Privacy Policy

1. Introduction

SourcePath Systems, Inc. ("SourcePath," "we," "us," or "our") is committed to protecting the privacy of our users, clients, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our platform.

2. Information We Collect

Information You Provide

• Account registration information (name, email, organization, role)
• Contact form submissions
• Facility documentation uploaded to our platform (floor plans, inspection reports, maintenance records)
• Communication records (emails, support requests)
• Billing and payment information

Information Collected Automatically

• Device and browser information
• IP address and approximate location
• Pages visited and features used
• Referring URLs and search terms
• Session duration and interaction patterns

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our compliance assessment services
• Generate facility-specific compliance reports and recommendations
• Communicate with you about your account, services, and updates
• Process transactions and send related information
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve our platform
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

4. Facility Data

We understand that facility documentation may contain sensitive operational information. We treat all uploaded facility data with the highest level of confidentiality:

• Facility data is used solely to provide compliance assessment services to the uploading organization
• We do not share facility-specific data with other clients or third parties
• We do not use your facility data to train AI models that serve other clients without explicit written consent
• Facility data is encrypted at rest and in transit
• Access to facility data is restricted to authorized personnel on a need-to-know basis

5. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: Third-party vendors who assist in operating our platform (hosting, analytics, payment processing)
• Legal Requirements: When required by law, regulation, or legal process
• Protection: To protect the rights, property, or safety of SourcePath, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Consent: With your explicit consent for any other purpose

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Upon account termination, we will delete or anonymize your data within 90 days, unless retention is required by law or legitimate business purposes (such as resolving disputes or enforcing agreements).

7. Data Security

We implement industry-standard security measures to protect your information, including:

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Role-based access controls
• Regular security assessments and penetration testing
• SOC 2 Type II compliance (in progress)

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict certain processing activities
• Request data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@sourcepathsystems.com.

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. You can control cookie preferences through your browser settings. Essential cookies required for platform functionality cannot be disabled.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: