documents and your sign-in session.

Sign-In: Google or Microsoft, when you choose to sign in with them.

Email Delivery: An email delivery provider sends sign-in codes, invitations, report delivery and invoice emails.

Payment Processing and Invoicing: Stripe, Inc. processes card payments and refunds. Our accounting system holds invoicing records.

Monitoring and Research: Providers that store our application logs, check that the Service is up, and run the web browsers our research agents use to look up public records for your site.

Our current list of sub-processors is available on request.

We may disclose information if required by law, legal process, or governmental request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights or property
• Prevent fraud or abuse
• Protect the safety of users or the public

If Noetic is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

We may share information with third parties when you give us explicit consent to do so.

We may share anonymized or aggregated data that cannot reasonably be used to identify you for:

• Product improvement and research
• Marketing materials and demonstrations
• Discussions with investors or advisors

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of data at rest
• Access controls and authentication requirements
• Regular security monitoring and updates

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

We retain your information for as long as:

• Your account is active
• Needed to provide the Service
• Required by law or for legitimate business purposes

You may request deletion of your account and your data at any time by contacting us. Within 30 days of a verified request we delete or anonymize your information from the Service and our production systems, and remove the working copies our staff made to produce your reports, except for records we must keep by law (for example, invoices and accounting records). Copies in database backups are removed within seven days after that, and application logs age out within 90 days.

You can access and update your account information through the Service. For other requests, contact us.

You can view your site plan documents and analysis results through the Service. For other data export requests, contact us.

You can request deletion of your account and associated data by contacting us. We will respond within 30 days.

You can opt out of promotional emails by following the unsubscribe link in those emails. You cannot opt out of service-related communications (e.g., account notifications, security alerts).

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to request deletion of personal information
• Right to opt out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising these rights

To exercise these rights, contact us.

Your information is stored and processed in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover we have collected information from a child, we will delete it immediately.

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.

When you upload site plans:

1. We store your documents in our cloud servers (US-based)
2. PDF processing extracts text and generates images
3. Documents and extracted content are sent to AI services (e.g. Anthropic, Google) for analysis
4. Analysis results are stored in our database
5. You can view results through the Service

AI service providers process your documents according to their own policies. We use these services under business agreements that require them to protect your data, but their processing is subject to their own terms.

During the pilot phase:

• We may use anonymized examples to improve prompts and analysis
• We do not provide your identifiable documents to AI providers for their model training
• We may share de-identified snippets with advisors for feedback

We may update this Privacy Policy periodically. If we make material changes, we will notify you by:

• Email to the address associated with your account
• Prominent notice in the Service
• Updating the "Effective Date" at the top of this policy

Your continued use after changes indicates acceptance of the updated policy.

For questions, concerns, or requests regarding this Privacy Policy or your personal information:

Noetic Incorporated
5209 Burnet Road, Austin, TX 78756
Email: sales@noeticbuild.com
Website: https://noeticbuild.com