Privacy Policy

Effective date: 07/21/2026

1. Introduction

RemoteAmbition, LLC ("Company", "us", "we", or "our") operates the Exayard websites and applications at https://exayard.com (the "Service"). This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.

Our Terms of Service (https://exayard.com/terms) govern all use of our Service and, together with this Privacy Policy, constitute your agreement with us. Unless otherwise defined here, terms used in this Privacy Policy have the same meanings as in our Terms of Service.

Two roles. For personal data we collect about you directly (such as your account, billing, usage, and marketing data), we act as the data controller. For personal data contained inside Content that a business customer uploads to the Service (for example, names or contact details appearing in construction plans), we generally act as a processor or service provider on behalf of that customer, and our Data Processing Addendum applies to that processing. If you have questions about personal data in documents uploaded by a customer, that customer is usually the right first contact.

2. Information We Collect

Account and contact information

When you create an account or contact us, we collect information such as your name, email address, company name, phone number (if you provide it), and login credentials (managed through our authentication provider).

Billing information

When you purchase a Subscription or credits, our payment processor collects your payment details and billing address. We do not store full payment card numbers; see "Payments" below.

Content you upload

The core of the Service is processing the materials you submit: construction plans, drawings, specifications, product and pricing data, spreadsheets, and other files ("Content"), including materials submitted through our demo request or other intake forms before you create an account. Content may include personal data relating to you or to third parties (for example, names, professional seals, license numbers, or contact details of architects and engineers appearing in title blocks). As described in our Terms of Service, you are responsible for having the rights and permissions needed to submit that information to us.

Usage and device data

We automatically collect information about how the Service is used: IP address, browser and device type, pages visited, actions taken in the product, timestamps, diagnostic and error data, and similar analytics information.

Communications

We collect the content of your communications with us, including support conversations, emails (including replies to emails we send you), in-product chat with our AI assistants, community forum posts, survey responses, and in-product ratings and votes.

Cookies and similar technologies

See the "Cookies and Advertising" section below.

3. How We Use Information

We use the information we collect:

(a) to provide, maintain, and secure the Service, including processing your Content to generate results;

(b) to set up and manage your account, organization, and billing, and to collect payment;

(c) to provide customer support and respond to your requests;

(d) to monitor usage, diagnose problems, and detect, prevent, and address technical and security issues;

(e) to analyze and improve the Service and develop new features and products, as described below;

(f) to send service and relationship messages about your account, security, billing, and features, and, with your ability to opt out at any time, newsletters and marketing communications;

(g) to enforce our agreements and to comply with legal obligations;

(h) to identify your organization as a customer in our marketing materials, as described in the Publicity section of our Terms of Service; and

(i) for any other purpose described to you when you provide the information, or with your consent.

As part of improving and developing our products, we also review and analyze feedback and communications you send us or share through the Service, such as support conversations, in-product chat with our AI assistants, email correspondence (including replies to emails we send you), community forum posts, survey responses, and in-product ratings and votes. We use this analysis to identify bugs, feature requests, and other product needs, and to inform our product plans. This analysis may be performed by automated systems, including artificial-intelligence systems. We may associate feedback with your account so that we can follow up with you about it, including to let you know when a feature related to your feedback is planned or has been released; these follow-up communications may be drafted and sent by automated systems, and replies you send may be received, processed, and responded to by such systems. You may opt out of feedback follow-up communications at any time by following the unsubscribe instructions in the message or by emailing us at support@exayard.com.

4. How We Use Data to Train and Improve Our AI

We use Content and Usage Data, together with your interactions with the Service (such as annotations, measurements, markups, corrections, and similar in-product actions), to train, fine-tune, test, evaluate, and benchmark the machine-learning and artificial-intelligence models and systems that power, improve, and develop the Service and our other current and future products, technologies, and services. This use is also described in the Content section of our Terms of Service, and customers on eligible plans may request an arrangement under which their Content is excluded from model training.

In connection with this use of data, we may:

(a) create and retain derivative works and datasets from Content (whether or not de-identified), such as image excerpts, tiles, annotations, labels, embeddings, statistical aggregates, and model weights;

(b) allow our personnel and contractors to view and annotate Content for labeling, quality review, and related purposes; and

(c) process Content through third-party service providers and subprocessors (such as cloud computing, storage, and AI model providers) acting on our behalf. The providers that process your Content are contractually restricted from using it to train their own models, and any retention by them is limited to what is needed to provide their services to us (including limited-duration abuse and safety monitoring required by AI model providers).

We may retain and use trained models, model weights, statistical aggregates, and derivative works and datasets created from Content, and they survive termination of your account or deletion of the underlying Content. Trained models, model weights, and statistical aggregates do not identify you and are not treated as your Personal Data; where retained derivative works or datasets contain Personal Data, we handle that data in accordance with this Privacy Policy.

Content you upload may include information relating to persons or entities other than you (for example, names, professional seals, license numbers, or contact details of architects, engineers, and other professionals appearing in title blocks, stamps, or elsewhere in plans and documents). You are responsible for ensuring that you have the rights, consents, and permissions needed to provide that information to us for the uses described in this section, as set out in our Terms of Service.

We will not sell or publish your raw uploaded documents, and we will not make your raw uploaded documents available to other users except where you choose to share them through the Service.

This use also applies to plans, drawings, files, and other materials you submit through our demo request form or any other intake or contact form on our website, including before you create an account or become a customer. By submitting any such form, you agree to this use of the materials you provide.

Where the law requires a legal basis for this processing (for example, under the GDPR), we rely on our legitimate interest in operating, securing, improving, and developing the Service and our other products, balanced against your rights and freedoms.

This section does not apply to Google user data, which we do not use to train AI models or to create external databases, as described in "Use of Google User Data" below.

5. Use of Google User Data

Our application integrates with Google services. We strictly limit the use of Google user data to providing and improving the core functionality of the app. We do not use Google user data for any of the following purposes:

(a) Targeted advertising

(b) Selling to data brokers or information resellers

(c) Determining credit-worthiness or lending purposes

(d) Personalized, retargeted, or interest-based advertisements

(e) Training AI models or creating external databases

All third-party service providers are required to adhere to the same data restrictions. By using our service, you agree that your Google user data will be handled solely for the purpose of improving our app's functionality.

6. Legal Bases for Processing (GDPR/UK GDPR)

Where European or UK data protection law applies, we process personal data on these legal bases:

(a) Performance of a contract: to provide the Service, manage your account, and handle billing.

(b) Legitimate interests: to secure, operate, analyze, improve, and develop the Service and our products (including the AI training described above), to prevent fraud and abuse, and to market our services to business contacts, balanced against your rights and freedoms.

(c) Consent: where required, for example for certain cookies and marketing communications; you may withdraw consent at any time.

(d) Legal obligation: to comply with applicable law, such as tax and accounting requirements.

7. Retention of Data

We retain personal data for as long as needed for the purposes described in this Privacy Policy: account data for as long as your account is active and as needed afterward to comply with our legal obligations, resolve disputes, and enforce our agreements; Content until you delete it or your account is deleted; and usage data for shorter periods appropriate to analytics and security. When you delete a project or your account, backups containing that data are retained for up to thirty (30) days for disaster recovery and then permanently erased. Trained models, model weights, statistical aggregates, and derivative datasets may be retained as described in the AI training section above.

8. How We Share Information

We share personal information only as described below. We do not sell your personal information for money.

(a) Service providers and subprocessors: companies that provide hosting, storage, computing, AI models, authentication, payments, analytics, error tracking, support, and communications infrastructure on our behalf, under contracts that restrict their use of your data to providing services to us. Our current list of subprocessors that handle customer data is published on our Security page, and we notify customers before adding new subprocessors that handle customer data.

(b) Advertising and analytics partners: as described in "Cookies and Advertising" below, advertising cookies may involve sharing identifiers with advertising partners in ways that some laws treat as "sharing" or "targeted advertising." You can opt out as described there.

(c) Legal and safety: if required by law or valid legal process, or where we believe disclosure is necessary to protect the rights, property, or safety of the Company, our customers, or others.

(d) Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this Privacy Policy.

(e) With your consent or at your direction, including when you share Content with others through the Service.

9. International Transfers

We are based in the United States, and your information is processed and stored in the United States and in other countries where our service providers operate. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (incorporated into our Data Processing Addendum for customer data) and equivalent UK and Swiss mechanisms.

10. Security of Data

We use commercially reasonable technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and audit logging; see our Security page for details. No method of transmission over the Internet or method of electronic storage is 100% secure, so we cannot guarantee absolute security. If we become aware of a breach of security affecting your personal data, we will notify you and the relevant authorities without undue delay, in accordance with applicable law.

11. Your Rights (EEA, UK, and Similar Jurisdictions)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you have the right, in certain circumstances, to:

(a) access the personal data we hold about you and receive a copy in a portable format;

(b) have inaccurate or incomplete personal data rectified;

(c) have your personal data erased;

(d) restrict or object to our processing of your personal data, including processing based on legitimate interests;

(e) withdraw consent at any time where processing is based on consent; and

(f) lodge a complaint with your data protection authority. We would appreciate the chance to address your concerns first: contact us at support@exayard.com.

To exercise these rights, email support@exayard.com. We may ask you to verify your identity before responding. Note that we may not be able to provide the Service without certain necessary data.

12. Your U.S. State Privacy Rights

If you are a resident of California or another U.S. state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Texas, and others), you have some or all of the following rights, subject to the limits and exemptions in your state's law:

(a) to know and access the personal information we have collected about you, including the categories of sources, purposes, and third parties with whom it is shared;

(b) to correct inaccurate personal information;

(c) to delete your personal information;

(d) to receive a portable copy of your personal information;

(e) to opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information for money. Our use of advertising cookies may be considered "sharing" or targeted advertising under some laws; you can opt out via the cookie preferences on our site, via the "Your Privacy Choices" link in the site footer, or by broadcasting a Global Privacy Control (GPC) signal, which we honor as an opt-out for the browser you use it with; and

(f) not to be discriminated against for exercising your rights. We do not use or disclose sensitive personal information for purposes requiring a "limit use" right under California law.

To exercise these rights, email support@exayard.com or use the mechanisms above. We will verify your request using information associated with your account. You may use an authorized agent, who must provide proof of authorization. If we decline a request, you may appeal by replying to our decision; where your state law provides, you may also contact your state attorney general.

13. Data Deletion Requests

If you would like to request the deletion of your personal data that we hold, please contact us at support@exayard.com with a request to delete your account and personal data, or use the deletion controls in your account settings. We may ask for information to verify your identity. Once your request is verified, we will delete your data from our systems and instruct any relevant third-party service providers to do the same. Please note that certain information may be retained where required by law, and backups are purged on the schedule described in "Retention of Data" above.

14. Cookies and Advertising

We use cookies and similar technologies in these categories:

(a) Essential: required to operate the Service, such as session and security cookies. These cannot be disabled.

(b) Preferences: remember your settings and choices.

(c) Analytics: help us understand how the Service is used (we use analytics providers such as Google Analytics and PostHog).

(d) Advertising: used to measure and improve our marketing and to show you relevant ads on other sites (remarketing services from providers such as Google Ads and social media platforms).

Where required by law, we ask for your consent before setting non-essential cookies, and you can change your cookie preferences at any time via the cookie settings on our site. You can also opt out of targeted advertising as described in "Your U.S. State Privacy Rights" above, configure your browser to refuse cookies (some portions of the Service may not work without essential cookies), and use the opt-out tools offered by advertising platforms and industry bodies such as https://www.aboutads.info/choices/ and https://www.youronlinechoices.eu/.

15. Payments

We use third-party payment processors for paid products and services. We do not store or collect your payment card details; that information is provided directly to our payment processors, whose use of your personal information is governed by their privacy policies. Our payment processors adhere to the PCI-DSS standards managed by the PCI Security Standards Council. The payment processor we work with is Stripe (https://stripe.com/us/privacy).

16. Children's Privacy

Our Services are not intended for use by children under the age of 18 ("Child" or "Children"). We do not knowingly collect personally identifiable information from Children under 18. If you become aware that a Child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from Children without verification of parental consent, we take steps to remove that information from our servers.

17. Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised policy on this page and update the "effective date" above.

If we make material changes, we will provide additional notice as appropriate, such as a prominent notice within the Service or, where required by law, by email or by obtaining your consent before the change takes effect. We encourage you to review this Privacy Policy periodically. Changes are effective when posted, unless a later effective date is stated or a longer notice period is required by law.

19. Contact Us

If you have any questions about this Privacy Policy, please contact us:

By email: support@exayard.com.