1. Information We Collect
We collect information you provide directly to us, such as:
- Account information (name, email, company)
- Project data (building plans, energy models, LEED documentation)
- Payment information (processed securely by Stripe - we do not store credit card details)
- Usage data (features used, time spent, API requests)
- Device and browser information (for security and troubleshooting)
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain our services
- Process your LEED analysis requests
- Send you technical alerts and updates
- Improve our algorithms and services
3. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze service usage
You can disable cookies in your browser settings, but some features may not work properly.
4. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (HTTPS)
- Encryption at rest for sensitive data
- Regular security audits
- Access controls and authentication
5. Data Sharing and Third-Party Services
We do NOT sell your data.
We may share your information only:
- With your consent
- To comply with legal obligations
- With service providers who assist our operations (under strict confidentiality)
Third-Party Service Providers
We use the following third-party services to operate VERTIQ:
- Stripe - Payment processing (PCI-DSS compliant)
Privacy Policy: https://stripe.com/privacy - Google Cloud Platform - Hosting, storage, and AI services
Privacy Policy: https://cloud.google.com/terms/cloud-privacy-notice - OpenAI - AI-powered analysis (optional)
Privacy Policy: https://openai.com/privacy
These providers have their own privacy policies and may process data in the United States or other countries. By using VERTIQ, you consent to this data processing.
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data
- Opt-out of marketing communications
7. California Privacy Rights (CCPA)
California residents have additional rights under CCPA, including the right to:
- Know what personal information we collect
- Request deletion of personal information
- Opt-out of data sales (we don't sell data)
- Non-discrimination for exercising privacy rights
8. Data Retention
We retain your data for as long as your account is active or as needed to provide services. You can request deletion at any time.
Data Retention for Fraud Prevention
When you delete your account, we delete all your project data and personal information, with the following exception:
Free Tier Usage Flag
We retain a minimal record that your email address has used our one-time free project offer. This prevents abuse of the free tier by creating multiple accounts.
This is a minimal, anonymized flag (no project data or personal details) retained solely for fraud prevention, which is a legitimate business interest under GDPR Article 6(1)(f) and an exempt business purpose under CCPA Section 1798.145(a)(5).
If you object to this retention, please contact admin@vertiq.net with your request and we will evaluate it on a case-by-case basis.
Payment Data Retention
Payment information (credit card details) is NOT stored on our servers. We use Stripe for payment processing, and they store your payment methods securely. We only retain:
- Payment transaction IDs (for refunds and dispute resolution)
- Payment amounts and dates (for tax compliance and accounting)
- Stripe customer IDs (to link your account with payment history)
This payment metadata is retained for 7 years to comply with tax and financial regulations.
9. Children's Privacy
VERTIQ is not intended for users under 18 years of age. We do not knowingly collect data from children.
10. Mobile App (Android/iOS)
VERTIQ Mobile is a field companion app for capturing project evidence and photos on-site. In addition to the data described above, the mobile app collects:
Permissions and Data Collection
- Camera Access (CAMERA) - Required to capture project photos and evidence. Photos are uploaded to your project and stored in Google Cloud Storage. We do not access your camera without your explicit permission.
- Photo Library Access (READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGE) - Required to save photos to your device and select existing photos for upload. We only access photos you explicitly select within the app.
- Internet Access - Required to sync your data with VERTIQ servers, upload photos, and authenticate with Google Sign-In.
- Photo Metadata - Date, time, and location data (if enabled by you) from photos you take within the app. Location data is optional and controlled by your device settings.
- Device Information - Device model, OS version, and app version for troubleshooting and compatibility. This data is anonymized and used only for app stability.
Data Storage
- Secure Token Storage - Authentication tokens are stored securely on your device using iOS Keychain (iOS) or Android Keystore (Android) via expo-secure-store. Tokens never leave your device and are encrypted at rest.
- Local Cache - Project data may be temporarily cached on your device for offline viewing. This cache is automatically cleared when you log out or uninstall the app.
Third-Party Services (Mobile-Specific)
- Google Sign-In - OAuth authentication (same privacy policy as web). We only receive your name, email, and profile photo from Google.
- Expo Secure Store - Secure token storage library (no data leaves your device, no external servers involved).
- React Native Google Sign-In - OAuth library for mobile authentication.
Data Deletion (Mobile App)
When you uninstall the VERTIQ Mobile app:
- All locally stored authentication tokens are deleted
- All cached project data is deleted
- Your server-side data (projects, photos) remains intact and accessible via web or by reinstalling the app
To permanently delete your account and all server-side data, please use the web platform or contact us at admin@vertiq.net.
11. Contact Us
For privacy concerns or requests, contact us at:
Everpoint Inc.
Privacy Team
Email: admin@vertiq.net
We will respond to your privacy requests within 30 days as required by GDPR and CCPA regulations.