Privacy Policy
Last updated: September 8, 2026
This Privacy Policy explains how Infacto Digital ("we," "us") collects, uses, and shares information when you use Mold Assessor AI (the "Service").
1. Who we are
Mold Assessor AI is a product of Infacto Digital. For privacy questions, email contact@infactodigital.com.
2. Information we collect
Account information. Name, email address, password (hashed), business profile details you provide during onboarding (business name, logo, website, credentials), and authentication data such as two-factor settings.
Billing information. Subscription status and Stripe customer identifiers. Payment card details are processed by Stripe; we do not store full card numbers.
Inspection and report content. Client names, property addresses, photographs, laboratory PDFs, notes, and generated report text that you upload or create.
Usage data. Log data such as IP address, browser type, pages viewed, and approximate timestamps. If you consent to analytics cookies, we also collect product-analytics events as described below.
Communications. Emails you send us and messages submitted through quizzes or forms we operate.
3. How we use information
We use information to:
- Provide, maintain, and improve the Service, including generating AI draft reports
- Authenticate users, secure accounts, and prevent abuse
- Process subscriptions and send billing-related messages
- Communicate about the Service, security, and material changes to policies
- Comply with law and enforce our Terms of Service
We do not sell personal information. We do not use Customer Content to train public foundation models for unrelated products.
4. AI processors
To generate drafts, we send relevant Customer Content to subprocessors that provide large-language-model APIs (for example, OpenAI or Anthropic, depending on configuration). Those providers process data under their terms and our instructions to return generated text. Do not upload information you are not authorized to process.
5. Cookies and analytics
We use essential cookies to keep you logged in and to remember security settings.
If you accept analytics cookies, we may load:
- Microsoft Clarity — session replay and usage analytics
- Contentsquare — experience analytics
You can accept or decline analytics in the cookie banner, change your mind via "Disable Analytics" / "Enable Analytics" in the footer, or review the Cookie Policy. Analytics cookies are not loaded until you accept, except where a prior consent cookie already exists.
6. How we share information
We share information with:
- Service providers that host the application, send email, process payments (Stripe), and run AI inference, under contracts that limit their use of the data
- Your invitees, if you share a report URL or add team members
- Authorities when required by law or to protect rights, safety, or the Service
We may transfer the Service and associated data as part of a merger, acquisition, or asset sale.
7. Retention
We keep account and report data while your account is active and for a reasonable period afterward so you can export or we can resolve disputes, unless a shorter period is required. You may request deletion of your account. Backup copies may persist for a limited time.
8. Security
We use administrative, technical, and physical safeguards appropriate to the nature of the data, including encrypted connections and hashed passwords. No method of transmission or storage is completely secure.
9. Your choices
You may update profile information, enable two-factor authentication, cancel a subscription, delete your account, or decline analytics cookies. Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Email contact@infactodigital.com to make a request. We may need to verify your identity.
Residents of certain U.S. states may opt out of "sale" or "sharing" of personal information for cross-context advertising. We do not sell personal information. Analytics tools listed above run only with consent.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal information from children.
11. International users
The Service is operated from the United States. If you use it from another country, you consent to transfer of your information to the United States, which may have different data-protection rules.
12. Changes
We may update this policy and will revise the date above. Material changes will be communicated by email or an in-product notice when appropriate.