Legal

Aviso de Privacidad

Vigente: 4 de agosto de 2026

Firemaps, Inc., a Delaware corporation (collectively, "X.Build", "we", "us" or "our") owns and operates the X.Build website and its domains located at www.x.build (the "Site"), and the X.Build proprietary online platform (the "Platform") that enables users to generate AI-powered construction estimates and manage their projects (the "Service"). When we refer to the "Services" throughout this Privacy Notice, we mean, collectively, the Site, Platform, Service and any other services provided by us to you.

Please read this Privacy Notice carefully. It provides important information about your personal information. It also tells you about your rights under applicable privacy laws. By accessing or using our Services, or submitting information in connection with your use of the Services, you acknowledge that you have read and understood this Privacy Notice.

Introduction
Changes to this Privacy Notice
Information We Collect
Advertising
Payment Processing
Sensitive Data
Children's Privacy
Using Your Personal Information
Sharing Your Personal Information
Marketing Communications
Your Choices
Your U.S. State Privacy Rights
External Websites
Data Retention
Data Security and Protection
Google User Data
Users Located Outside the United States
Contact Us

1. Introduction

This Privacy Notice is intended to help you better understand how we process your personal information, and governs how X.Build may use, transfer, store and disclose such personal information.

The term "personal information" or "personal data" means any information about an individual from which that person may be identified. For example, it may include your name, telephone number, email address, or payment information, and in some jurisdictions your IP address. It does not include data from which the identity of an individual has been definitively removed (also known as anonymous or anonymized data).

Generally, X.Build may collect personal information when you:

Visit and/or browse the Site
Register an account ("Account") for the Service
Purchase a subscription to access and use the Service
Access and/or use the Platform
Use the Service
Interact with support and other services provided by us
Sign up to receive updates, newsletters and/or other marketing communications
Communicate with us directly

2. Changes to this Privacy Notice

X.Build reserves the right to update or modify this Privacy Notice at any time. The revised Privacy Notice will be posted on our Site. All updates and modifications to this Privacy Notice will be effective from the day they are posted online. If we make any material changes to this Privacy Notice, we will notify you of these changes by sending an email to the email address we have on file for you (if applicable) and also by posting a notice of the changes on the Site.

3. Information We Collect

a. Information Collected Directly

In connection with your use of the Services, X.Build may collect the following personal information directly from you:

Your email address, first name and/or last name
Your username, password and/or other login credentials
Your property address
Your phone number
Payment information (using our third party payment provider) when you purchase a subscription
Other information you may provide by filling out forms or by contacting us

b. Information Collected Indirectly

When you use or interact with the Services, we, or our authorized third-party service providers, automatically collect information about how you use them (collectively, "Usage Information"). Usage Information includes information about your interactions with the Services, including IP address, access dates and times, information about your approximate location, mobile device information, device event information, crash data, and log data.

c. Cookies and Similar Technologies

We or authorized third parties collect certain information by automated means using cookies, web beacons, and server logs for analytic purposes. A cookie is a small text file that is stored on a user's computer for record-keeping purposes. These technologies are used to help us compile statistics about your use of and interaction with the Services.

d. Information Collected from Third Parties

In some instances, we process personal information from third parties, including data from our partners such as transactional data from providers of payment services, and data from third party products and/or services that we have integrated into the Services. If you choose to connect your Google account to the Services, we collect certain information from Google as described in Section 16 (Google User Data).

4. Advertising

X.Build does not sell your personal information, and does not share your personal information with third parties for cross-context behavioral or targeted advertising. We do not use third-party targeting or advertising cookies on the Services. We may advertise our own products and services on other websites and platforms, and we use cookies and similar technologies on the Services only for the analytics and operational purposes described in Section 3(c).

5. Payment Processing

We do not directly collect or store any payment information. We use third-party, PCI-compliant, payment processors (currently, we use Stripe), which collect payment information on our behalf in order to complete transactions. Please review Stripe's privacy notice at https://stripe.com/privacy to learn more about how they collect, process and protect your personal information.

6. Sensitive Data

X.Build does not require you to provide, and asks that you do not provide, sensitive data such as information about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, or genetic or biometric data.

Certain limited information we collect in order to operate the Services, such as your Account login credentials, may be considered "sensitive personal information" under some U.S. state privacy laws. We collect and use such information only as necessary to provide the Services (for example, to authenticate your Account and maintain the security and integrity of the Services) and for other purposes permitted by applicable law. We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit its use or disclosure under applicable law.

7. Children's Privacy

X.Build does not target its Services to persons under the age of 13 and does not knowingly collect personal information from minors. Therefore, we ask you not to provide us with personal information of persons under the age of 13. If we learn that personal information of persons under 13 years of age has been collected on or through the Services, then we may deactivate the account or otherwise terminate access. We do not knowingly sell the personal information of minors under 16 years of age, or share it for targeted advertising purposes.

8. Using Your Personal Information

Depending on how you use the Services, we use your personal information in the following instances:

To host and provide the Site
To perform and provide the Services to you
Facilitate and assist you in connection with the development and implementation of your projects
Deliver direct marketing communications to you regarding our products and services
Respond to your queries and requests, or otherwise communicate directly with you
Detect any fraudulent or illegal activity
Perform system maintenance and upgrades, and enable new features
To comply with a legal or regulatory obligation
Provide information to regulatory bodies when legally required

9. Sharing Your Personal Information

Aside from disclosing your information to those of our personnel who are authorized to process the information in order to provide the Services, we disclose your personal information only to the third parties as described below:

a. Third-Party Service Providers

We share personal information with third parties that provide services to help us provide the Services, including hosting services providers, analytics providers, providers of business operations and communication tools, and other third-party service providers.

b. Business Transfers

We may also share data with third parties to whom we choose to sell, transfer, or merge parts of our business or our assets. If a change happens to our business, then the new owners may use your personal information in the same way as set out in this Privacy Notice.

c. Affiliates and Subsidiaries

Personal information that we collect about you through the Services may be shared with the employees, contractors, and agents of X.Build and our affiliated and subsidiary entities who are involved in providing the Services.

10. Marketing Communications

If you have not otherwise opted out, or if you have opted in to receive direct marketing emails from us, we may use your personal information to send you marketing information about the Services, other X.Build products and services, new product releases, and new feature releases that we think may interest you. If you no longer wish to receive marketing communications, you have the right at any time to opt out. We do not currently send marketing communications by SMS or text message.

11. Your Choices

Updating and Correcting Personal Information

If you would like to correct or update certain personal information (such as your contact information) please contact us at support@x.build and we will use reasonable efforts to correct and/or update such information. You may also update certain profile information directly in your Account settings.

Account and Data Deletion

You may permanently delete your Account and associated personal information at any time from the My Account section of your Account settings, or by contacting us at privacy@x.build.

Direct Marketing

You may manage your receipt of marketing and non-transactional communications by clicking on the "unsubscribe" link located on the bottom of any of our marketing e-mails. You cannot opt out of receiving transactional e-mails related to the Services.

Cookies

Most web and mobile device browsers automatically accept cookies, but if you prefer, you can change your browser to prevent that or to notify you each time a cookie is set. You can also learn more about cookies by visiting www.allaboutcookies.org. Because we do not sell your personal information or share it for targeted advertising, there is no opt-out for browser-based preference signals such as Global Privacy Control (GPC) or Do Not Track (DNT) to effectuate, and these signals do not change how the Services operate.

12. Your U.S. State Privacy Rights

Depending on your state of residence, you may have some or all of the following rights under applicable U.S. state privacy laws (such as the California Consumer Privacy Act and similar laws in other states) with respect to your personal information:

Right to Know/Access. The right to confirm whether we process your personal information and to access it, including the categories of personal information we have collected, the sources of that information, the purposes for collecting it, and the categories of third parties to whom it is disclosed.
Right to Correct. The right to correct inaccuracies in your personal information.
Right to Delete. The right to request deletion of your personal information.
Right to Portability. The right to obtain a copy of your personal information in a portable and readily usable format.
Right to Opt Out. The right to opt out of the sale of personal information, the sharing or processing of personal information for targeted advertising, and certain profiling. As described in this Privacy Notice, X.Build does not sell your personal information, does not share your personal information with unaffiliated third parties for their direct marketing or targeted advertising purposes, and does not engage in profiling that produces legal or similarly significant effects.
Right to Non-Discrimination. The right not to receive discriminatory treatment for exercising your privacy rights.

To exercise any of these rights, email us at privacy@x.build with your name, your state of residence, and a description of your request. We may need to verify your identity before fulfilling your request, and we will respond within the timeframe required by applicable law. If we decline to take action on your request, you may appeal our decision by replying to our response with "Appeal" in the subject line. Where permitted by applicable law, you may also use an authorized agent to submit a request on your behalf.

California "Shine the Light" Disclosure

X.Build does not share your personal information with any unaffiliated third party for its direct marketing purposes without your express consent. California residents who have provided us with personal information have the right (under California Civil Code § 1798.83) to request and obtain from us, once each year, the details of any personal information we shared with a third party for that third party's direct marketing purposes during the prior calendar year. To request information about this sharing, you may submit a request with "Your California Privacy Rights" in the subject line, along with your name and complete mailing address, by sending an email to privacy@x.build.

13. External Websites

On or through the Services, we may provide or make available links to other websites or resources with which we do not have a contractual relationship and over which we do not have control ("External Websites"). Such links are not paid advertisements, nor do they constitute an endorsement by X.Build of those External Websites. We are not responsible for the content or data collection practices of those External Websites.

14. Data Retention

Your personal information is processed for the period necessary to fulfill the purposes for which it is collected, to comply with legal and regulatory obligations and for the duration of any period necessary to establish, exercise or defend any legal rights. The criteria we use to determine our retention periods include: the length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you maintain an Account); whether we are subject to a legal obligation that requires retention; and whether retention is advisable in light of our legal position (such as applicable statutes of limitations, litigation, or regulatory investigations).

In some instances, we may choose to anonymize your personal information instead of deleting it, for statistical use. When we choose to anonymize, we make sure that there is no way that the personal information can be linked back to you or any specific user.

15. Data Security and Protection

We have put in place reasonable and appropriate security measures designed to prevent your personal information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. For example, we use encryption, secure socket layer, firewalls, and password protection. In addition, we limit access to personal information to those employees, agents, contractors and the third parties who have a business need-to-know.

While we strive to protect your personal information, you should know that no data transmission over the Internet is completely secure. There is always a risk that information may be intercepted or otherwise processed by third parties, and we assume no liability for any third-party actions.

16. Google User Data

If you choose to connect your Google account to the Services (for example, to add files from Google Drive to your projects), X.Build will access certain information from your Google account with your permission, granted through Google's OAuth consent process. This section describes what we access, how we use it, and the commitments we make regarding that data.

a. What We Access

With your authorization, X.Build requests read-only access to your Google Drive files and their metadata (such as file names, types, sizes, thumbnails, and modification dates), and your Google account email address. X.Build cannot create, edit, move, or delete anything in your Google Drive.

b. How We Use Google User Data

We access and use Google user data only to provide user-facing features of the Services that you request:

Displaying your files to you. We list your recent Google Drive files and let you search your Drive from within the Services so you can choose files to add to a project. This information is displayed to you and is not stored beyond short-lived caching needed to render it.
Copying files you select. When you explicitly select a file and add it to a project, we copy that file into the Services, where it is stored with your project and treated like any other file you upload. Only files you individually select are copied. We do not bulk-copy, sync, or retain any other Drive content.
Providing features you invoke on selected files. Files you add to a project may be processed at your direction by features of the Services, such as our AI assistant summarizing a document you attached to a project chat.
Identifying your connection. We use your Google account email address to display which account is connected.

c. Limited Use Disclosure

X.Build's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We only use Google user data to provide and improve the user-facing features described above.
We do not use Google user data to develop, improve, or train generalized artificial intelligence and/or machine learning models. AI features in the Services operate on files you select solely to provide you the feature you requested at that time.
We do not transfer Google user data to third parties, except as necessary to provide or improve the features described above (such as our secure cloud hosting and AI API providers, who are contractually bound to process data strictly on our behalf and prohibited from using it to train their foundation models), to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
We do not allow humans to read Google user data, unless: (i) we have your affirmative agreement to view specific files; (ii) it is necessary for security purposes, such as investigating abuse; (iii) it is necessary to comply with applicable law; or (iv) the data has been aggregated and anonymized for internal operations.

d. Storage, Security, and Retention

Google OAuth tokens are stored encrypted and are used solely to provide the features described above. Copies of files you have added to a project are retained as part of that project until you delete them or your account, consistent with Section 14 (Data Retention). Google user data is protected by the security measures described in Section 15 (Data Security and Protection).

e. Revoking Access and Deletion

You may disconnect your Google account from the Services at any time in the Services' connector settings, which deletes our stored Google OAuth tokens. You may also revoke X.Build's access directly from your Google Account at https://myaccount.google.com/permissions. Disconnecting stops all further access to your Google Drive; files you previously chose to copy into a project remain in that project until you delete them. To request deletion of Google user data, contact us at privacy@x.build.

17. Users Located Outside the United States

The Services are intended for users located in the United States, and we do not target or direct the Services to users located outside the United States. If you nonetheless access the Services from outside the United States, you do so on your own initiative, and any information we collect will be transferred to, processed, and stored in the United States, which may have data protection laws that differ from those of your jurisdiction.

18. Contact Us

If you have any questions about this Privacy Notice or our data practices, you may contact us at:

privacy@x.build