We use information to:

• Provide and operate the Service, including precise geolocation features, depth estimation, asset capture, interactive maps, dashboards, exports, and hardware provisioning (sale or rental).
• Improve accuracy and performance, including quality checks, algorithmic refinement, debugging, analytics, and usage trend analysis.
• Authenticate users and protect accounts, prevent fraud and abuse, and ensure Service security and integrity.
• Provide customer support, training, and onboarding; communicate about updates, changes, and security notices.
• Process transactions, billing, invoicing, refunds/returns (sales), and rental logistics.
• Comply with laws and enforce our Terms of Service.

Where required by law, we rely on lawful bases such as: contract performance, legitimate interests (e.g., product improvement, security), consent (e.g., push notifications/marketing where required), and legal obligations.

We may share information as follows:

• Service Providers/Processors: cloud hosting, data storage, analytics, email/SMS delivery, customer support tools, payment processing, logistics/shipping, and identity/security services.
• Corrections & Geolocation Providers: to enable third party GNSS/RTK correction services and related connectivity essential for precision.
• Hardware & Logistics Partners: to fulfill sales and rentals, including shipping and RMA/DOA processing.
• Professional Advisors & Compliance: legal, audit, and regulatory disclosures when required by law or to protect rights, safety, and property.
• Business Transfers: in connection with a merger, acquisition, financing, or sale of assets.

We do not sell personal information in the common understanding of “sale.” For U.S. privacy laws that define “sale” or “share” broadly, see Section 8 (U.S. State Privacy Rights).

We do not disclose precise location to third parties for their independent marketing.

We may process and store information in countries other than your own (e.g., the United States and other jurisdictions where our providers operate). Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for cross border transfers.

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention depends on the data type and your account status. We may anonymize or aggregate data for analytics, which we may retain longer. You may request deletion as described in Sections 7–8.

We implement reasonable administrative, technical, and physical safeguards designed to protect information (e.g., access controls, encryption in transit where appropriate, monitoring). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

• Location Permissions: Control precise location permissions at the device/OS level (note: the Service requires precise location for intended functionality).
• Account Settings: Access, correct, or update certain profile and project information in the app or dashboard.
• Communications: Opt out of non essential emails by using unsubscribe links; we may still send transactional or security notices.
• Cookies: Manage cookies via your browser settings or our cookie banner (where available).

If you are a resident of certain U.S. states (e.g., California, Virginia, Colorado, Connecticut, Utah), you may have rights to:

• Know/Access the categories and specific pieces of personal information we have collected about you.
• Delete personal information, subject to legal exceptions.
• Correct inaccuracies in personal information.
• Opt out of certain processing defined by law as “sale” or “sharing” for cross context behavioral advertising (we do not sell personal information as commonly understood; we also do not share precise geolocation for third party advertising).
• Limit use of sensitive personal information where applicable.

To exercise rights, contact us at IPadministrator@halassetlocator.com. We will verify your request consistent with applicable law. You may designate an authorized agent, subject to verification.

Categories collected (CCPA/CPRA, in the past 12 months): identifiers (e.g., name, email), commercial information (transactions), internet/electronic activity (usage logs), geolocation data (precise), professional information (organization/role), and inferences (minimal or none). Sources include you, your devices, and service providers. Business purposes include those listed in Section 2. Disclosures for business purposes are listed in Section 3. We do not use or disclose minors’ data for targeted advertising.

If you are in the European Economic Area (EEA) or UK, you have rights under GDPR/UK GDPR, including access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests and direct marketing). You may also withdraw consent where processing is based on consent.

Legal bases we rely on include contract (to provide the Service), legitimate interests (security, improvement, analytics compatible with user expectations), consent (where required by law), and legal obligations. You may lodge a complaint with your local supervisory authority.

Where we act as a processor for enterprise customers, we process data per their instructions and applicable data processing terms.

We use cookies, SDKs, and similar technologies to:

• Keep you signed in and secure your session,
• Remember preferences,
• Measure performance and diagnose issues,
• Understand usage to improve the Service.

You can manage cookies via your browser and, where applicable, a cookie consent banner. Blocking cookies may affect functionality.

The Service is not directed to children under 16 (or a higher age where required by local law), and we do not knowingly collect personal information from them. If you believe we have collected information from a minor, contact us and we will take appropriate steps to delete it.

The Service may include links or integrations with third party sites, services, or devices (e.g., corrections providers, cloud tools). We are not responsible for their privacy practices. Review their policies before providing data.

Our Service enables the capture and management of asset locations with high precision. However, the Service does not detect or localize pipelines or underground assets that have not been previously captured/registered using supported workflows and compatible equipment. Do not rely on the Service as a sole source of truth for excavation or safety critical activities. See our Terms of Service for additional limitations.

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email. The “Last updated” date at the top reflects the latest version. Your continued use after the effective date constitutes acceptance.

HAL Asset Locator LLC

Address: 13310 Walton-Verona Rd, Walton, KY 41094

Email: IPadministrator@halassetlocator.com

For privacy requests, please include your name, account email, and a description of your request. We may ask for additional information to verify your identity.