Privacy Policy

This Privacy Policy describes how Expanse Inc. ("Expanse," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our products, services, and website at expanseml.com (collectively, the "Service"). By using the Service, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly when you create an account, subscribe to the Service, or communicate with us. This includes: name, email address, job title, company name, phone number, billing information, and any other information you choose to provide. For enterprise customers, we also collect information about authorized users designated by your organization.

1.2 Customer Data

You may upload or transmit operational data to the Service in the course of using our platform ("Customer Data"). This may include equipment sensor data, production records, maintenance logs, supply chain documentation, workforce information, compliance records, and other industrial operational data. Customer Data is owned by you and processed by Expanse solely to provide the Service.

1.3 Automatically Collected Information

When you access the Service, we automatically collect certain technical information, including: IP address, browser type and version, operating system, device identifiers, pages visited, features used, timestamps, referring URLs, and interaction patterns within the Service. We use cookies and similar technologies to collect this information.

2. How We Use Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information
• Respond to your requests, comments, and questions
• Send technical notices, updates, security alerts, and administrative messages
• Monitor and analyze usage trends to improve the Service
• Detect, investigate, and prevent fraudulent or unauthorized activity
• Comply with legal obligations and enforce our Terms of Service
• Develop new products, features, and functionality

We do not sell Customer Data or personal information to third parties. We do not use Customer Data for advertising purposes. Operational data is used solely to deliver platform functionality as described in your agreement with us.

3. How We Share Information

We may share information in the following circumstances:

• Service providers: With vendors and service providers who perform services on our behalf (e.g., cloud hosting, payment processing, analytics), subject to confidentiality obligations.
• Business transfers: In connection with a merger, acquisition, financing, or sale of all or a portion of our assets, where your information may be transferred as a business asset.
• Legal requirements: If required by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect the rights, property, or safety of Expanse, our users, or the public.
• With your consent: When you direct us to share information with third-party integrations (e.g., SAP, Maximo, Procore) configured in your deployment.

4. Data Security

We implement and maintain administrative, technical, and physical safeguards designed to protect your information, including: encryption of data in transit (TLS 1.2+) and at rest (AES-256), role-based access controls with least-privilege enforcement, regular security audits and penetration testing, SOC 2 Type II compliance program, incident response procedures with defined notification timelines, and employee security awareness training. For on-premise and air-gap deployments, Customer Data remains entirely within your network perimeter and is never transmitted to Expanse systems.

5. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Customer Data retention periods are configurable per deployment and governed by your subscription agreement. Upon account termination, you may request export of your Customer Data within thirty (30) days. After the export period, Customer Data is deleted within ninety (90) days unless retention is required by applicable law or regulation. Usage logs and analytics data are retained for up to twenty-four (24) months for service improvement purposes and are then anonymized or deleted.

6. International Data Transfers

Expanse is based in the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate. We rely on Standard Contractual Clauses, adequacy decisions, or other lawful transfer mechanisms to ensure appropriate safeguards for international transfers. Enterprise customers may negotiate data residency requirements as part of their subscription agreement.

7. Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to operate and improve the Service. Essential cookies are required for the Service to function and cannot be disabled. Analytics cookies help us understand how the Service is used. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

8. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data
• Request portability of your personal data in a structured format
• Object to or restrict certain processing activities
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at privacy@expanseml.com. We will respond to verified requests within thirty (30) days. We will not discriminate against you for exercising your privacy rights.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information we collect, the right to delete personal information, the right to opt out of the sale or sharing of personal information (we do not sell personal information), and the right to non-discrimination. To submit a request, contact privacy@expanseml.com.

10. European Data Protection (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data on the following legal bases: performance of our contract with you, our legitimate interests in operating and improving the Service, compliance with legal obligations, and your consent where applicable. You have the rights described in Section 8, and you may contact our data protection team at privacy@expanseml.com.

11. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

12. Third-Party Links and Integrations

The Service may contain links to third-party websites or integrate with third-party systems at your direction. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you connect to the platform.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be communicated at least thirty (30) days in advance via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

Expanse Inc.
Email: privacy@expanseml.com