Zonefold Privacy Policy
Last updated: October 13, 2026
This policy explains how Nuromind Inc., a Texas corporation ("Zonefold", "we") handles personal information in the Zonefold service (the "Service") and on zonefold.com. For data we process on behalf of customer organizations, the customer is the controller and we act as its processor/service provider.
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, work email, organization, role, sign-in identifiers, MFA status (not your MFA secret) | You, your organization's admin, our identity provider |
| Building and equipment data | Thermostat readings, setpoints, runtime, equipment names, site and room names, schedules | The customer's connected equipment accounts (currently Pelican) |
| Equipment-account credentials | Username and password of the account created for Zonefold | The customer's administrator. Stored encrypted; used only to read data |
| Usage and security | Sign-in events, actions taken, audit log entries, IP address, browser type | The Service |
| Communications | Support emails, invitation emails sent and delivered | You and the Service |
| Website | Basic server logs. No advertising trackers or third-party analytics cookies on zonefold.com | zonefold.com |
2. How we use it
- Provide the Service: dashboards, incident detection, energy estimates, invitations, access control.
- Keep the Service secure: authentication, MFA, audit logging, abuse prevention, rate limiting.
- Communicate with you: invitations, account notices, and support.
- Improve the Service, using aggregated and de-identified data where possible.
- Comply with law.
We do not sell personal information and do not use it for targeted advertising.
3. AI features
When you use the copilot, your question and relevant data that your role is allowed to see are sent to an AI model provider through Vercel AI Gateway to generate an answer. We use providers and settings that do not use your data to train their models. The copilot only drafts suggestions and cannot change equipment.
4. Sub-processors
| Provider | Purpose |
|---|---|
| Vercel Inc. | Hosting, serverless compute, AI Gateway |
| Neon (via Vercel Marketplace) | Database |
| Okta/Auth0 | Sign-in and multi-factor authentication |
| Resend | Sending transactional email |
| Anthropic (via Vercel AI Gateway) | Copilot answers |
| Apple (iCloud+ Mail) | Our support mailbox |
5. Retention
- Detailed equipment readings: kept for the customer's plan window, 7 days by default and longer on paid plans.
- Summaries, incidents and audit logs: kept longer to provide history and security. Hourly summaries are kept up to about 13 months and daily summaries up to about 3 years, unless your plan or a deletion request says otherwise.
- Account data: kept while the account is active, then deleted or de-identified within 90 days of closure, unless the law requires otherwise.
- Equipment credentials: deleted when a site is disconnected or the organization is closed.
6. Security
Our safeguards include: - encrypted transport (TLS); - encryption of stored equipment credentials with keys held only by an isolated service; - per-organization isolation enforced by database row-level security; - least-privilege database roles; - multi-factor authentication for sensitive actions; - tamper-evident audit logs.
No system is perfectly secure. We will notify affected customers of a breach as required by law and contract.
7. Your choices and rights
- Your own information: you can update your profile and ask your organization's admin to change or remove your access.
- Access, correction, deletion and export: depending on where you live, you may have these rights. Contact support@zonefold.com. If we process your data for an organization, we may direct your request to that organization.
- Response: we respond within the time required by applicable law.
8. International transfers
Data is processed in the United States, primarily in AWS us-east-1 (Virginia) through our hosting and database providers. Where required, we use appropriate safeguards.
9. Children
The Service is for businesses and is not directed to children under 16.
10. Changes
We will post updates here and notify customers of material changes.
Contact: support@zonefold.com · Nuromind Inc., 5900 Balcones Drive #8495, Austin, TX 78731