# Echospectra — Terms of Service & Privacy Policy

**Last updated:** May 27, 2026

> This combined Terms & Privacy is written in plain language. It explains what you can expect from Echospectra and what we expect from you. If anything here conflicts with a signed order form or master agreement, the signed document controls.

---

## 1) Who owns the data

* **You own your case data** ("Customer Content"): photos, videos, maps, notes, logs, indicators, GPS/patrol tracks, map coordinates, and other location-tagged field data, and exports you create or upload in Echospectra.
* We do **not** sell Customer Content or use it for advertising.

## 2) Our limited license to operate and improve the service

You grant Echospectra a **limited license** to host, process, back up, transmit, and secure Customer Content so the service works for you. You also allow us to use **de‑identified and aggregated** information derived from Customer Content to improve Echospectra, including:

* training and testing **internal** models that detect indicators (e.g., spalling) from images and field data;
* validating and improving **progression and dynamic fire‑behavior simulations**; and
* enhancing reliability, accuracy, and safety of our features.

**What “de‑identified and aggregated” means:** we remove or transform direct identifiers (e.g., names, case IDs, emails, exact addresses) and combine data across many customers so it cannot reasonably be tied back to a person, incident, or customer. We apply technical and organizational safeguards to prevent re‑identification.

**No cross‑matter advantage:** we will **not** use your case data to help an opposing party in the same matter, and we do not disclose insights specific to your case.

**No third‑party model training:** we do **not** use Customer Content to train third‑party models.

**Derived/Model artifacts:** models, analytics, and statistics we create from de‑identified/aggregated data are **Echospectra’s technology**. We will never expose them in a way that reveals your confidential content.

## 3) Processors and sharing

* We do not disclose Customer Content to third parties **except** vetted **service providers** (processors) who help us run the service—e.g., cloud hosting, monitoring, secure storage, email delivery, and customer support tools. Processors act only on our instructions, must protect the data, and cannot use it for their own purposes.
* **Payments:** handled by **Stripe**. We do not store full card numbers; Stripe’s processing is governed by Stripe’s terms and privacy policy.
* **Legal requests:** we require valid legal process before disclosing any data and will notify you beforehand unless the law prohibits it.
* We never sell data and never share it for advertising.

## 4) Professional Services and conflicts

If you retain us to help analyze your data or prepare materials:

* We follow a strict **conflict protocol**: ethical walls, segregated workspaces, role‑based access, and audit logs.
* **No cross‑matter knowledge transfer.** If a wall cannot fully protect integrity, we may decline/withdraw from the engagement.
* You own your case data; we retain ownership of our background IP and tools. You receive a license to any templates/tooling we provide to you.

## 5) Security

* Encryption **in transit and at rest**, least‑privilege access, audit logging, vulnerability management, backups/DR, and incident response with notice where permitted.
* We follow **SOC 2 Type II** best practices; certification is **in progress**.

## 6) Acceptable use

* Don’t upload unlawful content, malware, or others’ confidential data without authorization. Don’t interfere with the service or attempt to access others’ data.

## 7) Usage data

* We collect limited **usage and diagnostics** (e.g., performance, crash logs, feature usage counts) to operate, secure, and improve Echospectra. We do **not** currently offer a separate opt‑out toggle for non‑essential telemetry.

## 7.1) Location information (mobile apps)

When you use the **Echospectra mobile app** (iOS or Android), the app accesses **location data** on your device only with your permission through the operating system’s location settings.

**What location data we access**

* **Precise location** (GPS/GNSS): latitude, longitude, and—when available from the device—altitude, speed, bearing/heading, horizontal accuracy, and timestamps.
* **Background location:** if you start **GPS track / patrol recording**, the app may continue to access precise location **while the app is in the background or the screen is locked**, until you stop that recording. We do not use background location for advertising or unrelated tracking.

**Why we use location data**

* Display your current position on maps and support map navigation during field work.
* Create, place, and edit observation records and map geometry tied to real-world coordinates.
* Record GPS patrol/tracks and inspection routes for your cases.
* Attach or preserve location metadata on photos and other field media where your device or workflow provides it.

**How location data is handled**

* Location data you create or save in the course of your work is **Customer Content** (see section 1).
* Data is stored **on your device** and, when you sync, transmitted to and stored on **Echospectra servers** for your organization and authorized users.
* We do **not** sell location data and do **not** use it for advertising.
* We disclose location data only to vetted **service providers** (processors) that help us run the service—such as cloud hosting and secure storage—under our instructions, consistent with section 3. Map and device SDKs (e.g., map display providers) may process location on the device or as part of providing the service; they do not use your case location for their own advertising purposes.

**Your choices**

* You can **allow or deny** location access, and change precision or background access, in your **device settings** at any time.
* Some features (maps, GPS tracks, and location-based field capture) **require** location permission to work as designed.
* You can **export** and request **deletion** of case data that includes location, as described in section 8.

## 8) Your choices and controls

* **Access & export:** you can export your case data.
* **Deletion:** upon request or account closure, we delete active copies within **30 days** and purge backups on a rolling **90‑day** schedule.
* **Data residency:** if region options are offered, we’ll honor your selection.

## 9) Availability & support

* We strive for high uptime and may schedule maintenance. Support channels and response targets are published in our help materials.

## 10) Warranties, liability, and legal terms

* The service is provided **“as is”** to the extent allowed by law. We do not guarantee legal outcomes; you are responsible for investigative conclusions and filings.
* Our total liability is limited to the greater of **fees paid in the past 12 months** or **\$10,000**, excluding willful misconduct or breach of confidentiality.
* Governing law and venue are set in your order form or our standard terms.

## 11) Children

* Echospectra is not directed to children and is intended for professional use.

## 12) Changes

* If we make material changes, we’ll post an update and, where required, provide advance notice.

---

## Contact

**Company:** Ax0n Intelligence Company

**Address:** 720 S Hwy 377 Ste 140, Box 293 Roanoke, TX 76262, USA

**Email:** [legal@echospectra.com](mailto:legal@echospectra.com)

**Security incidents & privacy requests:** [security@echospectra.com](mailto:security@echospectra.com)

---

# Appendix — Plain‑English FAQs

**Can Echospectra use our indicator data to train internal models?**
Yes—**only** in **de‑identified and aggregated** form, and only to improve Echospectra. We do not train third‑party models with your data and will not use your case information to benefit an opposing party.

**Who sees our data?**
Only your authorized users and Echospectra personnel with a legitimate need (support/security), under role‑based access and audit logs.

**What if we want stricter controls for a specific matter?**
Contact us. We can add case‑level restrictions (e.g., disable improvement uses for that matter, tighten access scopes, or create a segregated workspace) in a written addendum.

**Do you sell data or share it for advertising?**
No.

**Does the mobile app collect my location?**
Yes, when you grant permission. The app uses **precise (GPS) location** for maps, observations, and optional GPS track recording. Location tied to your cases is your Customer Content; we do not sell it or use it for ads.

**Does the app use location in the background?**
Only when you are **actively recording a GPS/patrol track** and have granted background/“always” location permission on your device. Otherwise, location is used while you are using the app (foreground / “while in use”), subject to your device settings.