Welcome to the legal pages.

SEISMOCON SYSTEMS, INC. PRIVACY POLICY

Version 1.2

Effective date: September 9, 2026

Last updated: September 9, 2026

This Privacy Policy explains how Seismocon Systems, Inc. (“Seismocon,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information when individuals use our websites, mobile applications, cloud platforms, Monitoring Units, sensors, dashboards, accounts, alerts, reports, support, subscriptions, and related products and services (collectively, the “Services”).

This Privacy Policy applies to consumers and to representatives, personnel, contractors, and authorized users of business and government customers. A signed agreement or service-specific notice may provide additional requirements. When Seismocon processes personal information solely for a business or government customer, that customer may control the information and its privacy instructions may apply.

Seismocon uses personal information to operate and improve the Services, market Seismocon products and subscriptions, personalize offers that may be relevant to users, and develop structural and seismic information products. Depending on the user’s jurisdiction and choices, Seismocon may also disclose, license, share, or sell certain information as described below. Seismocon applies opt-out rights in the United States where permitted and obtains prior consent where required, including for qualifying activities in the European Economic Area, United Kingdom, and Switzerland.

Service levels, platforms, and layered notice

The Services may be offered through Seismocon’s website and mobile applications under Free and Paid Service Levels. The Free Service Level may include account access, educational and public seismic information, selected maps, assessments, reports, notifications, and promotions. The Paid Service Level may include Monitoring Unit registration and management, subscriptions, telemetry, alerts, diagnostics, storage, structural assessments, downloadable reports, and premium analytics. Information collected and used depends on the features selected and enabled.

The Application and Website Terms and Privacy Notice presented during registration, purchase, or upgrade is a short, layered notice that supplements this complete Privacy Policy. Agreement to contractual terms, acknowledgment of this Privacy Policy, and optional privacy consent must be presented separately where required. Refusing optional consent will not prevent access to an unrelated Service where conditioning access would be prohibited by law.

When a user accesses the same account through more than one Seismocon platform, account-level privacy choices will be applied across those platforms where technically feasible and legally required. Cookie, browser, device, app-store, operating-system, and advertising-identifier choices may need to be managed separately. Seismocon may retain records of the user or account, jurisdiction, platform, application version, notice and terms versions, wording presented, timestamp, consent and opt-out selections, withdrawals, and applicable universal opt-out signals.

1. Personal information we collect

Depending on the Services used and their configuration, we may collect:

Identity and contact information: name, username, organization, title, mailing address, email address, telephone number, and account identifiers.
Account and authentication information: credentials, verification records, permissions, roles, account preferences, and acceptance records.
Transaction and subscription information: products and Services purchased, orders, subscriptions, shipping information, billing status, and transaction identifiers. Payment-card details are generally processed by payment providers rather than stored directly by Seismocon.
Property and infrastructure information: property address, coordinates, building characteristics, taxonomy, construction, age, size, number of stories, structural system, retrofit information, installation location, photographs, documents, asset identifiers, and related records.
Monitoring Unit and sensor information: device and serial numbers, configuration, firmware version, diagnostics, operating status, timestamps, battery, power, solar, connectivity, GNSS, accelerometer, gyroscope, tilt, LiDAR, environmental, acoustic-level, gas-sensor, and other enabled telemetry.
Possible-presence indications: if an enabled passive-infrared or similar sensor detects activity, the Services may record a possible-presence indication. Such information does not confirm occupancy, identity, or the number of persons present.
Audio-related information: an enabled acoustic function may measure sound levels. Seismocon will not represent a sound-level measurement as an audio recording. If a Service is configured to record audio, that function must be separately disclosed and used only with required notice, authorization, and consent.
Location information: property, device, installation, network, approximate, or precise location where required for monitoring, alerts, mapping, station selection, or Service operation.
Communications and support information: messages, requests, feedback, call or meeting information, attachments, technical-support records, and responses to surveys.
Internet and technical information: IP address, browser, operating system, mobile-device and application identifiers, network information, logs, crash information, diagnostic events, access times, referring pages, and interactions with the Services.
Cookie and similar-technology information: session, preference, security, performance, and analytics information as described in Section 7.
Public and third-party information: public property records, mapping information, scientific and governmental data, strong-motion records, installation information, and information supplied by customers, installers, professionals, service providers, and authorized partners.
Inferences and derived information: configurations, classifications, probabilities, assessments, operational patterns, and other outputs derived through automated processing. These are decision-support results and are not professional conclusions or determinations of actual occupancy, damage, or safety.
Marketing and preference information: product interests, subscription eligibility, insurance-interest or coverage information voluntarily provided by the user, emergency-preparedness interests, responses to offers, advertising choices, and inferred preferences.

We ask users not to provide Social Security numbers, medical records, unrelated financial credentials, or other information that the Services do not request.

2. Sources of personal information

We may obtain personal information:

directly from you or an authorized user;
from a property owner, customer, employer, agency, installer, professional, emergency organization, or other person authorized to use the Services;
automatically from websites, applications, Monitoring Units, sensors, devices, and networks;
from service providers and contractors supporting hosting, communications, payments, analytics, mapping, security, customer support, shipping, and operations;
from governmental, scientific, mapping, property-record, strong-motion, and other public sources; and
from business, development, manufacturing, distribution, and integration partners where permitted by law and contract.

3. How we use personal information

We may use personal information to:

provide, configure, activate, maintain, support, and improve the Services;
authenticate users and administer accounts, roles, permissions, subscriptions, and transactions;
associate Monitoring Units and sensor data with an authorized property or infrastructure asset;
collect, transmit, store, organize, analyze, compare, and display telemetry and other authorized information;
generate alerts, notifications, reports, assessments, diagnostics, and decision-support outputs;
promote Seismocon Monitoring Units, subscriptions, reports, upgrades, and related Services;
personalize Seismocon content and, subject to applicable choice and consent requirements, present offers from insurers, emergency-preparedness suppliers, and other relevant third parties;
determine whether a user may be interested in earthquake-insurance information or emergency supplies, without determining insurance eligibility, price, coverage, underwriting, or entitlement;
provide operational, security, account, transaction, monitoring, and emergency-related communications;
provide customer service, installation support, warranty administration, maintenance, and troubleshooting;
process purchases, subscriptions, shipping, taxes, returns, and payments;
maintain security, prevent fraud and misuse, investigate incidents, enforce agreements, and protect persons, property, systems, and rights;
test, research, develop, and improve features, algorithms, models, reliability, safety controls, and performance;
create aggregated or deidentified information that does not reasonably identify a person or customer asset;
develop, license, disclose, or sell aggregated or deidentified structural, property, environmental, and seismic datasets, statistics, models, benchmarks, trends, and planning tools;
subject to applicable law, contract, notice, and user choices, license, disclose, share, or sell identifiable structural or property information to the recipient categories described in this Policy;
comply with law, legal process, procurement requirements, audits, government requests, and contractual obligations; and
establish, exercise, or defend legal claims.

Where consent is legally required, we rely on valid consent. Where applicable, we may also process information to perform a contract, comply with law, protect vital interests, carry out tasks in the public interest, or pursue legitimate interests that are not overridden by applicable rights.

4. Automated processing and decision support

The Services may automatically process property information, telemetry, public records, scientific data, configured thresholds, and other information to generate alerts, classifications, probabilities, reports, and recommendations. These outputs provide information and decision support. They do not independently determine legal rights, eligibility, insurance coverage, employment, credit, housing, occupancy, evacuation, structural safety, or access to emergency assistance.

Seismocon does not use structural assessments, advertising profiles, or insurance-interest information to make insurance underwriting, pricing, coverage, credit, employment, housing, occupancy, or other decisions producing legal or similarly significant effects about an individual. Seismocon may identify potentially relevant offers, but the provider independently determines its products, eligibility, price, and terms. Where applicable law provides rights concerning qualifying automated decisions, instructions for exercising those rights will be provided.

5. How we disclose personal information

We may disclose personal information to:

service providers and contractors that perform cloud hosting, data storage, communications, payment processing, analytics, security, customer support, shipping, installation, testing, professional, and operational services under appropriate restrictions;
customers and authorized users responsible for the relevant account, property, Monitoring Unit, organization, or governmental program;
authorized recipients selected by a user or customer, which may include property owners, occupants, licensed professionals, insurers, lenders, emergency officials, regulators, and authorities;
business and technology partners when necessary for an integration, pilot, product delivery, support, certification, or jointly authorized service;
advertising and offer partners, such as insurers and emergency-preparedness suppliers, to personalize, measure, or deliver offers where permitted by law and consistent with the user’s choices;
structural and seismic data recipients, such as building departments, planning agencies, researchers, engineers, insurers, infrastructure operators, risk-modeling organizations, and commercial data customers, primarily through aggregated or deidentified datasets and, only where permitted, through disclosed identifiable datasets;
governmental and legal recipients when required by law, subpoena, court order, public-records obligation, lawful government request, or when reasonably necessary to protect rights, safety, security, or the integrity of the Services;
transaction participants in connection with financing, due diligence, merger, acquisition, restructuring, bankruptcy, or sale of all or part of a business, subject to appropriate safeguards; and
other persons at your direction or with your consent.

Some disclosures for targeted advertising, data licensing, or other commercial benefit may be considered a “sale,” “sharing,” or “targeted advertising” under applicable law even when no money is exchanged. Seismocon may engage in these activities only after providing required notice and honoring applicable opt-out or consent rights. Seismocon does not knowingly sell or share personal information of individuals under 16 without the affirmative authorization required by law.

Seismocon will not sell or use for targeted advertising account passwords, payment-card security information, private communications, PIR possible-presence indications, audio recordings, real-time individual location, exact internal sensor placement, or government-restricted or critical-infrastructure security information. Seismocon may use or disclose such information when necessary to provide requested Services, protect security, comply with law, or follow an authorized customer instruction.

6. Business and government customers

If you use the Services through an employer, property manager, insurer, emergency organization, business, or government agency, that organization may control your account, access information associated with its assets, establish retention and sharing instructions, or direct Seismocon’s processing. Submit privacy requests concerning customer-controlled information to that organization first. Seismocon will assist the customer as required by law or contract.

Government customers may be subject to public-records, archiving, procurement, and disclosure laws. Although Seismocon and the customer may apply confidentiality or security markings, those markings may not prevent disclosure required by law.

7. Cookies analytics and privacy controls

Our websites and applications may use cookies, software development kits, pixels, local storage, and similar technologies that are reasonably necessary for authentication, security, preferences, Service operation, performance, and analytics. The technologies actually used may change as the Services develop.

Where required, Seismocon will provide a cookie notice or consent control describing nonessential technologies and available choices. Browser settings may block or delete cookies, but doing so may impair Service functions. Advertising and analytics technologies will be activated or disabled in accordance with applicable consent, opt-out, and universal-signal requirements.

For U.S. users, Seismocon will provide required controls to opt out of sale, sharing, and targeted advertising. Where legally required, Seismocon will recognize a valid Global Privacy Control or similar universal opt-out signal. A browser-level signal may apply only to the browser or device that sends it unless Seismocon can associate it with an authenticated account as permitted by law.

For users in the European Economic Area, United Kingdom, Switzerland, and other jurisdictions requiring consent, nonessential advertising cookies, cross-service tracking, personalized advertising, and commercial disclosure of identifiable structural information will remain disabled until the required consent is obtained. Consent choices must be specific, freely given, and as easy to withdraw as to provide.

8. Communications choices

Operational, account, transaction, security, monitoring, and emergency-related communications are necessary to provide requested Services and are separate from marketing. You may not be able to opt out of necessary service communications while using the relevant Service.

You may unsubscribe from marketing emails using the link in the message or contact us. You may object to direct marketing, withdraw marketing consent, or change personalization choices where applicable. Opting out of marketing does not stop necessary operational communications. Carrier and data charges may apply to text or mobile communications.

9. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining monitoring history and Reports, meeting customer instructions, supporting warranties, maintaining security and audit records, complying with law and government requirements, resolving disputes, and enforcing agreements.

Retention periods vary according to the type and sensitivity of information, the Service configuration, operational need, legal or contractual requirements, customer instructions, and risk of harm. When information is no longer reasonably required, we may delete, anonymize, or aggregate it, subject to backup cycles and lawful exceptions. A signed business or government agreement may establish different retention or return requirements.

10. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Safeguards may include access controls, encryption, logging, monitoring, backups, supplier controls, testing, and incident-response procedures appropriate to the circumstances.

No device, network, transmission, or storage system is completely secure. Users must protect credentials, devices, networks, and recovery methods; install authorized updates; limit permissions; and promptly report suspected unauthorized access or security incidents.

11. Your privacy rights

Depending on your residence and applicable law, you may have rights to:

know or access personal information and information about its collection, use, and disclosure;
correct inaccurate personal information;
delete personal information, subject to lawful exceptions;
receive a portable copy of certain information;
opt out of sale, sharing, or targeted advertising;
limit certain uses or disclosures of sensitive personal information;
withdraw consent where processing relies on consent;
object to or restrict certain processing;
appeal the denial of a privacy request; and
receive equal service and pricing without unlawful discrimination for exercising privacy rights.

These rights are not absolute. We may deny or limit a request when we cannot verify it, when an exception applies, when the information is customer-controlled, or when fulfilling the request would violate law or another person’s rights. We will explain a denial where required.

12. California privacy notice

California residents may have rights under the California Consumer Privacy Act, as amended (“CCPA”), including rights to know, access, correct, delete, and obtain information about categories of sources, purposes, and recipients; to opt out of sale or sharing; to limit qualifying uses of sensitive personal information; and not to receive discriminatory treatment for exercising applicable rights.

The categories collected during the preceding 12 months may include identifiers; customer records; commercial information; internet or electronic-network activity; geolocation; audio, electronic, visual, thermal, environmental, sensor, and similar information; professional or employment-related information; sensitive personal information where necessary for account access, precise location, communications, or requested Services; and inferences derived from other information. The corresponding sources, purposes, and recipient categories are described in Sections 2, 3, and 5.

Seismocon may sell or share identifiers, commercial information, internet or electronic-network activity, geolocation at a level permitted for the stated purpose, marketing preferences, inferences, and structural or property information for advertising, data licensing, analytics, research, and commercial information products. Recipient categories may include advertising partners, insurers, emergency-preparedness suppliers, analytics providers, researchers, building and planning organizations, risk-modeling organizations, and commercial data customers. Seismocon will provide required notice and a clear Do Not Sell or Share My Personal Information method and will honor applicable Global Privacy Control signals.

California residents may opt out of sale or sharing at any time. An opt-out applies prospectively and will be communicated to applicable recipients as required. Seismocon will not use or disclose sensitive personal information for purposes requiring a right to limit unless the required Limit the Use of My Sensitive Personal Information method is provided. Seismocon does not offer a financial incentive or price difference in exchange for personal information unless separately disclosed with legally required terms.

An authorized agent may submit a request where permitted by law. We may require proof of authorization and may ask the individual to verify identity or authority directly. California rights and required notices apply only when Seismocon is subject to the applicable requirement; Seismocon may voluntarily honor a request more broadly.

13. Submitting a privacy request

To exercise an applicable privacy right, use the privacy-request method made available through the website or application, or email legal@seismocon.com with the subject line Privacy Request.

To opt out of sale, sharing, or targeted advertising in the United States, use the Do Not Sell or Share My Personal Information control made available on the website and in the application, enable a legally recognized universal opt-out signal, or email legal@seismocon.com with the subject line Opt-Out Request. You do not need to create an account solely to submit an opt-out request.

Users in the European Economic Area, United Kingdom, and Switzerland may manage consent through the privacy or cookie settings, withdraw consent, or object to direct marketing by contacting legal@seismocon.com. Withdrawal does not affect processing lawfully completed before withdrawal.

Describe the right you wish to exercise and provide enough information to identify the relevant account, Service, device, transaction, or record. Do not send passwords, payment-card security codes, or unnecessary sensitive information. We may verify identity, authority, residency, or account control using information proportionate to the request. Verification information will be used for verification and request administration.

We will respond within the period required by applicable law. If we deny a request, you may appeal by replying to the decision or emailing legal@seismocon.com with the subject line Privacy Appeal, where an appeal right applies.

14. Children

The Services are not directed to children under 13, and Seismocon does not knowingly collect personal information directly from a child under 13 without legally sufficient parental authorization. If you believe a child has provided personal information improperly, contact legal@seismocon.com. We will investigate and take appropriate action.

An organization deploying Monitoring Units in a location used by children is responsible for required notices, permissions, placement decisions, and legal authority, unless a signed agreement assigns a responsibility to Seismocon.

15. International transfers

Seismocon is based in the United States. Personal information may be processed in the United States and other countries where Seismocon, customers, service providers, or contractors operate. Those countries may have different privacy laws.

Where required, Seismocon will use an approved transfer mechanism and appropriate safeguards. Individuals outside the United States may have rights to complain to a local data-protection authority. A customer-specific data-processing agreement may provide additional transfer and processing terms.

15A. European privacy information

For personal information subject to the General Data Protection Regulation or comparable United Kingdom or Swiss law, Seismocon acts as a controller for its own accounts, marketing, advertising, analytics, product development, and commercial data activities. Seismocon may act as a processor when a business or government customer determines the purposes and means of processing.

Depending on the activity, the legal basis may be performance of a contract, compliance with law, protection of vital interests, legitimate interests, a task in the public interest, or consent. Seismocon relies on consent where required for nonessential tracking, personalized advertising, or commercial disclosure of identifiable structural information. Legitimate interests may include securing and improving the Services, preventing fraud, communicating with business contacts, and developing aggregated or deidentified structural and seismic intelligence, subject to applicable balancing and objection rights.

European users may request access, correction, deletion, restriction, portability, or objection and may withdraw consent. They may also lodge a complaint with the competent supervisory authority. Seismocon will not condition an unrelated Service on optional advertising or data-commercialization consent where prohibited.

16. Deidentified and aggregated information

Seismocon may use, disclose, license, and sell aggregated or deidentified structural, property, environmental, and seismic information for operations, security, research, analytics, product improvement, scientific collaboration, risk modeling, public planning, building-department analysis, and other lawful commercial or public-interest purposes. Seismocon will apply reasonable measures designed to prevent the information from being associated with a person or protected customer asset and will contractually prohibit recipients from attempting reidentification where required. Seismocon will not attempt to reidentify information maintained as deidentified except to test whether deidentification controls are effective or as otherwise permitted by law.

Removal of a name alone does not necessarily deidentify a record. Exact addresses, coordinates, unique device identifiers, detailed photographs, exact sensor placement, and distinctive building profiles may remain identifying and will be treated accordingly.

17. Third-party services and links

The Services may connect to third-party websites, applications, mapping services, communications providers, payment processors, scientific databases, or customer systems. Their independent privacy practices are governed by their own notices. This Privacy Policy does not govern a third party’s independent processing.

18. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, law, or our practices. We will update the version and effective date and provide additional notice when required. Material changes will not be applied retroactively where prohibited by law. The version applicable to a particular interaction may be retained for compliance purposes.

19. Contact us

Seismocon Systems, Inc.

1625 Trancas Street, Unit 3496

Napa, California 94558 USA

Privacy requests: legal@seismocon.com

Legal notices: legal@seismocon.com

Website: www.seismocon.com

20. Controlled version

Document title: Seismocon Privacy Policy

Version: 1.2

Effective date: September 9, 2026

Permanent location: www.seismocon.com/privacy-policy

This Privacy Policy should be published with the same version and effective date in every available language. Unless applicable law requires otherwise, the English version controls if a translation conflicts with it.