Privacy Policy

Infinite Built, LLC Privacy Policy for Built Insights

Effective Date: April 1, 2024

Last Updated: February 12, 2026

This Privacy Policy describes how Infinite Built, LLC (“Infinite Built,” “we,” “us,” or “our”) collects, uses, discloses, and protects information in connection with the Built Insights platform and related services (the “Service”). This Policy is intended for customers, users, and visitors who interact with the Service.

1. Scope

This Privacy Policy applies to information processed by Infinite Built in connection with the Service, including customer account information, user authentication information (via single sign-on), and customer project data uploaded to or generated within the Service. Built Insights is designed primarily to process mechanical and building systems commissioning and operational data and is not intended to process highly sensitive personal data such as health information, payment card data, or government-issued identification numbers.

2. Information We Process

We may process the following categories of information:

  • Account & Contact Information: names, business email addresses, organization name, and administrative contact details.
  • Authentication Information: identity attributes provided by Microsoft Entra ID (Azure AD) for single sign-on (SSO). Infinite Built does not store user passwords.
  • Customer Project Data: commissioning data, equipment metadata, system configuration data, test results, reports, drawings, and documentation uploaded by customers.
  • Usage & Technical Data: logs and telemetry related to Service usage, security events, and performance metrics.

3. How We Use Information

We process information to:

  • Provide, operate, and support the Service;
  • Authenticate users and manage access to the Service;
  • Maintain security, logging, monitoring, and incident response;
  • Perform maintenance, troubleshooting, and customer support;
  • Improve the Service and develop new features;
  • Comply with legal and contractual obligations.

4. Legal Bases for Processing (Where Applicable)

Where data protection laws apply (e.g., GDPR), Infinite Built processes personal data based on one or more of the following legal bases: performance of a contract, legitimate interests in operating and securing the Service, compliance with legal obligations, and consent where required.

5. Data Sharing & Subprocessors

Infinite Built does not sell customer data. We may share or enable access to information with:

  • Cloud Infrastructure Providers: The Service is hosted on Microsoft Azure, which processes data on our behalf as a subprocessor subject to contractual and security controls.
  • Authorized Integrations: Third-party integrations enabled by the customer.
  • Service Providers: Vendors who assist with operating and supporting the Service (e.g., monitoring, logging), subject to confidentiality and data protection obligations.
  • Legal & Compliance: Where required to comply with applicable law or lawful requests.

6. Data Security

We implement technical and organizational measures to protect information, including encryption in transit (TLS 1.2+), encryption at rest (including database encryption), role-based access controls, logging and monitoring, and incident response procedures. Access to customer data is limited to authorized personnel with a legitimate business need.

7. Data Retention

We retain customer data for the duration of the customer’s subscription and as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Upon termination, data is handled in accordance with contractual terms and applicable retention policies.

8. Customer Rights & Choices

Depending on applicable law, customers and users may have rights to access, correct, delete, restrict processing of, or obtain a copy of personal data. Requests may be submitted using the contact information below. Customer administrators may manage user access and data within the Service.

9. International Data Transfers

Customer data may be processed in regions where Infinite Built or its subprocessors operate. Where required by law, appropriate safeguards are implemented for cross-border data transfers.

10. Children’s Privacy

The Service is not directed to children and is not intended for use by individuals under the age of 16.

11. Updates to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by other appropriate means. The “Last Updated” date above reflects the most recent changes.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact:

Privacy Team
Infinite Built, LLC
Email: support@infinitebuilt.com