Privacy Policy

This Privacy Policy explains how Polywei Corp., a Delaware corporation (“Polywei”, “we”, “us”) collects, uses, shares, and protects information when you use the Polywei platform, including polywei.com, its subdomains (such as nycv.polywei.com), the downloadable, self-hosted, and enterprise editions of the software, the APIs, and related services (collectively, the “Service”). This Policy addresses personal and workspace information only; ownership of the Service and its technology is governed by our Terms of Service.

Account information — name, email address, and sign-in identifiers (single sign-on identity or passkey credentials; we do not store passwords).

Workspace data — data you submit to or connect with your workspace, including data imported from third-party sources you authorize.

Usage and device information — log data, feature usage, and technical metadata used to operate, secure, and improve the Service.

Deployment and license telemetry — for enterprise, downloadable, and local editions, we may collect license-validation, activation, version, configuration, and operational telemetry needed to license, secure, support, and protect the software. This telemetry concerns the software itself, not the contents of your Customer Data.

Billing information — payment details are processed by our payment provider (Stripe); we do not store full card numbers.

We use information to provide and operate the Service; to sync, organize, and analyze the data sources you connect; to send service notifications you configure (such as compliance digests); to secure the platform, prevent abuse, validate licenses, and meet legal obligations; and to operate and improve the Service, including through aggregated or de-identified data that does not identify you or any individual. We do not sell personal information.

When you connect a third-party source (a property-management system, a government open-data feed, a storage provider, or another integration), we collect the data that source makes available under the access you grant. That data originates outside Polywei and may contain errors, omissions, or delays we do not control. Access credentials for connected sources are encrypted with keys dedicated to your workspace.

Some features process workspace data with AI models to generate insights, matches, summaries, or other analyses. AI outputs are informational and may be inaccurate; they are presented for your review, not as a source of record. We do not use your workspace data to train foundation models. Metrics, insights, scores, models, and analyses generated by the Service are Polywei’s proprietary output and are governed by our Terms of Service, not owned by you as Customer Data.

We share information only with service providers who process it on our behalf under contract (cloud hosting, email delivery, payment processing, AI model providers); with third-party services you direct us to connect to; when required by law; and in connection with a corporate transaction. Workspace data is isolated per tenant and is never shared with other customers.

We retain information for as long as your account or workspace is active and as needed to comply with legal obligations. Workspaces can configure retention policies for their own data. When a workspace is deleted, its data — including its dedicated encryption keys — is destroyed, rendering encrypted material unrecoverable.

Data is encrypted in transit and at rest, each workspace lives in an isolated schema with its own encryption keys, and access is controlled by role-based permissions. See our Security page for details.

Depending on your location, you may have the right to access, correct, export, restrict the processing of, or delete your personal information, and to object to processing or withdraw consent. The Service includes built-in tooling for data subject requests (access, erasure, and portability) that workspace administrators can use to respond to requests about data they control. For requests about your Polywei account itself, contact us at [email protected]. For workspace data, Polywei acts as a processor on behalf of the workspace owner, who is the controller — direct requests to that organization.

We use cookies and similar technologies strictly to keep you signed in, to remember product context (such as the active sub-product), and to secure the Service. We do not use third-party advertising cookies.

The Service is for business use and is not directed to children under 16. We do not knowingly collect personal information from children.

We may update this Policy from time to time. Material changes will be communicated through the Service or by email before they take effect.

Privacy questions and requests: [email protected]