Last updated: 12 August 2026
Looking for the free CodeGreen Tools app instead? Its privacy policy is here — short answer, it collects nothing.
This policy explains what information Code-Green ITM LLC (“CodeGreen ITM”, “we”, “us”) collects when you use the CodeGreen ITM web application, the CodeGreen ITM mobile app, and our website (together, the “Service”), why we collect it, who we share it with, and what control you have over it.
Two different roles, and the difference matters. When a fire protection contractor subscribes to CodeGreen ITM, that contractor decides what inspection data to put into the Service and what happens to it — they are the controller of that data, and we process it on their behalf under our Terms of Service. We are the controller only of the account and usage information described in section 2. If you are a building owner or property contact and want your details corrected or removed, contact the contractor who performs your inspections; we will support them in acting on your request.
Contents
Code-Green ITM LLC is a Connecticut limited liability company (ALEI US-CT.BER:3490476). We build software that fire protection and life safety contractors use to schedule inspections, record results in the field, track deficiencies, and produce inspection reports for their customers and authorities having jurisdiction.
Mailing address: PO Box 488, Ivoryton, CT 06442
Privacy contact: [email protected]
The mobile app asks for three device permissions. Each is optional, each is used for one purpose only, and the app will tell you why at the moment it asks.
| Permission | What we use it for | If you decline |
|---|---|---|
| Camera | Photographing a deficiency you have found, the condition after you corrected it, and equipment for compliance records. | You can still complete inspections. Photographs are optional throughout the Service. |
| Photo library | Attaching a picture you already took to an inspection or deficiency. | Same as above — nothing is blocked. |
| Location (while using the app) | Used only when you tap Start Route, to order the day's jobs efficiently from where you currently are. | Route optimisation is unavailable. Every other feature works normally. |
We do not track your location in the background, we do not follow you between jobs, and we do not store a history of where you have been. Your position is read at the moment you ask for a route, used to calculate that route, and not retained.
We do not sell personal information. We do not share it for advertising, and we do not use your inspection data to train artificial intelligence models — see the next section.
The web application offers optional AI-assisted features — most notably importing devices from a panel point report, and an assistant that answers questions about your own data. When you use one of these, the relevant content (for example the spreadsheet or PDF you uploaded, or your question) is sent to Anthropic PBC for processing and the result is returned to you.
We share information with the service providers below, each of which processes it only to provide their part of the Service and under contractual confidentiality obligations. We do not sell data to anyone.
| Provider | What it handles |
|---|---|
| Supabase | Database, authentication, and file storage (photographs, signatures, reports) |
| Amazon Web Services | Underlying cloud infrastructure for the above |
| Cloudflare | Website and web application hosting; encrypted off-site backups |
| Anthropic PBC | AI processing for the optional features in section 5 |
| Mapbox | Converting property addresses into map coordinates and ordering a day's route |
| Resend | Sending transactional email |
| Sentry | Error diagnostics for the web application |
| Expo (Expo Application Services) | Delivering mobile app updates |
We may also disclose information if we are legally required to, to enforce our Terms of Service, to protect the rights or safety of any person, or in connection with a merger or sale of the business — in which case we will give notice before your information becomes subject to a different policy.
Inspection records, reports, and audit entries are compliance documents. Fire and life safety inspections are subject to recordkeeping requirements, and the contractor who created a record — not us — determines how long it must be kept. We retain that content for as long as the contractor's account is active, and afterwards for the period they instruct or the law requires.
Account and contact information is kept while the account is active. Diagnostic and log data is kept for a limited period and then discarded. Waitlist addresses are kept until the launch announcement has been sent, or until you ask us to remove yours, whichever comes first.
Data is encrypted in transit and at rest. Every company's data is isolated from every other company's at the database level, and enforced by row-level security rather than by application code alone. Access within a company is limited by role. File access is granted through short-lived signed links rather than public URLs. We keep encrypted off-site backups.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your information, we will notify you as required by law.
Depending on where you live, you may have the right to:
To exercise any of these, contact us at [email protected]. If your information is in a contractor's account, we will refer your request to that contractor and assist them in fulfilling it, because the data is theirs to control.
California residents: we do not sell or share personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.
A company administrator can remove any user from their account at any time in Settings → Users & Roles, which immediately ends that person's access.
To close a company account entirely and delete its data, contact us at [email protected]. We will confirm the request with an account administrator before acting on it, since deletion is irreversible and affects compliance records the contractor may be legally obliged to keep.
The Service is a business tool and is not directed at children. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it.
We operate in the United States and our providers store and process data in the United States. If you use the Service from elsewhere, you are sending your information to the United States, where privacy laws may differ from those in your country.
We may update this policy. If a change is material, we will notify account administrators by email or in the Service before it takes effect. The date at the top always reflects the current version.
Code-Green ITM LLC
PO Box 488, Ivoryton, CT 06442
[email protected]