Privacy Policy

Effective November 3, 2026 · Last updated November 3, 2026

FieldSync helps tower, telecom and infrastructure teams capture, organize and report on field inspections. This policy explains what personal information we collect, how we use and share it, and the choices and rights you have.

This policy applies to the FieldSync website at fieldsync.io, the FieldSync web platform, the FieldSync Uploader desktop app, the FieldSync Mobile apps for iOS and Android, and related services and support (together, the “Services”). FieldSync Technologies, Inc., a Delaware corporation (“FieldSync”, “we”, “us” or “our”), provides the Services.

1. Our role

FieldSync is a business service. How this policy applies depends on our relationship with the information:

• Customer Content. Organizations that subscribe to FieldSync (our “Customers”) and their authorized users upload inspection data, photos, drone imagery, documents and other content to the Services. For this content we act as a service provider (a “processor” under laws such as the GDPR) on the Customer’s behalf. The Customer decides what is collected and how it is used, and our agreement with the Customer governs our processing. If you have questions about Customer Content that includes your information, contact the Customer that uses FieldSync. We will help them respond.
• Everything else. We act as the business (or “controller”) for information about visitors to our website, prospective customers, account administrators, and information we use to run, secure and improve the Services.

2. Information we collect

Information you provide

• Account and profile information: name, work email address, phone number, job title, organization, role and permissions, and password or sign-in credentials. If your organization enables a third-party sign-in provider, we receive the profile information that provider shares.
• Customer Content: inspection surveys, site and structure details, notes, measurements, checklists, photos, videos, drone imagery, 3D models and digital twins, documents, reports and close-out packages, and any other content you or your organization add to the Services. This content can include personal information. For example, it can include the names of people who performed an inspection, or people who appear in photos or imagery captured on site.
• Location information: the locations of sites and assets, and location data embedded in photos and drone imagery (for example GPS coordinates in image metadata).
• Communications: messages you send through our website’s contact form or to our support team, including your name, email address, phone number and what you tell us. We also record your communication preferences.
• Billing information: billing contacts and the details needed to invoice your organization.

Information collected automatically

• Device and log information: IP address, browser and operating system, device type, app version, pages and features used, timestamps, referring pages, and error and diagnostic logs.
• Upload and processing information: file names, sizes, formats and processing status, which keep large uploads reliable and resumable.
• Cookies and similar technologies: see Cookies and similar technologies.

Information from other sources

• Your organization, for example when an administrator invites you or assigns you to projects.
• Integrations you or your organization connect, such as Esri ArcGIS (including Survey123) or Google Drive, from which we import the content you choose.
• Business information providers, such as Apollo.io, which help us understand which companies visit our website and provide business contact details for sales outreach.

3. How we use information

We use personal information to:

• Provide the Services: create and manage accounts, store and process Customer Content, generate reports and deliverables, sync data between devices, and provide customer support.
• Keep the Services secure and reliable: authenticate users, prevent fraud, spam and abuse (including with reCAPTCHA on forms), monitor performance, and back up and recover data.
• Improve the Services: understand how features are used, fix problems and develop new features. Where we use information for this purpose, we use aggregated or de-identified information where practical.
• Communicate with you: send service messages such as account notices, upload and report notifications and security alerts, and, where permitted, information about FieldSync. You can opt out of marketing email at any time.
• Market to businesses: respond to inquiries and reach out to organizations that may be interested in FieldSync.
• Meet legal obligations: comply with law, enforce our terms, and protect the rights, property and safety of FieldSync, our Customers and others.

Legal bases (EEA, UK and Switzerland)

4. Image analysis and AI features

Some features use machine learning to analyze Customer Content. For example, they classify structure imagery, detect equipment in photos, or help find information in documents. These features run on infrastructure operated for us by service providers, including Amazon Web Services (Amazon Bedrock) and Roboflow, under contracts that limit their use of the content to providing these features to us. Results support human review. We don’t use them to make decisions that have legal or similarly significant effects on individuals.

5. How we share information

We do not sell personal information for money, and we do not use Customer Content for advertising. We share personal information only as described here:

• Within your organization: Customer Content and user profiles are visible to authorized users in the Customer’s account, according to the permissions the Customer sets.
• Service providers that process information on our behalf, under contracts that require them to protect it and use it only to provide services to us. They include:
  • Amazon Web Services: hosting, storage, processing, backups, notifications and AI infrastructure
  • SendGrid and Mailgun: email delivery
  • Google: Google Maps Platform for maps and locations, and reCAPTCHA for spam and abuse protection
  • Cesium: 3D map and digital twin visualization
  • Roboflow: image analysis
  • Apollo.io: business contact information and website visitor insights
• Integrations you choose: when you or your organization connect a third-party service, such as Esri ArcGIS or Google Drive, we exchange information with it as you direct. That service’s own privacy policy governs its handling of the information.
• Legal and safety reasons: when we believe in good faith that disclosure is required by law or legal process, or is needed to protect the rights, property or safety of FieldSync, our Customers, users or others.
• Business transfers: in connection with a merger, acquisition, financing or sale of assets, subject to this policy’s protections.
• With your consent, or at your direction.

We may also share aggregated or de-identified information that cannot reasonably identify you.

6. Cookies and similar technologies

Our website and web platform use cookies and similar technologies such as local storage, pixels and scripts.

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies will stop parts of the Services from working. Where the law requires consent for non-essential cookies, we ask for it first. We honor Global Privacy Control signals as an opt-out of “sale” and “sharing” where applicable law requires. Our website does not otherwise respond to Do Not Track signals.

7. Mobile and desktop apps

• On-device storage: FieldSync Mobile stores surveys and related content on your device so you can work without a connection. That information stays on your device until it is synced to your organization’s account, deleted in the app, or removed when you uninstall the app.
• Permissions: the apps ask for access to features such as the camera, photos or location only when a feature needs it, and you can change these permissions at any time in your device settings.
• Diagnostics: the apps and the FieldSync Uploader may collect crash and diagnostic information, such as app version, device model and error details, to keep them working.
• Account deletion: you can ask us to delete your account at any time, as described in Your rights and choices. If your account belongs to an organization, we may need to confirm the request with its administrator.

8. How long we keep information

We keep personal information for as long as we need it for the purposes in this policy:

• Customer Content: for the duration of the Customer’s subscription and as its agreement with us provides. After that, we delete or return it within a reasonable period, except where the law requires us to keep it.
• Account information: while the account is active, and for a limited period afterwards to resolve disputes and meet legal obligations.
• Logs and diagnostics: for a limited period for security and troubleshooting, after which they are deleted or de-identified.
• Backups: deleted information can remain in encrypted backups until they are overwritten on their normal schedule.
• Marketing contacts: until you opt out or the information is no longer useful.

9. Security

We protect personal information with administrative, technical and physical safeguards appropriate to its sensitivity. These include encryption in transit and at rest, access controls based on least privilege, short-lived credentials for our infrastructure, network isolation, monitoring, and regular backups with a tested recovery process. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you and the authorities as the law requires.

10. International transfers

FieldSync is based in Colorado, in the United States, and the Services are hosted in the United States. If you use the Services from outside the United States, your information will be transferred to, stored and processed in the United States and other countries where our service providers operate, whose laws may differ from those where you live. When we transfer personal information from the EEA, the UK or Switzerland, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK Addendum.

11. Your rights and choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and receive a copy in a portable format
• Correct inaccurate information
• Delete your information
• Object to or restrict certain processing, including direct marketing
• Opt out of the “sale” or “sharing” of personal information, or of targeted advertising, as those terms are defined by law
• Withdraw consent where we rely on it, without affecting processing that already took place
• Appeal a decision we make about your request
• Complain to your local data protection authority

To make a request, email privacy@fieldsync.io. We will verify your request before acting on it, usually by confirming control of the email address on the account, and respond within the time the law requires. You may use an authorized agent, but we may ask for proof that they are acting for you. We will not discriminate against you for exercising your rights.

Marketing email: use the unsubscribe link in any marketing email, or contact us. You will still receive service messages about your account.

12. Regional disclosures

California and other U.S. states

This section supplements this policy for residents of California and other U.S. states with comprehensive privacy laws. In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described above:

We do not sell personal information for money. Our use of website analytics and business-insight tools such as Apollo.io may be considered a “sale” or “sharing” under some state laws. You can opt out by emailing privacy@fieldsync.io or by enabling Global Privacy Control in your browser. We do not knowingly sell or share the personal information of anyone under 16. We do not use sensitive personal information to infer characteristics about you, and we do not use or disclose it for purposes that would give you a right to limit it.

European Economic Area, United Kingdom and Switzerland

For information we control, FieldSync Technologies, Inc. is the controller. Our legal bases are listed in How we use information. You may lodge a complaint with your local data protection authority, but we would appreciate the chance to address your concern first.

Canada

We handle personal information in accordance with applicable Canadian privacy law. You may request access to or correction of your information, and you may withdraw consent, subject to legal and contractual limits, by contacting us.

13. Children

The Services are for business use and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above. When the changes are material, we will tell you in advance, for example by email or a notice in the Services.

15. Contact us