This Privacy Policy (“Privacy Policy”) describes how Archicheck AI, Inc. dba Kestrel Labs (together with its affiliates and subsidiaries, “Kestrel,” “us,” “we,” or “our”) may collect, use, and share personal information in connection with our website located at https://kestrellabs.com/ and any other websites owned and operated by Kestrel that link to this Privacy Policy (collectively, the “Site”), our Kestrel building code compliance platform (the “Platform”), and our related products and services, our social media pages, and our email and other electronic communications (collectively, and together with the Site and the Platform, the “Services”).
This Privacy Policy does not apply to personal information or other data that we process as a service provider or processor on behalf of and at the direction of our customers through the Platform. If you are an authorized user of one of our customers, please contact that customer directly for more information about its privacy practices and to exercise any rights you may have in relation to your personal information or content.
Kestrel reserves the right, at any time, to modify this Privacy Policy. If we make revisions that change the way we collect, use, or share personal information, we will post an updated Privacy Policy. In some cases, we may notify you about an update by sending you an email, posting a notice about the update on the Services, or other means as may be required by applicable law. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices. Your continued use of the Services following posting or other notification of changes constitutes your acknowledgement of such changes.
Collection of personal information
We may collect the following categories of personal information about you. We may also collect other personal information that is not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
- Contact information, such as first and last name and professional email address, phone number, mailing address, and account name or username, and social media handle and profile URL.
- Professional information, such as your organization’s name, location, email, and phone, your role, and other details we may collect about your organization.
- Account Information, such as your login name and password, and details about your use of the Platform.
- Payment Information, such as banking information and billing address.
- Order History, such as records of services you or your organization have purchased from us.
- Preferences, such as any preferences you set in your account on the Platform, and marketing or communications preferences.
- Survey responses, such as the information you provide in response to our surveys or questionnaires.
- Communications, such as the information associated with your requests or inquiries, including for support, assistance, or order information, and any feedback you provide when you communicate with us. We and our service providers may also record or monitor any call or chat you have with us for quality control or training purposes, or to enforce our rights.
- Online activity information, such as pages or screens viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and duration of access.
- Device information, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, unique identifiers, the website you visited before browsing to our Site, and general location information such as city, state, or geographic area.
We obtain personal information from a variety of sources, including the following:
Personal Information You Provide. Kestrel collects personal information when you voluntarily submit it to us. For example, we may collect or receive personal information when you create an account, sign up to receive our newsletters or other marketing materials or contacts, or use or access the Platform.
Personal Information Automatically Collected. When you use or interact with the Services, even if you do not have an account, we and our authorized third-party service providers and advertising partners may automatically log information about you, your computer, or mobile device, and your activity over time on our Platform and Services and other sites and online services, such as the internet or network activity information and device information listed above. Like many online services, we use cookies and similar technologies to facilitate some of this automatic data collection, such as:
- Cookies, which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, helping us understand user activity and patterns, and facilitating online advertising.
- Flash cookies, or locally-stored objects, which are used on websites for purposes similar to cookies but allow storage of a larger amount of data.
- Web beacons, also known as pixel tags or clear GIFs, which are typically used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked, typically to compile statistics about usage of websites and the success of marketing campaigns.
- Local storage, which is used to save data on a visitor’s device. We may use data from local storage to, for example, turn on web navigation, store multimedia preferences, customize what we show you based on your past interactions with our Services, and remember your preferences.
- Session-replay technologies, which are third-party software programs that we may use on the Site to record a video replay of user’s interactions with the Services. The video replay may include users’ clicks, mouse movements, scrolls, typing, and other activity taken during the session. We use these replays for research and development purposes, such as to help us troubleshoot problems with the Services, understand how users interact with and use the Services, and identify areas for improvement.
- Chat technologies, to operate the chat features that you may use to communicate with us through the Services. Our chat vendors and other third parties may access and use your submitted content, and the device information and online activity information described above, and monitor and record your chats, for the purposes described in this Privacy Policy. In most cases, when you use these features, you are communicating with a digital agent and not a human.
Personal Information from Third Parties. In addition to the personal information that we collect from you directly and automatically, Kestrel may receive personal information about you from third-party sources, such as our service providers, data analytics partners, operating systems and platforms, event sponsors, publicly available sources, data licensors/providers, and social media sites. We may merge or combine such personal information with the personal information we collect from you directly or automatically.
Referrals. Users of the Services may have the opportunity to refer colleagues or other contacts to us and share their contact information. Please do not provide us with someone’s contact information unless you have their permission to do so.
Use of personal information
Kestrel’s primary purpose in collecting personal information is to provide the services that you request. Kestrel may also use personal information for the purposes set forth below and as otherwise described in this Privacy Policy or at the time of collection.
Providing the Services. We use personal information to provide our Services and operate our business. For example, we may use personal information to:
- provide, operate, and improve the Services;
- process and fulfill your transactions, as applicable;
- establish, manage, monitor, and maintain your account;
- verify your identity and determine your eligibility for offers or promotions;
- improve and personalize your experience on or with the Services;
- communicate with you about the Services, including providing notices about your account (e.g., security alerts and support and administrative messages), and responding to any of your requests, feedback, or questions;
- provide any surveys, questionnaires, or promotions you participate in;
- provide maintenance and support; and
- fulfill any other purpose for which you provide personal information.
Artificial Intelligence Tools. When operating our business and providing the Services, we may use services or applications that are supported by artificial intelligence (AI), machine learning, large language models, or related technologies. For example, we may use such technology to support our marketing or advertising efforts, to develop or improve products, features, or functionality, or to improve how we address your support requests or inquiries. Additionally, our Platform may use AI-enabled technologies to help analyze building models and project data, identify potential building code compliance issues, provide cited explanations, respond to code questions through Kestrel Compliance Chat or similar chat technologies, and support customer service, sales, product development, and internal operations. Our AI-enabled features are intended to support user review and decision-making and do not replace professional judgment or human review. We may use prompts, queries, interaction data, usage data, feedback, and other information submitted through AI-enabled or chat features to provide, maintain, secure, monitor, test, and improve the Services, including to evaluate output quality, improve model performance, and monitor guardrail effectiveness, subject to our agreements with customers and applicable law. Third-party service providers may also use AI technologies in connection with the services they provide to us. Unless you receive a supplemental privacy notice relating to a specific feature or service, your personal information will continue to be treated as described in this Privacy Policy.
Direct Marketing. We may use your personal information to send you Kestrel-related or other marketing communications, as permitted by law. You may opt-out of our marketing and promotional communications as described in the section titled “Your Choices” below.
Targeted Advertising. We may contract with third-party advertising companies and social media companies to help us advertise our business and Services, identify potential customers, and display ads on our Services and other sites and services. These companies may use cookies and similar technologies to collect information about you (including the device information and online activity information described above) over time across our Services and other sites and services or your interaction with our emails, and use that information to serve ads that they think will interest you and use hashed customer lists and related information that we share with them to deliver ads to you and to similar users on their sites and services. You can learn more about your choices for limiting targeted advertising under the section titled “Your Choices” below.
Research and Development. We may use your personal information for research and development purposes, including to analyze, develop, and improve the features and functionality of our Services and business, and understand and analyze the usage trends and preferences of our users. As part of these activities, we may create aggregated, de-identified, or anonymous data records from your personal information and other individuals whose personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes.
Compliance, Fraud Prevention, and Safety. We may use your personal information to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities; protect our, your, or others’ rights, privacy, safety or property (including by making and defending legal claims); maintain the integrity, security, and reliability of the Services; audit our internal processes for compliance with legal and contractual requirements and internal policies; enforce the terms and conditions that govern the Services; and prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
With your consent. We will use and disclose your personal information in accordance with your prior direction, or, in some cases, we may specifically ask you for your consent to collect, use, or share your personal information, such as when required by law.
Disclosure of personal information
In addition to the specific situations discussed elsewhere in this Privacy Policy or at the point of collection, we may disclose your personal information to the following entities or persons.
Service Providers. Companies and individuals that provide services on our behalf or help us operate the Services or our business. For example, we work with service providers that help us with payment processing, customer support, cloud hosting, analytics, customer support tools, research and development, email delivery, marketing, database management services, and risk and fraud mitigation.
Advertising Partners. Third parties who we partner with for advertising campaigns or that collect information about your activity on the Services and other online services for the purposes described in the “Targeted Advertising” section above.
Joint Marketing Partners. We may disclose your personal information to our partners in order to provide you with content and other features through the Services, and such partners may send you promotional materials or otherwise contact you regarding products and services that they offer.
Professional Advisors. Persons, companies, or professional firms providing Kestrel with advice and consulting in accounting, legal, tax, financial, debt collection, insurance, and other matters, where necessary in the course of the professional services that they render to us.
Authorities and Others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate to comply with law or for the compliance, fraud prevention, and safety purposes described above.
Related Companies. We may share your personal information with companies that are affiliated with us (that is, that control, are controlled by, or are under common control with us) or may be affiliated with us in the future, for purposes consistent with this Privacy Policy.
Business Transaction Participants. We may sell, transfer, or otherwise disclose some or all of your personal information to third parties in connection with any business transaction (or potential transaction) involving a merger, acquisition, sale of shares or assets, financing, consolidation, reorganization, divestiture, or dissolution of all or a portion of our business (including in connection with a bankruptcy or similar proceedings).
Other Third Parties at Your Direction. We will disclose your personal information in accordance with your prior direction, or, in some cases, we may ask for your consent to share your personal information, such as where required by law.
Security of personal information
No method of transmission over the internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from the risks presented by unauthorized access or acquisition, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of any unauthorized access or acquisition of your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.
Your choices
Kestrel has implemented the following methods that you may use to modify your personal information, or choose how your information is used:
Review and Request Changes to Your Personal Information. If you have a business account with us, you can log into your account to review and make changes to certain personal information stored in your account. If you need to make a change and are unable to do this through your account settings, please email us using the contact information at the end of this Privacy Policy. We rely on you to update and correct the personal information contained in your account. Note that we may keep historical information in our backup files as permitted by law. If our Platform does not permit you to update or correct certain personal information, please contact us as described below.
Promotional E-mails. If we obtain your e-mail address for the purpose of allowing us to send newsletters, surveys, offers, and other promotional materials related to our Services, as well as targeted offers from third parties, you can opt-out of receiving promotional e-mails by clicking the “unsubscribe” links in the e-mails or by contacting us as described below. If you decide not to receive promotional e-mails, we may still send you service-related communications, such as those about your account, to fulfill orders for products and services you have requested, or to deliver notifications directly to you through the Platform.
Cookies. Most browsers let you remove and/or stop accepting cookies from the websites you visit. To do this, follow the instructions in your browser’s settings. Many browsers accept cookies by default until you change your settings. If you do not accept cookies, however, you may not be able to use all functionality of the Services and the Site may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org.
Analytics. We may use Google Analytics and other analytics providers to help us analyze how our Site is being accessed and used. You can learn more about Google Analytics cookies by clicking here and about how Google protects your data by clicking here. To opt-out of Google Analytics, you can download and install the Google Analytics Opt-out Browser Add-on, available here.
Advertising Choices. To the extent we engage in targeted advertising, you can limit the use of your information for targeted advertising by blocking third-party cookies in your browser settings, using browser plug-ins/extensions, or using your mobile device settings to limit the use of the advertising ID associated with your mobile device. You can also opt out of behavioral-based ads from companies participating in the following industry opt-out programs by visiting the linked websites: the Network Advertising Initiative (https://thenai.org/how-to-opt-out/) or the Digital Advertising Alliance (https://optout.aboutads.info). Some of the companies we work with may offer their own opt-out mechanisms. For example, you can learn more about how Google uses cookies for advertising purposes by clicking here and opt-out of ad personalization by Google by clicking here.
Many of the opt-out preferences described in this section must be set on each device or browser for which you want them to apply. Please note that some of the advertising companies we work with may not participate in the opt-out mechanisms described above, so even after opting-out, you may still receive interest-based advertisements from other companies. If you opt out of interest-based advertisements, you will still see advertisements online but they may be less relevant to you.
Do-Not-Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. The Site currently does not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
International transfers of personal information
Kestrel is headquartered in the United States, and we may have service providers in the United States and other countries. Please be aware that your personal information may be transferred to, stored, or processed in the United States and other locations for the purposes described in this Privacy Policy, including for fraud prevention and to otherwise provide the Services. Privacy laws in the locations where we handle your personal information may not be as protective as those in your jurisdiction. By providing your personal information, where applicable law permits, you specifically and expressly consent to such transfer and processing and the collection, use, and disclosure set forth in this Privacy Policy.
Children’s privacy
The Services are not intended for use by anyone under the age of 18, and we do not knowingly collect personal information from minors under 18.
Links to other sites and services
While using our Services you may be directed to other websites or services that are operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or online services that are not associated with us. We have no control over these third parties, and we are not responsible for the privacy practices of such third parties. This Privacy Policy does not apply to information collected by any other website or third party, or to any information collected by third parties through any application or content (including advertising) that may link to or be accessible from the Services. You should carefully review the privacy policy for any third-party sites that you visit.
Notice to California residents (Shine the Light law)
Under California Civil Code sections 1798.83-1798.84, California residents who have an established business relationship with Kestrel are entitled to ask us for a notice describing what categories of personal information we share with third parties for their direct marketing purposes. This notice will identify the categories of information shared with and will include a list of the third parties with which it is shared, along with their names and addresses. If you are a California resident and would like a copy of this notice, please submit your request to the address listed in the section titled “Contacting Us” below.
Notice to Nevada residents
Nevada Revised Statutes Chapter 603A allows Nevada residents to opt-out of the “sale” of certain types of personal information. Subject to several exceptions, Nevada law defines “sale” to mean the exchange of certain types of personal information for monetary consideration to another person. If you are a Nevada resident who wishes to exercise your “sale” opt-out rights, please submit your request to the email address listed at the end of this Privacy Policy with “Nevada Opt-Out Request” in the subject line.
Contacting us
If you have any questions or concerns about our Privacy Policy or any other privacy or security issue, please contact us at hello@kestrellabs.com.