Privacy Policy

01Who we are

Eighteen2 (“Eighteen2,” “we,” “us”) makes discovery software for high-purity water systems, offered at eighteen2.com and service.eighteen2.com (together, the “Service”). We are based in Pennsylvania, USA. This policy explains what personal information we collect when you use the Service, why, and the choices you have.

The Service is built for businesses. If your employer or another organization set up your account, that organization controls the project data in it, and we process that data on its behalf.

02What we collect

Account information. Your name, work email address, company name, and a password (stored only as a salted hash), plus the team and role you hold in your organization’s account.

Project data. What you and your team enter to design or service a system: project and site details, the customer contact you name, equipment, feed water results, readings, notes, photos taken during a site discovery visit, and the packages, drawings, and reports the Service produces from them.

Customer confirmations. When your customer opens a project link and confirms a section or a return, we record what was confirmed, when, and, if they ask for a receipt, the email address it is sent to.

Contact form. The name, email, company, role, topic, and message you send us, so we can reply.

Billing. If your organization subscribes, payment is handled by Stripe. We receive the plan, seat count, and payment status. We never see or store full card numbers.

Usage and technical data. Our own first-party analytics record page views and actions such as starting the guided demo, tied to a random identifier stored in your browser. Our servers also process your IP address to deliver the Service and limit abuse; for analytics and rate limits we keep a one-way hash of it, not the address itself.

03How we use it

• To provide the Service: sign you in, save your work, send project links and handoff notices, and run your trial or subscription.
• To answer your questions and requests, including sales and support inquiries.
• To send service email you need, such as sign-in, password reset, invitations, and receipts. We do not send marketing email unless you ask for it.
• To understand how the Service is used, fix problems, and improve it.
• To protect the Service and its users, and to meet legal obligations.

04Cookies and browser storage

We use only strictly necessary cookies: session and security cookies that keep you signed in and protect sign-in. They are not used for advertising. We also use your browser’s local storage for things like unsaved drafts, display preferences, and the random analytics identifier described above. You can clear local storage in your browser at any time.

We do not use advertising cookies, third-party analytics, or tracking pixels, and we do not sell or share personal information for cross-context advertising.

05Who we share it with

We do not sell personal information. We share it only as needed to run the Service:

• Service providers that host and operate the Service for us: hosting (Vercel), database (Neon), payments (Stripe), and email delivery. They may use the data only to provide their services to us.
• People you choose to share with: your teammates, and the customer or colleague who receives a project link or shared report.
• Legal reasons: when required by law, or to protect the rights, safety, or property of Eighteen2, our users, or others.
• A business transfer: if Eighteen2 is reorganized, merged, or sold, subject to the commitments in this policy.

06How long we keep it

We keep account and project data for as long as your organization’s account is open. When a trial ends without a plan, the account becomes read-only and nothing is deleted, so your work is there if you return. If you or your organization ask us to delete an account, we delete its data within 30 days, except copies that remain in routine backups for a short time or records we must keep for legal, tax, or accounting reasons.

Contact form messages are kept as long as needed to follow up and as ordinary business correspondence. Analytics events are kept in pseudonymous form and used in aggregate.

07Security

Data travels over encrypted connections (HTTPS), passwords are hashed, and access to production data is limited to the people who run the Service. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as the law requires.

08Your choices and requests

You can ask us to access, correct, export, or delete your personal information, or to stop a particular use of it. Email contact.us@eighteen2.com with “Privacy request” in the subject. We will confirm the request comes from you, and we aim to respond within 30 days. If your data sits in an organization’s account, we may refer the request to that organization or act on its instructions.

Depending on where you live, you may have additional rights under local law. We will honor them as the law requires and will not treat you differently for using them.

09Where data is processed

Eighteen2 is operated from the United States, and our service providers store and process data in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in the United States.

10Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16.

11Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change is material, we will tell account holders by email or in the Service before it takes effect.

12Contact

Questions about this policy or your information: contact.us@eighteen2.com. Eighteen2, Pennsylvania, USA.