Legal
This Privacy Policy describes how 25 Fathoms, LLC dba HardPan™ (“HardPan,” “we,” “us,” “our”) collects, uses, and shares information when you visit hardpan.io or use the HardPan application (the “Service”). It applies to information about visitors to our marketing site, prospects who contact us, and authorized users of the Service. Customer compliance data uploaded into a customer’s tenant base is governed primarily by the customer’s instructions and by our Terms of Use.
We collect information in three categories. First, account information you provide when you sign up, request a demo, or contact support: name, work email, company name, job title, phone number, and the sites or facilities you operate. Second, service usage data generated by your use of the Service: audit log entries, login records, IP address, browser type, pages viewed, features used, and timestamps. Third, customer compliance data that your organization uploads to its tenant base: permits, inspection records, monitoring results, training records, incident reports, and related documents. Compliance data may include the names and credentials of your employees, inspectors, and contractors.
We use account information to provide the Service, authenticate users, send service notifications, respond to support requests, and bill your subscription. We use service usage data to operate, secure, and improve the Service, including diagnosing errors, detecting abuse, and planning capacity. We use customer compliance data only to deliver the Service to your organization. We do not sell any of this information, and we do not use customer compliance data to train external machine-learning models.
Our marketing site uses cookies and similar technologies for basic functionality, traffic analytics, and conversion tracking on contact forms. The HardPan application uses session cookies required for authentication. We use Google Analytics, provided by Google LLC, on the marketing site to understand which pages prospects visit. Google Analytics sets cookies to collect information such as your IP address and the pages you view, and reports site trends to us. You can review Google’s practices at policies.google.com/privacy and opt out across sites with the Google Analytics Opt-out Browser Add-on. We do not use your information for targeted or behavioral advertising.
When you first visit the marketing site, a consent banner lets you accept or reject non-essential cookies, and you can change or withdraw your choice at any time using the cookie preferences control on the site. Non-essential cookies, including Google Analytics, do not load until you consent. Where your browser sends a Global Privacy Control (GPC) or similar opt-out preference signal, we treat it as a valid request to opt out, and non-essential cookies stay off without any banner interaction. Session cookies required to sign in to the Service are essential and cannot be disabled.
Separately, the HardPan application (your customer portal) uses product analytics provided through our application platform, Noloco, which relies on Segment and Amplitude to measure how authorized users interact with the Service. This is service usage data used to operate and improve the Service. It applies to signed-in users of the application, not to visitors of this marketing site.
We share information with the third-party subprocessors that operate the Service: Airtable (data layer), Noloco (customer portal), n8n Cloud (workflow automation), AWS S3 (document storage), and Mailgun (transactional email). Customers who purchase the SharePoint Sync add-on authorize HardPan to send and receive metadata through Microsoft Graph for the specified document libraries. We share information with law enforcement or other authorities only when required by law or to protect rights, property, or safety. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
You own all compliance data uploaded to your tenant base. We act as a processor of that data on your behalf and under your instructions. Our handling of that data is governed by our Terms of Use. On termination, we will export your data on request in a portable format within 30 days and delete it from active systems within 90 days; backup copies age out per the underlying subprocessor’s retention policy.
Account information is retained for the life of your subscription plus a reasonable period afterward for billing, dispute resolution, and legal compliance. Service usage data is retained for at least 24 months for security and audit purposes; Operator and Regional tiers retain audit log data indefinitely while the subscription is active. Marketing prospect data is retained for two years from last contact unless you ask us to delete it sooner.
We protect information using reasonable technical and organizational measures including encryption in transit (TLS), encryption at rest where supported by the subprocessor, role-based access controls inside the Service, and segmentation between customer tenant bases. No system is perfectly secure. If we become aware of a breach that affects your information, we will notify you without undue delay and in compliance with applicable law.
Depending on where you live, you may have rights to access, correct, delete, or port the personal information we hold about you, and to object to or restrict certain processing. California residents have rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising; see the Do Not Sell or Share My Personal Information section below. Where you send a Global Privacy Control signal, we honor it as a valid opt-out. You can opt out of marketing emails using the unsubscribe link in any message. To exercise any of these rights, contact us using the information at the end of this policy. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we honor it as a valid opt-out. If you have questions or want to confirm your preferences, email [email protected].
HardPan and our primary subprocessors are based in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on standard contractual clauses or other approved transfer mechanisms.
The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe we have collected information from a minor, contact us and we will delete it.
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date and, where the change affects an active customer, communicated by email at least 30 days in advance. Continued use of the Service after the effective date of a change constitutes acceptance.
If you have questions about this policy or your information, contact us:
25 Fathoms, LLC dba HardPan™
1250 W. Ohio Pike, #110
Amelia, OH 45102
Email: [email protected]
Phone: (513) 394-6431
Website: https://hardpan.io