Privacy Policy
Privacy Policy
Spacial AI, Inc.
Last updated: July 6th, 2026
1. Introduction
Spacial AI, Inc. ("Spacial," "we," "us," or "our") is committed to protecting the privacy of visitors to our website and users of our services. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information, and explains the rights you have over that information.
This policy applies to spacial.io and to any other websites, products, or services that link to it. It is linked from our website footer and from the cookie consent banner that appears on your first visit. Our website and services are used primarily by businesses and professionals, such as architects and builders. Where individual homeowners engage us directly, this Privacy Policy applies to the personal information they provide.
Relationship to our Terms of Use. This Privacy Policy is incorporated into and governed by our Terms of Use. By accessing our website or using our services, you acknowledge this Privacy Policy and agree to the Terms of Use, including the binding individual arbitration provision and class action waiver described there. Those dispute-resolution terms apply to disputes arising out of or relating to this Privacy Policy, our website, and our services, except for any right or remedy that applicable law makes non-waivable (see Section 16).
2. Categories of Personal Information We Collect
In the past twelve (12) months, we have collected the following categories of personal information, as defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
Identifiers, such as your name, email address, telephone number, postal address, and IP address.
Customer records information, such as contact details you provide when you inquire about our services or engage with us.
Project-related information, such as property addresses, plan documents, and related materials provided to us in connection with an engagement, which may include personal information of property owners.
Commercial information, such as records of services you have requested or considered.
Internet or other electronic network activity information, such as browsing activity on our site, pages viewed, referring URLs, and interactions with our content.
Geolocation data, limited to an approximate location derived from your IP address.
Professional or employment-related information, such as your job title or company, when you provide it.
Inferences drawn from the above to understand your interest in our services.
Each category above is collected and used for the purposes listed in Section 3. We collect personal information directly from you, automatically through your interaction with our website, and from service providers (analytics, hosting, security).
We do not knowingly collect sensitive personal information as defined under the CPRA (such as government identifiers, precise geolocation, racial or ethnic origin, religious beliefs, biometric information, or health information). If you choose to provide such information to us, we will use it only for the purpose for which you provided it and will not use or disclose it to infer characteristics about you. Because we do not use sensitive personal information to infer characteristics about consumers, we are not required to offer a separate Right to Limit; we have noted the right in Section 7 for completeness.
3. How We Use Your Information
We use the personal information we collect for the following business purposes:
To respond to your inquiries and provide the services you request. When you submit a contact form, we collect the information you provide, such as name, email, phone number, role, requested service, referral source, message content, consent records, page URL, and submission timestamp. We use HubSpot as our customer relationship management and form processing provider to process and store these submissions.
To operate, maintain, secure, and improve our website and services.
To develop, train, and improve our technology and services, including the machine-learning systems that support our engineering workflows. We may use information and content submitted in connection with our services for these purposes. Where our written agreement with a customer provides otherwise, that agreement controls.
To communicate with you about our services, including project updates and administrative messages.
To send marketing communications where you have opted in, and to measure the effectiveness of those communications.
To detect, prevent, and respond to fraud, security incidents, and unlawful activity.
To comply with legal obligations, including tax, accounting, and regulatory requirements.
To establish, exercise, or defend legal claims, and to enforce our Terms of Use and other agreements.
4. Legal Bases for Processing (EU, UK, and EEA)
Where the EU or UK General Data Protection Regulation applies, we process personal information on one or more of the following legal bases: your consent; performance of a contract with you or to take steps at your request before entering into a contract; our legitimate interests in operating, securing, and promoting our business, where those interests are not overridden by your rights; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.
5. Categories of Third Parties We Share With
We disclose personal information to the following categories of third parties, only as needed for the purposes described above:
Service providers and contractors that support our operations, including website hosting, analytics, email delivery, customer relationship management, and IT security. Our service providers may include website hosting and publishing providers such as Framer and customer relationship management/form processing providers such as HubSpot. These parties are contractually obligated to protect your information and to use it only for the purposes we specify.
Professional advisors, including lawyers, accountants, and auditors.
Government authorities and other parties, where required by law, legal process, or to protect our rights, our property, or the safety of others, including to enforce our agreements.
Successors in interest, in the event of a merger, acquisition, financing, reorganization, or sale of business assets, subject to standard confidentiality protections.
We do not sell your personal information to data brokers. We also do not sell or share your personal information for cross-context behavioral advertising, as those terms are defined under the CPRA. We have not done so in the preceding twelve (12) months, and we do not knowingly sell or share the personal information of consumers under 16 years of age.
6. Cookies and Similar Technologies
We use cookies and similar technologies to operate our website, remember your preferences, analyze site traffic, and improve performance. Most browsers accept cookies by default, but you can configure your browser to decline them. Disabling cookies may affect your experience on our website.
We use analytics and session replay tools that capture how visitors interact with our website — such as pages viewed, clicks, scrolling, and mouse movements — to diagnose issues and improve usability. These tools are operated by service providers acting on our behalf and under our instructions, and they operate in accordance with your cookie preferences.
The first time you visit spacial.io, a cookie consent banner appears giving you the option to accept or decline non-essential cookies. The banner also links to this Privacy Policy. You can revisit your cookie preferences at any time through the cookie settings link in our website footer.
Global Privacy Control (GPC). We honor Global Privacy Control signals. If you visit our website with a browser or extension that transmits a GPC signal, we treat that signal as a valid request to opt out of the sale or sharing of personal information for the browser making the request. Because we do not sell or share personal information for cross-context behavioral advertising, the practical effect is to confirm that no such sale or sharing will occur.
7. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods depend on the type of data:
Contact information: retained for up to 24 months after your last interaction with us.
Transactional data: retained for up to 7 years, as required for tax and accounting purposes.
Cookies and usage data: retained for up to 12 months, unless you clear them sooner through your browser settings.
Marketing preferences and opt-out records: retained for as long as needed to honor your choices.
Retention periods are determined by the type of data and the purpose of collection. The longest retention period that may apply to any category is seven (7) years (transactional data). When we no longer need your personal information, we will securely delete or anonymize it. If you request deletion, we will comply unless we are required to retain the information to meet a legal obligation, resolve a dispute, or establish, exercise, or defend legal claims.
8. Your Privacy Rights
Depending on where you live, you may have certain rights regarding your personal information. California residents have the following rights under the CCPA, as amended by the CPRA:
Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we have shared it.
Right to Data Portability. Where technically feasible, you may request your personal information in a portable, machine-readable format.
Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions.
Right to Correct. You may request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale or Sharing. You may opt out of the sale or sharing of your personal information. As noted above, we do not sell or share personal information, and we honor Global Privacy Control signals as a valid opt-out request.
Right to Limit Use of Sensitive Personal Information. You may limit our use of sensitive personal information to purposes specified by law. We do not use sensitive personal information to infer characteristics about you.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
Residents of other US states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Texas, Utah, Oregon, Montana, Delaware, and others) may have similar rights. Contact us using the methods below to exercise them.
How to Exercise Your Rights. To exercise any of these rights, contact us at info@spacial.io with the subject line "Privacy Request." Please include enough information for us to verify your identity and respond to your request, such as your name and the email address associated with your interactions with us, plus one other identifier we hold on file. We will acknowledge your request within ten (10) business days and respond to verifiable consumer requests within the timeframes required by law (generally 45 days, with one possible 45-day extension where reasonably necessary). You may designate an authorized agent to make a request on your behalf; we may require the agent to provide written, signed authorization (or a power of attorney), and we may also require you to verify your identity directly.
9. Automated Decision-Making
We do not use your personal information collected through our website to engage in automated decision-making, including profiling, that produces legal or similarly significant effects concerning you. Analytics and inferences described in this policy are used to understand interest in our services and to improve our website, not to make decisions that produce such effects about individuals.
10. Do Not Track and Third-Party Links
Some browsers transmit "Do Not Track" signals. There is no industry-standard response to these signals, and our website does not currently respond to them; however, we honor Global Privacy Control signals as described in Section 6. Our website may contain links to third-party websites and services that we do not control. We are not responsible for the privacy practices or content of those third parties, and we encourage you to review their policies before providing personal information.
11. International Data Transfers
Our servers and service providers are located in the United States. If you access our website from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions, which may have data protection laws different from those in your country. We take appropriate steps to ensure your personal information receives an adequate level of protection through legally recognized transfer mechanisms and contractual safeguards. If you are located in the EU, UK, or EEA, you have rights under applicable data protection law, including the right to access, correct, delete, restrict processing, and object to processing. Contact us to exercise these rights.
12. Data Security and Assumption of Risk
We take reasonable administrative, technical, and physical measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. No method of transmission over the internet or method of electronic storage is completely secure, however, and we cannot and do not guarantee absolute security. You provide personal information to us at your own risk, and you are responsible for maintaining the secrecy of any credentials associated with your interactions with us. If we become aware of a security incident affecting your personal information, we will notify you and applicable authorities to the extent required by law.
13. Children's Privacy
Our website and services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. We comply with the federal Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.
14. No Contract; No Third-Party Beneficiaries
This Privacy Policy is a statement of our practices. It is not a contract and does not create any contractual rights or obligations beyond those required by applicable law, and it does not create any rights in any third party. The binding contract governing your use of our website and services is our Terms of Use.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the updated version on our website and revise the "Last updated" date above. Material changes will be communicated through a prominent notice on our website. Your continued use of our website following the posting of changes means you accept those changes.
16. Dispute Resolution
Any dispute, claim, or controversy arising out of or relating to this Privacy Policy, our website, or our services is governed by the Dispute Resolution and Binding Arbitration section of our Terms of Use, which requires resolution by binding arbitration on an individual basis and includes a class action waiver and a waiver of jury trial. Nothing in this Privacy Policy or in our Terms of Use waives, limits, or restricts any right or remedy that applicable privacy law, including the CCPA as amended by the CPRA, makes non-waivable. The arbitration provision provides a 30-day opt-out described in the Terms of Use.
17. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or if you would like to exercise any of your rights, please contact us:
Spacial AI, Inc.
904 Industrial Ave, Palo Alto, CA 94303
Email: info@spacial.io
Phone: (650) 719-4977