Privacy Policy

FixGrid (“we,” “our,” or “us”) operates the website located at www.fixgrid.app and the application located at app.fixgrid.app. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

We collect information you provide directly to us, including:

• Name and email address when you create an account or apply for founder onboarding
• Property and unit information you enter into the platform
• Maintenance and work order data you create within the platform
• Communications you send to us via email or through the platform

We also collect basic technical information automatically, including:

• Browser type and device information
• Pages visited and features used
• IP address and general location

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the FixGrid platform
• Send account-related communications and support responses
• Notify applicants when the next founder onboarding cohort opens
• Improve the platform based on usage patterns
• Comply with legal obligations

We do not sell your personal information to third parties. We use a limited set of advertising cookies (Google Ads conversion tracking) on our marketing website to measure the effectiveness of our marketing spend — see Section 9 (Cookies and Tracking Technologies) for full disclosure and how to opt out at any time. We do not use your account data, property data, or maintenance data for advertising purposes.

3. Data Storage and Security

Your data is stored on secured servers. We take reasonable technical and organizational measures to protect your information from unauthorized access, loss, or misuse. No method of transmission or storage is 100% secure and we cannot guarantee absolute security.

4. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Customers can request an export of their account data, and request its deletion, at any time, including after cancellation, by contacting us at [email protected].

5. Early Customers

During FixGrid’s early customer period, the platform is provided as-is. While we take data protection seriously, early customers acknowledge that the platform is in active development. Please refer to your signed MOU or onboarding acknowledgment for additional terms.

6. Resident Data

Property management companies using FixGrid are responsible for obtaining appropriate consent from their residents before entering resident information into the platform. FixGrid processes resident data on behalf of the property management company as a data processor.

7. Third Party Services

FixGrid uses the following third party services to operate:

• Render for application hosting and the managed PostgreSQL database that stores application and customer data
• Stripe for payment processing
• Resend for transactional email delivery
• Cloudflare for CDN, TLS termination, WAF/DDoS protection, R2 file storage, and Cloudflare Turnstile bot protection on unauthenticated forms (including login and signup on app.fixgrid.app, and selected marketing forms on www.fixgrid.app)
• Anthropic for AI-powered features. Grid Zenith property health scores are calculated by FixGrid’s own rules, not by AI; Anthropic’s API writes the Grid Zenith and NSPIRE narratives from aggregated property and maintenance metrics, plus property details (name, city, state, unit count, asset class and any planned refinance or sale), the company name, and the text of flagged findings and data gaps. Resident names and contact details are not sent. Other optional AI features send what a user submits to Anthropic’s API: Report a Problem sends a resident’s description and photos (and uses them to prepare a brief for the technician), move-out evidence review sends move-out photos, the equipment nameplate scan sends a nameplate photo, and NSPIRE report reading sends the HUD inspection report PDF. That text, those photos and that report can contain personal information, such as names, faces or unit details.
• Address lookup services: the US Census Bureau Geocoder and OpenStreetMap Nominatim receive a property’s street address to find its map coordinates, and Zippopotam.us receives a ZIP code entered on a property’s details to fill in city, state and time zone. Only the property address or ZIP code is sent.
• Browser push services (Apple, Google, Mozilla or Microsoft, depending on the device) deliver lock-screen notifications to users who turn them on. The notification content is encrypted, so the push service cannot read it.
• Google (Google Ads) for marketing conversion tracking on the public marketing website (fixgrid.app). See Section 9 for cookie details and opt-out controls. Google Ads is not used inside the FixGrid application (app.fixgrid.app).

Each of these services maintains their own privacy policies governing their use of data.

7A. Cloudflare Turnstile (bot protection) & Privacy Addendum

To protect accounts and forms from automated abuse, FixGrid uses Cloudflare Turnstile, a bot-detection service operated by Cloudflare, Inc. On some surfaces (including login and signup), Turnstile may run in Invisible mode: verification can complete in the background with no visible challenge widget.

When Turnstile runs, Cloudflare processes limited technical signals about the visitor and the page being protected (for example client IP address, TLS fingerprint, User-Agent, and the Turnstile sitekey / origin). Cloudflare describes these signals and its processing purposes in the Cloudflare Turnstile Privacy Addendum (supplemental to Cloudflare’s main privacy policy). As a condition of enabling Invisible mode, FixGrid incorporates that Addendum by reference into this Privacy Policy.

FixGrid uses Turnstile solely to distinguish human users from bots and to protect the service. Turnstile is not used for advertising, marketing profiling, or selling personal information. For questions about Cloudflare’s processing under the Addendum, you may also contact Cloudflare’s Data Protection Officer at [email protected], or contact us at [email protected].

8. Children

FixGrid is not directed at children under the age of 13. We do not knowingly collect information from children.

9. Cookies and Tracking Technologies

Our public marketing website (fixgrid.app) uses a limited set of cookies and tracking technologies:

• Google Ads conversion tracking — we use Google Ads (gtag.js) to measure the effectiveness of our advertising and enable conversion attribution. This may set cookies (such as _gcl_au) used by Google to track ad performance.
• Consent state — we store your cookie preference in your browser’s localStorage so we do not show the consent banner repeatedly. This is not shared with any third party.
• Campaign source — if you arrive from a link carrying campaign tags (such as utm_source), we store those tags in your browser’s localStorage for up to 90 days and send them with any form you submit, so we know which campaign brought you. If you accept advertising cookies, we also store the Google Ads click ID from that link for the same purpose; declining removes it.

Fonts and libraries. Our marketing pages load fonts from Google Fonts and icons from cdnjs (Cloudflare), and some application pages load open-source chart, PDF-viewer and QR-scanner libraries from jsDelivr and cdnjs. Loading these files shares your IP address and browser details with those providers.

We do not use first-party analytics (no Google Analytics, no Plausible, no Mixpanel). We do not use cross-site behavioral profiling cookies beyond what Google Ads requires for conversion measurement.

Your choice. When you first visit fixgrid.app you will see a cookie consent banner with two options: Accept or Decline. You may change your choice at any time by clicking Cookie Preferences in the footer of any page. We use Google Consent Mode v2, which means declining prevents advertising cookies from being set while still allowing the gtag script to function in privacy-preserving mode.

Global Privacy Control (GPC). We honor the GPC browser signal as a valid opt-out. If your browser sends GPC, we automatically apply the opt-out to all advertising cookies without requiring you to interact with the banner.

Inside the application. The FixGrid web application (app.fixgrid.app) uses only essential cookies for authentication and session management. No advertising or analytics cookies are loaded inside the application itself. Cloudflare Turnstile (see Section 7A) may set or use strictly necessary security/bot-protection cookies or similar technologies on login, signup, and other protected forms; those are not advertising cookies and are described in the Turnstile Privacy Addendum and Cloudflare’s cookie documentation.

10. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know — you may request a copy of the personal information we hold about you, the categories of information collected, the sources, and the purposes of collection.
• Right to Delete — you may request that we delete your personal information, subject to legal exceptions.
• Right to Correct — you may request that we correct inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing — FixGrid does not sell personal information. We do share limited cookie data with Google for advertising conversion measurement, which may be considered “sharing” under the CPRA. You may opt out via our cookie banner or the Cookie Preferences link in any page footer.
• Right to Limit Use of Sensitive Personal Information — we do not collect or use sensitive personal information as defined under CPRA for any purpose other than what is strictly necessary to provide the service.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of these rights.

Global Privacy Control. We honor the GPC browser signal as a valid opt-out signal as required by California law. If your browser sends GPC, we automatically apply the opt-out to all advertising cookies.

How to exercise your rights. Email [email protected] with your request. We will respond within 45 days as required by California law and may extend by an additional 45 days if reasonably necessary, with notice to you. We may need to verify your identity before fulfilling a request.

Authorized agents. You may designate an authorized agent to make a request on your behalf. The agent must provide written authorization signed by you, and we may verify your identity directly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. FixGrid Quick Capture (Chrome extension)

The optional Chrome extension “FixGrid Quick Capture” is a local browser tool. It does not collect, transmit, or store user data on FixGrid servers. Selected or copied text is placed into a URL that opens in the user’s own browser, at their explicit action, so they can create a work order in their own FixGrid account. Nothing is sent to FixGrid, the developer, or any third party by the extension itself. The only value the extension persists is the user’s FixGrid address (for example app.fixgrid.app), stored locally in the browser via chrome.storage. Clipboard access is used only when the user clicks “Paste from clipboard” in the popup, and the clipboard is never read otherwise. A dedicated statement for store reviewers is at quick-capture-privacy.html.

13. Contact