Privacy Policy

Lamp Logic ("Company," "we," "us," or "our"), a company organized under the laws of the State of South Carolina, USA, operates the Steel Genie software application and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use the Service.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices described herein, please do not use the Service.

This Privacy Policy is a notice document and does not by itself constitute consent. Where we rely on consent as a legal basis for processing (for example, for marketing communications, optional data uses, or participation in product-improvement programs), we will obtain your explicit, informed consent separately through a clear affirmative action.

This Privacy Policy applies to all personal information collected through the Service, our website, and any related communications or interactions with Lamp Logic. It does not apply to third-party websites, applications, or services linked from or integrated with the Service, each of which may have their own privacy practices.

We collect the following categories of personal information (aligned with CCPA/CPRA categories):

• Identifiers: name, email address, phone number, account username, IP address, and unique device identifiers.
• Commercial Information: subscription history, billing records, transaction details, and payment information (processed by third-party payment processors; we do not store full payment card numbers).
• Professional or Employment-Related Information: company name, job title, professional role, and industry.
• Internet or Network Activity: browser type, operating system, pages visited, features used, session duration, referral URLs, and interaction logs within the Service.
• Geolocation Data: approximate location derived from IP address (we do not collect precise GPS coordinates).
• User-Uploaded Content: project files, structural drawings, blueprints, and related metadata uploaded to the Service for processing.
• Inferences: profiles or preferences derived from usage patterns to improve the Service and user experience.

We collect personal information from the following sources:

• Directly from you when you create an account, update your profile, upload project data, make purchases, or contact our support team.
• Automatically when you access or use the Service, through cookies, log files, and similar tracking technologies.
• From third-party service providers that assist us in operating the Service, such as analytics and hosting providers.

We use the personal information we collect for the following purposes:

• To provide, operate, maintain, and improve the Service.
• To process your transactions and manage your Subscription.
• To communicate with you, including sending technical notices, security alerts, support messages, and administrative updates.
• To respond to your inquiries, comments, or requests.
• To analyze usage trends and improve the quality and performance of the Service.
• To detect, prevent, and address fraud, security issues, and technical problems.
• To comply with legal obligations and enforce our Terms of Service.
• To send promotional communications (only with your consent, where required by law; you may opt out at any time).

Where applicable (including under GDPR), we process your personal information on the following legal bases:

• Performance of Contract: processing necessary to provide the Service to you under our Terms of Service.
• Legitimate Interests: processing for our legitimate business interests, such as improving the Service, fraud prevention, and security, provided such interests are not overridden by your rights.
• Consent: where you have given explicit consent, such as for marketing communications.
• Legal Obligation: processing necessary to comply with applicable laws and regulations.

We do not sell or share your personal information for cross-context behavioral advertising. We may disclose your personal information in the following circumstances:

• Service Providers: we share information with trusted third-party vendors who perform services on our behalf (e.g., hosting, analytics, payment processing, customer support), subject to confidentiality agreements.
• Professional Advisors: we may share information with attorneys, accountants, auditors, and insurers as necessary for professional advice.
• Business Transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.
• Legal and Safety: we may disclose information if required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Lamp Logic, our users, or the public.

We use cookies and similar tracking technologies to collect information about your use of the Service. These include:

• Strictly Necessary Cookies: essential for the Service to function (e.g., authentication, session management). These cannot be disabled.
• Functional Cookies: enable enhanced functionality and personalization (e.g., remembering your preferences).
• Analytics Cookies: help us understand how users interact with the Service so we can improve it (e.g., page views, feature usage).

We honor Global Privacy Control (GPC) signals. When we detect a GPC signal from your browser, we treat it as a valid opt-out of the sale or sharing of personal information. You may also manage cookies through your browser settings; however, disabling certain cookies may limit functionality of the Service.

We do not currently respond to "Do Not Track" (DNT) browser signals. Unlike the Global Privacy Control (GPC) — which is legally mandated under California (CPRA) and Colorado (CPA) privacy laws and has a defined technical specification — DNT lacks a uniform legal requirement or industry-standard technical implementation, which is why the two signals are treated differently.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account Information: retained for the duration of your account. Following termination or closure of your account, account information is deleted within thirty (30) days, except where longer retention is required by law, regulatory obligation, or necessary for pending legal claims or fraud prevention.
• User-Uploaded Content (project files, drawings, blueprints): retained for the duration of your Subscription. Following termination, User-Uploaded Content is retained for thirty (30) days to allow export, after which it is permanently deleted. You may request earlier deletion at any time by contacting steelgenie-support@allplan.com. (See Terms of Service Section 17.)
• Transaction Records: retained for at least seven (7) years to comply with tax and accounting requirements.
• Usage and Analytics Data: retained in aggregated or anonymized form for up to three (3) years for analytical purposes.

When personal information is no longer required, we will securely delete or anonymize it.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS) and at rest, access controls, regular security assessments, and employee training. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your personal information may be processed and stored in the United States and other countries where our service providers operate. If you are located outside the United States, please be aware that data protection laws in the U.S. may differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to the United States. Where required by applicable law (e.g., GDPR), we use Standard Contractual Clauses (SCCs) or other approved transfer mechanisms to ensure adequate protection of your personal information.

The Service is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA). If we become aware that we have collected personal information from a child under 13, we will take steps to promptly delete such information. If you believe a child under 13 has provided personal information to us, please contact us at steelgenie-support@allplan.com.

Steel Genie uses automated processing and artificial intelligence to analyze structural drawings, extract section information, generate 3D models, and produce data outputs. These automated processes operate on User-Uploaded Content and do not involve profiling for purposes such as creditworthiness, employment eligibility, or similar consequential decisions.

All automated outputs are intended as supportive tools and must be reviewed by a qualified human professional before being relied upon for engineering or structural decisions. You have the right to request information about the logic involved in automated processing and to request human review of outputs where applicable under your jurisdiction's laws.

WE DO NOT USE USER-UPLOADED CONTENT (INCLUDING PROJECT FILES, STRUCTURAL DRAWINGS, AND BLUEPRINTS) TO TRAIN, DEVELOP, OR IMPROVE GENERAL-PURPOSE MACHINE LEARNING OR ARTIFICIAL INTELLIGENCE MODELS WITHOUT YOUR EXPLICIT, SEPARATE OPT-IN CONSENT.

If we offer an optional program that uses your project data (in anonymized or aggregated form where feasible) to improve Steel Genie's automated features, participation will require your separate, explicit opt-in consent collected at the point of project upload or through a clearly labeled in-product control. You will be informed of the scope, purpose, data handling practices, and opt-out mechanism before any such use. Users who do not opt in will not have their User-Uploaded Content used for any model training, fine-tuning, or product-improvement purposes. You may withdraw your consent at any time, and we will cease using your data for such purposes going forward.

Depending on your jurisdiction, you may have certain rights regarding your personal information, including the right to: access and obtain a copy of your personal information; correct or update inaccurate information; request deletion of your personal information; restrict or object to certain processing; request data portability; and withdraw consent (where processing is based on consent).

To exercise any of these rights, please contact us at steelgenie-support@allplan.com. We will respond to your request within the timeframes required by applicable law. We will not discriminate against you for exercising your privacy rights.

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with additional rights regarding your personal information.

Categories of Personal Information Collected: In the preceding twelve (12) months, we have collected the categories of personal information described in Section 3 of this Privacy Policy. Sources, purposes, and categories of third parties with whom information is shared are described in Sections 4, 5, and 7, respectively.

Sensitive Personal Information (SPI): Of the categories of Sensitive Personal Information defined under CPRA (Cal. Civ. Code § 1798.140(ae)), we collect only account login credentials (username and password). We do not collect precise geolocation, racial or ethnic origin, religious or philosophical beliefs, union membership, contents of mail, email or text messages, genetic data, biometric identifiers, personal health information, or information concerning sex life or sexual orientation. We use and disclose the SPI we do collect only for the purposes expressly permitted under Cal. Civ. Code § 1798.121(a) (such as providing the Service, ensuring security and integrity, and preventing fraud) and not for inferring characteristics about you. You may exercise your right to limit use and disclosure of SPI as described below.

Your California Privacy Rights:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Portability: You have the right to receive your personal information in a portable, readily usable format.
• Right to Opt-Out of Sale or Sharing: We do not sell your personal information or share it for cross-context behavioral advertising. Therefore, there is no need to opt out. If our practices change, we will provide a "Do Not Sell or Share My Personal Information" link.
• Right to Limit Use of SPI: You have the right to limit the use and disclosure of your sensitive personal information to purposes necessary to provide the Service.

Verifiable Consumer Requests: To exercise your rights, submit a verifiable consumer request to steelgenie-support@allplan.com. You may also designate an authorized agent to submit requests on your behalf; agents must provide written authorization and identity verification. We will verify your identity before processing requests.

Shine the Light (Cal. Civ. Code § 1798.83): California residents may request information regarding the disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes.

Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you the Service, charge you different prices, provide a different level of service, or suggest that you will receive any of these treatments for exercising your rights.

If you are a resident of another U.S. state with comprehensive privacy legislation, you may have additional rights. The following summary applies to residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Delaware (DPDPA), Iowa (ICDPA), Tennessee (TIPA), and Indiana (INCDPA), among others:

• Right to Access: confirm whether we process your personal data and access such data.
• Right to Correct: correct inaccuracies in your personal data.
• Right to Delete: request deletion of your personal data.
• Right to Data Portability: obtain a copy of your personal data in a portable format.
• Right to Opt-Out: opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to Appeal: if we decline a privacy request, you have the right to appeal. Appeals can be submitted to steelgenie-support@allplan.com, and we will respond within the timeframe required by applicable state law.

To exercise these rights, please contact us at steelgenie-support@allplan.com. We will verify your identity and respond within the timeframe mandated by your state's applicable law.

If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, your personal data is protected under the General Data Protection Regulation (GDPR) and/or UK GDPR. In addition to the rights described above, you have the right to lodge a complaint with your local data protection authority. Our legal bases for processing are described in Section 6. For international transfers, we rely on Standard Contractual Clauses (SCCs) as described in Section 11.

In the event of a data breach involving your personal information, we will notify affected users and applicable regulatory authorities in accordance with the timeframes and requirements of all applicable federal and state data breach notification laws, including the South Carolina Insurance Data Security Act and other applicable state statutes. Notification will include a description of the incident, the types of information involved, steps we are taking in response, and recommended actions for affected individuals.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Effective Date" at the top of this Privacy Policy and, where feasible, provide additional notice (such as email notification or an in-app announcement). We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or need to submit a data-related request, please contact us:

We will respond to all legitimate requests within the timeframe required by applicable law (typically within 30 to 45 days, depending on the nature and complexity of the request).