Privacy Policy

Introduction

Pronestia LLC (“Pronestia,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you provide when using our website, applications, and services (collectively, the “Services”).

This Privacy Policy explains:

• What information we collect;
• How we use it;
• How we share it;
• Your rights regarding your information; and
• How we protect your data.

This Privacy Policy applies to:

• https://pronestia.com
• Pronestia web applications
• Mobile applications
• Customer support interactions
• Any related services we provide

1. Information We Collect

We collect information in several ways depending on how you interact with our Services.

A. Information You Provide Directly

You may provide us with information including:

• Name
• Email address
• Phone number
• Company name
• Billing information
• Project information
• Documents and files
• Images and uploaded media
• Electronic signatures
• Communications with support
• User-generated content

B. Information Collected Automatically

When you use our Services, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Operating system
• Usage activity
• Login timestamps
• Error logs
• Analytics data
• Cookie identifiers
• Session information

C. Information Uploaded by Customers

Because Pronestia is a construction project management platform, customers and tenant organizations may upload or store personal information within the Services, including:

• Employee information
• Client information
• Contact details
• Project records
• Contracts and construction documents
• Images, drawings, and plans
• Communications and signatures

Customers are responsible for ensuring they have lawful rights to upload and process such information.

2. How We Use Information

We use collected information to:

• Provide and operate the Services
• Authenticate users
• Process subscriptions and payments
• Manage customer accounts
• Improve platform functionality
• Provide customer support
• Deliver AI-powered features
• Analyze usage trends and performance
• Detect fraud, abuse, or security incidents
• Enforce our Terms of Service
• Comply with legal obligations
• Send administrative and marketing communications

We may aggregate or anonymize information for analytics, research, and product improvement purposes.

3. AI Features and Processing

Pronestia may use artificial intelligence or machine learning technologies to provide certain features, including document analysis, design assistance, workflow automation, summarization, and content generation.

By using these features, you acknowledge that:

• AI-generated outputs may be inaccurate or incomplete;
• Human review is required before relying on AI-generated content;
• Uploaded content may be processed by AI systems or subprocessors solely to provide requested functionality;
• Pronestia does not use customer-specific confidential data to publicly train generalized AI models unless explicitly disclosed or authorized.

4. Legal Bases for Processing

Depending on your location, we process personal information based on one or more of the following legal grounds:

• Performance of a contract
• Legitimate business interests
• Compliance with legal obligations
• Consent
• Protection of legal rights and security

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain user sessions;
• Remember preferences;
• Analyze website traffic;
• Improve functionality and performance;
• Support authentication and security.

You may control cookies through your browser settings. Disabling cookies may affect functionality.

You can also manage marketing and retargeting cookies through the Your Privacy Choices link in our footer. We honor the Global Privacy Control browser signal as a binding opt-out for marketing and retargeting cookies.

6. Payment Processing

Payments are processed by third-party payment providers including Stripe.

Pronestia does not store full payment card information on our servers. Payment information is processed according to the payment provider’s own privacy and security policies.

7. How We Share Information

We may share information with:

• Hosting and infrastructure providers
• Cloud storage providers
• Payment processors
• Analytics providers
• AI and automation service providers
• Customer support tools
• Professional advisors
• Legal and regulatory authorities
• Contractors and subprocessors assisting with operations

We may also disclose information:

• To comply with law;
• To protect rights, safety, or security;
• During mergers, acquisitions, or asset transfers.

Sharing for Targeted Advertising

When marketing or retargeting cookies are enabled, Pronestia shares limited browsing and device information (such as cookie identifiers, IP address, and pages viewed) with advertising platforms including Google, LinkedIn, and Meta so they can show Pronestia ads to you on other websites. Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), this is considered “sharing” of personal information for cross-context behavioral advertising even though no money is exchanged.

You can opt out of this sharing at any time through the Your Privacy Choices link in our footer. If your browser sends a Global Privacy Control signal, we honor that signal as a binding opt-out and marketing cookies remain off regardless of any prior setting.

We do not sell personal information for monetary compensation in the traditional sense of a data sale.

8. Data Retention

We retain personal information only for as long as necessary to:

• Provide the Services;
• Fulfill contractual obligations;
• Resolve disputes;
• Enforce agreements;
• Comply with legal and regulatory requirements.

We may retain backup copies or archived records for reasonable business and legal purposes.

9. Security Measures

We implement commercially reasonable technical, administrative, and organizational safeguards designed to protect information from:

• Unauthorized access;
• Disclosure;
• Alteration;
• Misuse;
• Loss or destruction.

However, no system or transmission method can be guaranteed to be 100% secure.

Users are responsible for:

• Maintaining strong passwords;
• Securing account credentials;
• Managing access permissions within their organizations.

10. Your Privacy Rights

Depending on your jurisdiction, you may have rights including:

• Access to your information
• Correction of inaccurate information
• Deletion of personal information
• Data portability
• Restriction of processing
• Objection to processing
• Withdrawal of consent
• Opt-out of marketing communications
• Opt-out of the sale or sharing of personal information for cross-context behavioral advertising (see §7 and the Your Privacy Choices link in our footer)

To exercise applicable rights, contact us using the contact information below.

We may require identity verification before processing requests.

11. California Privacy Rights

If you are a California resident, the rights below may apply to you under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, “CCPA”). Whether Pronestia is a “business” subject to the full operational CCPA disclosure regime depends on size thresholds under Cal. Civ. Code § 1798.140(d) that may not apply to us at our current stage. We voluntarily honor the requests described below for California residents regardless, and will expand this section if our scale changes.

Your CCPA Rights

You may request that we:

• Confirm whether we process personal information about you and provide access to it;
• Delete personal information we have collected from you, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information, including sharing for cross-context behavioral advertising;
• Limit our use of sensitive personal information;
• Not be discriminated against for exercising any of the rights above.

Categories of Information, Sources, Purposes, and Recipients

See Section 1 above for the categories of personal information we collect and the sources we collect it from. See Section 2 for the business and commercial purposes for which we use that information. See Section 7 for the categories of third parties with whom we share information, including the advertising-platform recipients used for cross-context behavioral advertising when marketing cookies are enabled.

How to Submit a Request

Send privacy-rights requests to privacy@pronestia.com. Include enough information for us to identify the account or activity associated with your request (typically the email address you used when interacting with us) and the specific right you wish to exercise.

Verification

We will verify your identity before acting on a request by matching information you provide against information we already hold (such as your account email and recent activity). For sensitive requests we may ask for additional verification. We may decline to act on requests we cannot reasonably verify.

Authorized Agents

You may designate an authorized agent to make a request on your behalf. Send the agent’s contact details together with signed written authorization (or a copy of a power of attorney) to privacy@pronestia.com. We may also contact you directly to confirm the agent’s authority.

Opt-Out Preference Signals (Global Privacy Control)

Pronestia honors the Global Privacy Control browser signal as a binding opt-out request for the sale or sharing of personal information for cross-context behavioral advertising, consistent with California Attorney General guidance. When GPC is present, marketing and retargeting cookies stay off regardless of any other setting. You can also opt out at any time through the Your Privacy Choices link in our footer.

What We Do Not Do

Pronestia does not sell personal information for monetary compensation. When marketing or retargeting cookies are enabled, we share limited cookie identifiers and browsing data with advertising platforms (Google Ads, LinkedIn Insight Tag, Meta Pixel) and with Microsoft Clarity for analytics and retargeting; the CCPA treats this as “sharing.” You can opt out of all such sharing as described above.

12. Geographic Scope

Pronestia targets users in the United States and does not direct the Services to residents of the European Economic Area (EEA), the United Kingdom, Switzerland, or other jurisdictions outside the United States.

If you are located outside the United States, please do not use the Services. By accessing the Services from outside the United States, you acknowledge that your information will be transferred to and processed in the United States, which may have different data protection rules than your jurisdiction.

13. Children’s Privacy

Our Services are intended for business and professional use and are not directed to children under 13 years of age.

We do not knowingly collect personal information from children under 13.

If we become aware that such information has been collected, we will take reasonable steps to delete it.

14. Third-Party Services and Links

The Services may contain integrations or links to third-party services, websites, or applications.

We are not responsible for the privacy practices or content of third-party services. Your use of those services is governed by their own terms and policies.

15. Tenant and Customer Responsibilities

Where customers upload or manage personal information of third parties through the Services, customers are responsible for:

• Obtaining required permissions and consents;
• Providing legally required notices;
• Complying with applicable privacy laws;
• Managing user access permissions appropriately.

In many cases, Pronestia acts as a service provider or processor on behalf of its customers.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes in our Services;
• Legal or regulatory developments;
• Operational practices.

Updated versions become effective upon posting to our website.

Continued use of the Services after changes are posted constitutes acceptance of the revised policy.

17. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact:

Pronestia LLC

Website: https://pronestia.com

Privacy inquiries (including access, deletion, and other privacy-rights requests): privacy@pronestia.com

You may also contact us through the support or contact methods provided on our website.