Skip to main content
Building Compliance OS

Privacy Policy

Last updated: May 21, 2026

This Privacy Policy explains how Athlete Domains LLC ("we," "us," or "our"), which operates Building Compliance OS (the "Service"), collects, uses, shares, and protects information when you use the Service.

1. Information We Collect

  • Account information — your name, email address, and organization details provided when you create an account or invite team members.
  • Building and compliance data — building details, utility and energy consumption readings, emissions figures, uploaded documents, and compliance information you enter or import.
  • Payment information — processed by our payment processor, Stripe. We do not store full payment card numbers; we receive limited billing details such as your subscription status and plan.
  • Integration credentials — if you connect EPA ENERGY STAR Portfolio Manager, we store those credentials encrypted at rest using AES-256-GCM.
  • Technical and usage data — log data, IP address, device and browser information, and error reports generated as you use the Service.

2. How We Use Your Information

We use the information we collect to provide, operate, and improve the Service; to calculate emissions and generate compliance reports; to process payments and manage subscriptions; to send compliance deadline reminders and service-related communications; to provide customer support; to monitor and secure the Service; and to comply with our legal obligations.

3. Service Providers and Subprocessors

We rely on the following third-party providers to operate the Service. Each processes data only as needed to perform its function:

  • Supabase — database hosting, authentication, and file storage.
  • Stripe — payment processing and subscription billing.
  • Resend — delivery of transactional and notification emails.
  • Sentry — application error monitoring and diagnostics.
  • Upstash — rate limiting to protect the Service.
  • Inngest — scheduled and background job processing.
  • Netlify — application hosting and content delivery.
  • EPA ENERGY STAR Portfolio Manager — energy data exchange, used only when you choose to connect that integration.

4. How We Share Information

We do not sell your personal information or building data. We share information only with the service providers listed above to operate the Service, when required by law or legal process, to protect the rights and safety of our users or the public, or in connection with a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Privacy Policy.

5. Data Storage and Security

Your data is stored using industry-standard safeguards, including encryption in transit and at rest, row-level security policies on the database, and AES-256-GCM encryption for sensitive integration credentials. While we work to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active. If you delete your account, we delete your building and compliance data within 30 days, except where longer retention is required by law (for example, billing and transaction records kept for tax and accounting purposes).

7. Your Rights and Choices

Depending on your location, you may have the right to access, correct, export, or delete your personal information. Many of these actions can be performed directly in the Service: you can edit account and building data, export building and compliance data, and delete your account. You may also exercise these rights by contacting us at support@buildingcomplianceos.com, and we will respond to verified requests within a reasonable time and as required by applicable law.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

9. International Users

The Service is operated in the United States, and your information is processed and stored there. If you access the Service from outside the United States, you consent to the processing of your information in the United States.

10. Children's Privacy

The Service is intended for business use and is not directed to anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service, and the "Last updated" date above reflects the most recent revision.

12. Contact

For privacy-related questions or requests, contact us at support@buildingcomplianceos.com.