Privacy Policy

Effective Date: June 26, 2026 Last Updated: June 26, 2026

Note: These terms are effective as of the date above and may be updated from time to time. Questions? Contact legal@getdimension.ai.

1. Introduction

Get Dimension AI Inc. ("Dimension AI," "we," "us," or "our"), a Delaware corporation with its principal place of business at 10 Catamount Drive, Medford, NJ 08055, operates the Dimension AI platform and related services (the "Service"). This Privacy Policy explains what personal information we collect, how we use and share it, and the choices you have.

This Privacy Policy is incorporated into and subject to our Terms of Service.

If you have questions, contact us at support@getdimension.ai.

2. Scope

This Privacy Policy applies to individuals who: (a) create an Dimension AI Account; (b) use the Service as an authorized user of a customer organization; (c) visit our marketing websites; or (d) otherwise interact with us. It does not apply to third-party services we link to or integrate with, which have their own privacy policies.

Business contact principle. The Service is designed for professional contractors and construction-industry users. Most information we process relates to business activities rather than consumer transactions.

3. Information We Collect

3.1 Information You Provide

Account information. When you create an account, we collect:

• Email address (required, must be unique)
• Full name
• Password (stored as a salted hash — never in plaintext)
• Timezone (defaults to America/New_York)
• Organization membership

Profile information. You may provide additional professional details through onboarding and profile settings, including:

• Company name
• Location (city, state, country)
• Preferred language
• Trade role (general contractor, framer, remodeler, etc.)
• Typical project type
• Framing preferences (stud spacing, ceiling height, corner style)
• Lumber preferences (species, grade, preferred lumberyard)
• Climate zone, seismic-detailing and hurricane-detailing flags
• Default markup percentage (if set)

Content you upload. When you use the Service, you may upload:

• Architectural plans, drawings, and PDFs (up to 20MB per file, up to 50 pages per PDF, up to 20 files per message)
• Images (JPG, PNG, WebP, GIF)
• Spreadsheets (XLSX, XLS, CSV)
• Audio recordings for voice input (up to 5MB, up to 120 seconds)

Conversations and takeoff data. The messages you send to the AI assistant, any material takeoffs generated, edits you make, notes, and project/room metadata you create.

Communications. Correspondence you send to support, feedback, and any other communications with us.

Optional OAuth connections. If you connect Google Calendar or Gmail, we store OAuth tokens (encrypted) to access the specific scopes you authorize. You can disconnect at any time.

Payment information. If you subscribe to a paid plan, billing is processed by our payment processor, Stripe, Inc. We receive and store your Stripe customer ID, subscription ID, plan tier, trial expiry, and billing-event metadata. We do not receive or store your full payment card number. Stripe's privacy practices are described at stripe.com/privacy.

3.2 Information Collected Automatically

Device and log data. When you use the Service, we automatically collect limited technical information, including IP address, user-agent string, device type, operating system, browser type, pages or endpoints accessed, request and response timestamps, and error information.

Authentication cookies. We set HTTP-only, Secure cookies for authentication. See our Cookie Notice for details.

Push notification tokens. If you opt in to push notifications, we store your device's APNs (iOS) or FCM (Android/Web) push token, platform identifier, last-used timestamp, and active/inactive status.

Usage metadata. Aggregate counts and metadata about your activity — for example, number of messages sent, tokens consumed by the LLM, and estimated LLM cost per conversation — used for capacity planning, abuse prevention, and internal metrics.

3.3 Information We Do Not Collect

• No third-party web analytics. We do not currently use Google Analytics, Segment, Mixpanel, PostHog, Amplitude, or similar tools.
• No third-party error/performance monitoring. We do not currently use Sentry, Datadog, New Relic, or similar third-party services.
• No advertising identifiers or ad-tech cookies.
• No persistent audio recordings. Audio submitted for voice input is transmitted to our transcription provider (OpenAI Whisper), transcribed to text, and discarded. Only the resulting text is stored in your conversation history.

If any of the above changes, we will update this Privacy Policy and provide notice.

4. How We Use Information

We use personal information to:

• Provide, operate, maintain, and secure the Service;
• Authenticate you and manage your Account;
• Generate material takeoffs and other AI-assisted outputs from your content (see Section 5);
• Save and organize your conversations, takeoffs, projects, and rooms;
• Enable semantic search across your conversation history using vector embeddings;
• Process payments, manage subscriptions, and send billing notices;
• Send transactional messages (e.g., account verification, password resets, billing, security alerts);
• Send push notifications you have opted into (e.g., event reminders, background-job completion);
• Provide customer support and respond to inquiries;
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms;
• Comply with legal obligations, enforce our Terms, and protect our rights;
• Improve the Service, diagnose technical issues, and develop new features;
• Develop, train, evaluate, and improve our own machine-learning models, including using your content and uploaded plans (see Section 5).

We do not sell your personal information. We do use your content — including your uploaded plans — to develop and train our own AI models, as described in Section 5. We do not allow our third-party AI providers to use your content to train their models; under those providers' standard API terms, content submitted through their APIs is not used to train or improve their models by default. See Section 5 for details.

5. AI Processing of Your Content

When you use AI features, we transmit your prompts and relevant context — including portions of your uploaded plans, extracted text, conversation history, and profile defaults — to our AI subprocessors to generate responses. Specifically:

• Text generation and reasoning: OpenAI (GPT-class models)
• Embeddings for semantic memory: OpenAI text-embedding-3-small (1,536-dimensional vectors)
• Audio transcription: OpenAI Whisper

Embeddings are stored in our database and used to retrieve relevant prior context within your own account. Conversation content (your messages and the assistant's responses) is stored as checkpointed state so you can resume conversations.

We access these subprocessors through their APIs. Under our current AI subprocessor's standard API terms, content submitted through the API is not used to train or improve its models unless we explicitly opt in, which we do not. We do not control these third-party terms, and they may change; we will update this Policy if our practices materially change. You can learn more at openai.com/policies/api-data-usage-policies.

Training our own models. Separately from the third-party processing above, we use your content — including the plans, drawings, and other materials you upload — to develop, train, evaluate, and improve our own machine-learning models and the Service. Where practicable, we apply reasonable de-identification before or as part of this use (for example, removing client names, addresses, and similar identifying details from title blocks). Because model training is cumulative and irreversible, deleting your content or Account stops future use of that content for training but does not require us to retrain or delete a model that was already trained on it. This use is also governed by Section 6 of our Terms of Service.

6. How We Share Information

We share personal information only as described below. We do not sell personal information.

Service providers and subprocessors. We share information with vendors who process data on our behalf under contract. Current categories and providers include:

The table above reflects our current subprocessors; you may request the most current version at any time by emailing support@getdimension.ai.

Your organization. If you use the Service as a member of an organization, your organization's administrators may access your Account activity, content, and billing status.

Legal and safety. We may disclose information when we believe in good faith it is necessary to (a) comply with law or legal process; (b) respond to lawful requests from public authorities; (c) protect our rights, property, or safety, or that of our users or the public; (d) enforce our Terms; or (e) investigate fraud, abuse, or security incidents.

Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of the transaction.

With your consent. We may share information in other ways with your consent or at your direction.

7. Data Retention

We retain personal information for as long as necessary to provide the Service and for the purposes described in this Privacy Policy, and as required by law.

• Account and profile data. Retained while your Account is active and for a reasonable period after closure for legal, audit, and backup purposes.
• Uploaded content (plans, images). Retained while associated Account records exist or until you delete the content. Deletion requests are honored subject to reasonable processing time and legitimate archival/legal needs.
• Conversations and takeoff records. Retained indefinitely while your Account is active (to support resume, semantic search, and historical takeoff access) unless you delete them or close your Account.
• Audio files. Not persisted. Discarded immediately after transcription.
• Billing records. Retained for the period required by tax, accounting, and financial regulations.
• Logs and security data. Retained for a limited period consistent with operational and security needs.

After retention periods expire, we delete, anonymize, or aggregate personal information.

8. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including:

• Encryption in transit (TLS/HTTPS)
• Encrypted password storage (salted hashing)
• HTTP-only, Secure authentication cookies
• JWT-based authentication with short-lived access tokens and scoped refresh tokens
• Encrypted storage of OAuth tokens
• Access controls and least-privilege principles for our personnel
• Regular software updates and dependency monitoring

No method of transmission or storage is 100% secure. We cannot guarantee absolute security. If you have reason to believe your Account or data has been compromised, contact us at support@getdimension.ai.

9. Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information, subject to certain exceptions
• Port your information in a machine-readable format
• Restrict or object to certain processing
• Withdraw consent where processing is based on consent
• Opt out of sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising)
• Non-discrimination for exercising these rights

How to exercise. Submit a request to support@getdimension.ai. We will verify your identity before fulfilling the request and respond within the timeframes required by applicable law. You may also manage much of your information directly in Account Settings (profile, password, push notifications, OAuth connections, Account deletion).

Authorized agents. Where permitted by law, you may designate an authorized agent to submit requests on your behalf. We will require verification.

Appeals. If we deny your request, you may appeal by contacting support@getdimension.ai with the subject line "Privacy Appeal."

10. Region-Specific Disclosures

10.1 California Residents (CCPA / CPRA)

In the last 12 months, we have collected the categories of personal information listed in Section 3 (identifiers, commercial information, internet/network activity, geolocation inferred from IP, audio (transient), professional information, and inferences from your usage). We disclose these categories to the service providers listed in Section 6 for the business purposes described in Section 4.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

We do not use or disclose sensitive personal information for purposes that require a right-to-limit disclosure under the CPRA.

California residents have the rights listed in Section 9. To exercise them, contact support@getdimension.ai.

10.2 EEA, UK, and Swiss Residents (GDPR / UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, Get Dimension AI Inc. is the controller of your personal information for its own purposes. When processing data on behalf of a customer organization, we act as a processor.

Legal bases. We process personal information under one or more of the following legal bases: performance of a contract; our legitimate interests (e.g., securing the Service, preventing fraud, improving the product); your consent (where required); and compliance with legal obligations.

International transfers. We are based in the United States and use service providers in the U.S. and other jurisdictions. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) and the UK Addendum to transfer personal information outside the EEA or UK.

EU/UK representative. Not applicable. Dimension is based in the United States and does not currently offer the Service to, or target, individuals located in the EU or UK.

Supervisory authority. You have the right to lodge a complaint with a supervisory authority in your country.

10.3 Other Jurisdictions

We will honor rights granted by other applicable privacy laws (e.g., Colorado CPA, Virginia CDPA, Connecticut CTDPA, Utah UCPA, Canada PIPEDA, and others) to the extent they apply.

11. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact support@getdimension.ai and we will take steps to delete it.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. We are not responsible for their privacy practices. Review their privacy policies before providing information.

13. Do Not Track

Our Service does not currently respond to "Do Not Track" signals. We do not use cross-site tracking for advertising.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice (e.g., by email or in-app notice) before they take effect. The "Last Updated" date above indicates the most recent revision. Continued use of the Service after changes take effect constitutes acceptance.

15. Contact Us

Questions, requests, or complaints:

Get Dimension AI Inc. Attn: Privacy 10 Catamount Drive, Medford, NJ 08055 Email: support@getdimension.ai Security: support@getdimension.ai

This template is provided for informational purposes only and does not constitute legal advice. Consult a licensed attorney before publication.