Privacy Policy

We may collect personal identification information from users in a variety of ways, including, but not limited to, when users visit our sites and applications, register on the platform, submit forms, or in connection with other activities, services, features, or resources we make available. Information collected may include name, email address, phone number, job title, company name, and other relevant details.

We will collect personal identification information only if users voluntarily submit such information to us. Users can always refuse to supply personally identifiable information, except that it may prevent them from engaging in certain site or platform-related activities.

We may collect non-personal identification information about users whenever they interact with our sites and applications. Non-personal identification information may include browser name, device type, operating system, referring URLs, pages visited, time spent on pages, and other technical information about the means of connection to our services.

This information is used in aggregate form to understand how our users interact with the platform and to improve the overall user experience.

Given the nature of our LiDAR and geospatial intelligence services, we may collect and process geospatial data, including location coordinates, point cloud data, aerial survey data, and related geographic information submitted to our platform for processing.

This data is treated with the highest level of confidentiality. It is used solely for the purpose of delivering the requested analysis and services. We do not use client-submitted geospatial datasets for any purpose other than fulfilling the contracted service unless explicitly authorized in writing by the client.

Location information associated with individual users may also be collected via IP address or device sensors as part of standard web application operation.

Our sites and applications may use cookies, pixel tags, and similar tracking technologies to enhance user experience and analyze platform usage. Cookies are placed on your device for record-keeping purposes and to track information about your interactions with our services.

Users may configure their web browsers to refuse cookies or to alert when cookies are being sent. Note that some parts of the site or platform may not function properly if cookies are disabled. We do not use tracking technologies for the purpose of serving third-party advertising.

Reflektar Inc. may collect and use information for the following purposes:

• To deliver and improve our services: to process, analyze, and return geospatial data and platform outputs to authorized users. • To improve customer service — information helps us respond to requests and support needs more efficiently. • To personalize user experience — aggregate usage data helps us understand how users interact with the platform. • To communicate updates — we may use contact information to send service updates, security notices, and relevant product information. • To comply with legal obligations — we may process data as required by applicable law, regulation, or government authority. • To protect our rights — information may be used to detect and prevent fraud, abuse, or unauthorized access to the platform.

We adopt appropriate technical and organizational security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information and data stored on our platform. Security measures include, but are not limited to:

• Encryption of data in transit using TLS/HTTPS • Encryption of data at rest using industry-standard protocols • Role-based access controls limiting data access to authorized personnel only • Regular security assessments and vulnerability testing • Secure cloud infrastructure managed by SOC 2-compliant providers

While we implement robust security practices, no method of transmission or storage over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-leading protections.

In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, Reflektar Inc. will notify affected users and relevant regulatory authorities without undue delay, and where feasible within 72 hours of becoming aware of the breach, in accordance with applicable data protection laws.

Notification will include the nature of the breach, the categories and approximate number of individuals and records affected, contact details of our data protection point of contact, the likely consequences of the breach, and the measures taken or proposed to address the breach.

We may share information with trusted third-party service providers who assist us in operating our platform, conducting business, or serving users. Such parties are contractually obligated to keep information confidential and may not use it for any purpose other than the service they provide to us. Categories of third-party processors may include:

• Cloud infrastructure and hosting providers • Analytics and performance monitoring services • Customer support and communication tools • Payment processors (if applicable)

We do not sell, trade, or rent users' personal identification information to third parties for marketing or advertising purposes.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: you may request a copy of the personal data we hold about you. • Right to Rectification: you may request that we correct inaccurate or incomplete data. • Right to Erasure: you may request deletion of your personal data, subject to legal retention requirements. • Right to Restriction: you may request that we limit the processing of your data in certain circumstances. • Right to Data Portability: you may request a structured, machine-readable copy of your data. • Right to Object: you may object to processing of your data for certain purposes. • Right to Opt-Out (CCPA): California residents may opt out of the sale of personal information (we do not sell personal data).

To exercise any of these rights, please contact us using the information provided below. We will respond to all verified requests within 30 days.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Client geospatial data and project files are retained for the duration of the active service agreement and for a reasonable period thereafter, unless the client requests earlier deletion or applicable law requires a specific retention period.

Upon expiry of the retention period, data is securely deleted or anonymized in a manner that prevents reconstruction.

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us immediately and we will take steps to delete such information from our systems.

Reflektar Inc. has the discretion to update this Privacy Policy at any time. When we do, we will revise the updated date at the bottom of this page and, where appropriate, notify registered users via email. We encourage users to frequently check this page for any changes.

Your continued use of the platform following the posting of changes to this policy will be deemed your acceptance of those changes.