Legal

Privacy Policy

Effective date: May 28, 2026
Last updated: May 28, 2026

26 Degrees Software LLC ("we," "us," or "our") operates the 26 Cloud Platform, ViewAQC, Collectus, and related services (collectively, the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website at 26degreesoftware.com or use our Services.

1. Information we collect

Information you provide

• Account information: name, email address, company name, job title, and phone number when you register, request a demo, or contact us.
• Payment information: billing address and payment details processed by our third-party payment processor. We do not store full payment card numbers.
• Project data: BIM models, metadata, and related files you upload to the Services.
• Communications: information you provide when you contact support or respond to surveys.

Information collected automatically

• Usage data: pages visited, features used, timestamps, and referring URLs.
• Device data: browser type, operating system, IP address, and device identifiers.
• Cookies and similar technologies: we use essential cookies for authentication and session management. We do not use third-party advertising cookies. See Section 7 below.

2. How we use your information

• To provide, maintain, and improve the Services.
• To process transactions and send related notices.
• To respond to your requests, comments, or questions.
• To send service-related communications (e.g., security alerts, product updates).
• To detect, prevent, and address technical or security issues.
• To comply with legal obligations.

3. We never sell your data

We do not sell, rent, or trade your personal information or project data to third parties for their marketing purposes. We do not use your BIM models or project data to train machine-learning models outside your tenant. This commitment applies regardless of your jurisdiction.

4. How we share information

We may share information only in the following circumstances:

• Service providers: with trusted third-party vendors who process data on our behalf (e.g., cloud hosting via AWS, payment processing, email delivery) under contracts that require them to protect your data.
• Legal requirements: when required by law, subpoena, or court order, or to protect the rights, property, or safety of 26 Degrees Software, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.
• With your consent: when you have given explicit permission.

5. Data security

We protect your data using industry-standard measures, including:

• TLS 1.3 encryption for data in transit.
• AES-256 encryption for data at rest, managed through AWS KMS.
• Role-based access control and audit logging.
• Continuous monitoring via AWS GuardDuty.
• SOC 2 readiness program underway.

No method of transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data retention

We retain your personal information for as long as your account is active or as needed to provide the Services. We retain project data according to the terms of your subscription. When data is no longer needed, we delete or anonymize it in accordance with our retention policies. You may request deletion at any time (see Section 8).

7. Cookies

We use only essential cookies necessary for the operation of our website and Services (e.g., session tokens, authentication). We do not use advertising or tracking cookies. You can configure your browser to refuse cookies, but some features of the Services may not function properly.

8. Your rights

For all users

You may at any time:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Opt out of non-essential communications.

GDPR rights (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR), including:

• Right of access (Art. 15) — obtain a copy of your personal data.
• Right to rectification (Art. 16) — correct inaccurate personal data.
• Right to erasure (Art. 17) — request deletion of your personal data.
• Right to restriction (Art. 18) — restrict processing under certain conditions.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent.

Our legal basis for processing is typically performance of a contract (providing the Services) or legitimate interest (improving the Services and communicating with you).

CCPA rights (California residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know: what personal information we collect, use, and disclose.
• Right to delete: request deletion of your personal information.
• Right to opt out of sale: we do not sell personal information, so this right is automatically satisfied.
• Right to non-discrimination: we will not discriminate against you for exercising your rights.

9. International data transfers

Our Services are hosted on Amazon Web Services (AWS) in the United States. If you are accessing the Services from outside the United States, your data may be transferred to and processed in the United States. We use standard contractual clauses and other appropriate safeguards to protect data transferred internationally.

10. Children's privacy

The Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

12. Contact us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

26 Degrees Software LLC
9010 Strada Stell Ct #107
Naples, FL 34109, USA
Email: jason.shebert@26degreesoftware.com
Phone: +1 507-967-3826