BAS Control Builder is a professional BAS and HVAC controls workflow tool. Parts of the application, emails, exports, and account screens may also display the name BAS Control Builder. This Privacy Policy explains how we collect, use, share, and protect information when you visit the site, create an account, subscribe, use the hosted workspace, request support, or use related desktop or local app surfaces.
Information We Collect
Name, email address, password credentials handled through authentication systems, company name, industry, role, sign-in status, session data, account creation date, and last login date.
Subscription plan, billing interval, payment status, Stripe customer and subscription identifiers, billing email, checkout and portal events, invoices, and cancellation status. We do not intentionally store full card numbers.
Project names, job numbers, customer or project addresses, equipment data, point schedules, sensor selections, controller choices, formulas, financial defaults, uploaded takeoff files or pasted notes, generated drawings, exports, approval tasks, and project comments.
Support requests, workflow step, issue description, signed-in email, app messages, browser error details, approval email recipients, audit records for support masquerade, server logs, IP address, browser data, device data, cookies, and analytics events.
How We Use Information
- Provide, secure, maintain, and improve the application and hosted workspace.
- Create and authenticate accounts, manage sessions, process password resets, and prevent unauthorized access.
- Save and reopen cloud projects, generate estimates, schedules, wiring details, approval workflows, PDFs, Excel files, and other exports.
- Process subscriptions, confirm payment status, provide billing portal access, and maintain billing records.
- Respond to support requests, troubleshoot defects, send administrative notices, and communicate about account activity.
- Measure product usage, conversion, performance, and errors through analytics and monitoring tools.
- Comply with legal obligations, enforce our agreements, protect rights and safety, and detect abuse or fraud.
Cookies, Analytics, and Monitoring
We use cookies and similar technologies for account sessions, security, app preferences, and analytics. When configured, Google Analytics 4 or Google Tag Manager records page views, signup and login events, pricing and checkout events, project lifecycle events, exports, timing, errors, and similar product usage events. The app is designed not to send raw email addresses to Google Analytics. We may also use Sentry or similar monitoring tools to diagnose application errors, with default personally identifiable information collection disabled unless intentionally configured otherwise.
How We Share Information
We do not sell customer project content. We share information only as needed to operate the service, support customers, comply with law, or protect the product.
- Service providers: hosting and deployment providers such as Vercel, authentication and database providers such as Supabase, payment providers such as Stripe, email or SMTP providers, analytics providers such as Google, and error monitoring providers such as Sentry.
- Customer-directed recipients: people you add to approval workflows or support communications may receive project, task, requester, or approval-link information needed for that workflow.
- Legal and safety: we may disclose information if required by law, subpoena, court order, government request, or to protect rights, safety, security, and the integrity of the service.
- Business changes: information may transfer as part of a merger, acquisition, financing, restructuring, or sale of assets, subject to reasonable confidentiality obligations.
Your Choices and Privacy Rights
You may request access, correction, deletion, export, or restriction of your personal information by contacting support@climatyc.com. We may need to verify your identity before completing a request. Some information may be retained where necessary for security, billing, legal compliance, backup recovery, dispute resolution, or legitimate business records.
Depending on where you live, you may have additional rights to know the categories and specific pieces of personal information we collect, delete personal information, correct inaccurate personal information, opt out of certain sales or sharing, limit certain sensitive personal information uses, and avoid discrimination for exercising privacy rights. We do not knowingly sell personal information, and we do not use customer project content for cross-context behavioral advertising.
Retention
We keep information for as long as needed to provide the service, manage accounts and subscriptions, maintain project history, resolve support requests, meet legal and accounting obligations, protect against fraud or abuse, and maintain backups. You can request deletion of account or project information by contacting support, subject to the limitations above.
Security
We use reasonable administrative, technical, and organizational safeguards intended to protect information, including hosted authentication, row-level access controls for cloud projects, session protections, rate limiting, security headers, and restricted administrative support access. No internet or storage system is perfectly secure, so we cannot guarantee absolute security.
Children
The service is designed for professional business users and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate action.
International Use
The service is operated for U.S.-based business use. Service providers may process information in the United States or other locations where they operate. If you use the service from outside the United States, you understand that information may be transferred to and processed in the United States.
Changes to This Policy
We may update this Privacy Policy from time to time. The effective date above shows when the current version became effective. Material changes may be announced in the application, by email, or by other reasonable notice.