KanGate Privacy Policy

Effective date: September 30, 2026

KanGate, LLC (“KanGate,” “we,” “us,” or “our”) provides software, applications, integrations, websites, support, and related services for construction and other project-based industries (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our websites, communicate with us, or use the Services.

This Privacy Policy does not replace a customer’s own privacy obligations, and it does not apply to a third-party product or service that has its own privacy notice.

1. Our role

For account, business-contact, website, sales, and direct-support information, KanGate generally acts as the business or controller that determines why and how the information is processed.

For personal information contained in data that an organizational customer submits to or connects with the Services (“Customer Data”), KanGate generally acts as a service provider or processor on the customer’s behalf. In that situation, the customer controls the data and KanGate processes it under the customer’s instructions and agreement with KanGate. If your information appears in Customer Data, please direct privacy requests to the relevant customer first. We will assist the customer as required by applicable law and our agreement.

2. Information we collect

The information we collect depends on how you interact with us and may include:

A. Information you provide directly

Business and contact information, such as name, job title, employer, business email address, telephone number, mailing address, and communication preferences.
Account information, such as username, role, organization, permissions, authentication status, and account settings. We do not need to receive your plaintext password when authentication is handled by an identity provider.
Commercial and transaction information, such as subscription, Order, billing contact, invoice, payment status, and purchasing history. If KanGate later enables direct online payment, the applicable payment process and provider will be disclosed before payment information is collected.
Communications and support information, including messages, support requests, meeting notes, feedback, attachments, call details, and information you provide while troubleshooting.
Event, demonstration, pilot, and onboarding information, including registration details, project role, product interests, and implementation requirements.

B. Customer Data processed through the Services

Depending on the customer’s configuration and instructions, Customer Data may include:

project, package, asset, material, tool, equipment, drawing, revision, work-date, turnover, commissioning, and readiness records;
identifiers and relationships associated with people, organizations, qualifications, approvals, inspections, and work activities;
documents, photographs, evidence, logs, reports, comments, and metadata;
data retrieved from or transmitted to a customer-authorized third-party integration; and
other information a customer or Authorized User chooses to submit.

Customers decide what Customer Data to provide and are responsible for ensuring they have an appropriate legal basis, permissions, notices, and consents. Customers should not submit unnecessary sensitive, regulated, privileged, export-controlled, or special-category information unless KanGate has expressly agreed in writing to process it and appropriate safeguards are in place.

Some connected services impose additional restrictions. In particular, storage functionality associated with Autodesk developer offerings is not intended for sensitive personal information or personal information about KanGate end users. Customers must not direct KanGate to submit that information to Autodesk unless Autodesk’s applicable terms expressly permit the processing and all required rights, permissions, and consents are in place.

C. Information collected automatically

When you visit or use the Services, KanGate’s website host, application infrastructure, and security systems may automatically receive:

device type, operating system, browser type, language, IP address, and general location derived from IP;
dates, times, pages, screens, features, links, and actions used;
referring and exit pages or URLs;
session, authentication, error, diagnostic, performance, and security logs; and
cookie, local-storage, or similar technology identifiers.

We use technologies necessary to deliver pages, maintain sessions, authenticate users where applicable, and protect the Services. KanGate will not activate nonessential analytics or advertising technologies without updating the applicable notice and providing any consent or choice required by law. Browser or device settings may allow you to block or delete these technologies, though some functions may not work correctly.

D. Information from third parties

We may receive information from:

your employer, organization, account administrator, or colleagues;
customer-authorized integrations and connected services, including Trimble offerings;
providers actually engaged to supply hosting, identity, security, communications, or support functions;
business partners, referrals, public sources, and professional networks; and
government authorities or other persons when permitted or required by law.

3. How we use information

We may use personal information to:

provide, configure, operate, maintain, and support the Services;
create and administer accounts, permissions, identity, and authentication;
process customer-directed workflows and integrations;
communicate about accounts, support, security, transactions, product updates, and service changes;
process Orders, invoices, and payments;
troubleshoot, monitor performance, prevent fraud and abuse, and protect the Services, customers, users, and others;
comply with law, enforce agreements, establish or defend legal claims, and respond to lawful requests;
analyze operational performance and improve usability, reliability, and functionality using feedback, system information, and other information we are permitted to use—not Customer Data for generalized product training;
conduct business planning, audits, governance, and internal administration; and
send business marketing communications where permitted, with an opportunity to opt out.

Where applicable law requires a legal basis, we rely on performance of a contract, steps requested before entering a contract, legitimate interests that are not overridden by individual rights, compliance with legal obligations, protection of vital interests, or consent. You may withdraw consent at any time, but withdrawal does not affect earlier lawful processing.

4. Customer Data and connected services

KanGate accesses, retrieves, and processes Customer Data only as necessary to provide the Services, respond to bona fide customer requests, secure the Services, comply with law, and perform our agreement with the customer.

For data obtained through a Trimble-connected solution:

we do not use that data to develop, train, or improve software, machine-learning models, artificial-intelligence models, AI agents, or agentic services;
we do not use the connection for unauthorized bulk or mass exports, aggregation, or creation of a separate data lake or repository; and
when data is received by Trimble on a customer’s behalf, Trimble’s handling of that data is governed by Trimble’s agreement with the applicable customer and Trimble’s applicable privacy terms.

For data processed through an Autodesk-connected solution:

Autodesk may process customer content at the customer’s request or with the customer’s consent, including instructions transmitted by KanGate on the customer’s behalf;
Autodesk may process that content to provide, maintain, secure, update, modify, and improve Autodesk products and services and in connection with legal obligations, enforcement, investigations, or proceedings;
Autodesk’s processing is governed by Autodesk’s applicable terms and Privacy Statement;
Autodesk may use service providers and process or store information in multiple countries;
Autodesk may collect service-usage metrics, including information about features, storage, metadata, volume, and processing, without treating the underlying customer content itself as a usage metric; and
information deleted from Autodesk systems may remain temporarily in backups, archives, logs, or metering systems under Autodesk’s retention practices.

If a customer enables an integration, the customer instructs KanGate to exchange the information needed to provide that integration. Connected third-party services operate under their own agreements and privacy notices, including Trimble’s Privacy Notice and Autodesk’s Privacy Statement. KanGate does not control how a third party processes information after receiving it under the customer’s authorization.

5. How we disclose information

We may disclose personal information in the following circumstances:

To the customer and its authorized users. Account administrators may access and manage information associated with their organization, users, and projects.
To service providers and subprocessors. We disclose information only to providers actually engaged for functions such as hosting, infrastructure, identity, cybersecurity, communications, customer support, document processing, or professional services. A provider receives only the information reasonably necessary for its contracted function and is subject to appropriate obligations.
To customer-authorized connected services. We disclose information when a customer enables or directs an integration or workflow.
To professional advisers. We may disclose information to lawyers, accountants, auditors, insurers, and similar advisers subject to appropriate duties.
For legal, safety, and security reasons. We may disclose information when we reasonably believe it is necessary to comply with law or legal process; protect rights, safety, systems, or property; investigate fraud, abuse, or security incidents; or enforce agreements.
In a corporate transaction. Information may be disclosed in connection with a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections.
With your direction or consent. We may disclose information for another purpose that is explained when the information is collected or that you authorize.

KanGate does not sell personal information for money. KanGate does not knowingly share personal information for cross-context behavioral advertising. If our practices change, we will update this Policy and provide any legally required choices before the change applies.

6. Aggregated and de-identified information

KanGate does not use Customer Data for generalized product training, advertising, or unrelated analytics. KanGate may use operational information that does not identify an individual, customer, or Authorized User only where the customer agreement, applicable law, and relevant third-party platform terms permit that use. We do not attempt to reidentify information that applicable law requires us to maintain as de-identified.

7. Retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, comply with contractual and legal obligations, resolve disputes, enforce agreements, maintain security and audit records, and support legitimate business needs.

Retention periods vary based on the type and sensitivity of information, customer instructions, the term of the relationship, technical requirements, legal limitation periods, and applicable law. Customer Data is retained and deleted according to the applicable customer agreement and valid customer instructions. Where a connected platform stores information, that platform’s retention terms also apply. Backup copies may remain until overwritten or deleted in the ordinary technical cycle, unless preservation is legally required.

When information is no longer required, we will delete it, de-identify it, or securely isolate it until deletion is practicable.

8. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, acquisition, destruction, loss, alteration, or disclosure. KanGate’s verified product controls include server-enforced project and package authorization, role-dependent permissions, controlled evidence provenance, and traceable current and historical records. Additional safeguards depend on the deployed environment and applicable customer agreement; this Policy does not claim a certification or specific control that KanGate has not verified.

No transmission or storage system is completely secure. You are responsible for protecting your credentials, devices, accounts, and connected environments and for promptly reporting suspected unauthorized access.

If a security incident involves a connected service, KanGate may notify and coordinate with the applicable provider under its contractual obligations. Where legally permitted, a notice that directly or indirectly identifies Autodesk or Trimble may require coordination with or approval from that company before it is issued. This coordination will not delay a notice that applicable law requires KanGate or a customer to provide sooner.

9. Privacy choices and rights

Depending on where you live and subject to legal exceptions, you may have the right to:

know or confirm whether we process your personal information;
access or obtain a copy of personal information;
correct inaccurate personal information;
delete personal information;
restrict or object to certain processing;
obtain certain information in a portable format;
withdraw consent where processing is based on consent;
opt out of certain targeted advertising, sale, sharing, or profiling activities if applicable; and
appeal our decision on a privacy request where applicable law provides that right.

You may opt out of non-transactional marketing email by using the unsubscribe link in the message or contacting us. You will continue to receive necessary account, transaction, service, legal, and security communications.

To submit a privacy request, contact us using Section 15. We may need to verify your identity and authority before completing a request. You may use an authorized agent where permitted by law, but we may require proof of authorization and identity. We will not discriminate against you for exercising a privacy right.

If your request concerns Customer Data controlled by a KanGate customer, identify that customer if possible. We may refer the request to the customer or tell you to contact it directly because the customer determines how that information is handled.

10. U.S. state privacy disclosures

Residents of U.S. states with applicable comprehensive privacy laws may have the rights described above. The categories of personal information we may have collected during the preceding 12 months are described in Section 2; our purposes are described in Sections 3 and 4; and the categories of recipients are described in Section 5.

We do not use or disclose sensitive personal information for purposes that require a right to limit under applicable law unless we provide the required notice and choice. We do not offer financial incentives in exchange for personal information.

Some state privacy laws apply only when an organization meets specific thresholds or when information is processed outside an employment or business-to-business context. We will honor requests to the extent the relevant law applies.

11. International transfers

KanGate is based in the United States. If a customer-authorized workflow or service provider transfers information from another country to the United States or another jurisdiction, privacy laws may differ from those in the original location. Before a transfer requiring a specific legal mechanism, KanGate and the applicable customer will establish the agreement or safeguards required by law.

12. Children’s privacy

The Services are intended for business users and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us without appropriate authorization, contact us so we can investigate and take appropriate action.

Customers must not submit children’s personal information to the Services unless the processing is lawful, necessary for an agreed service, and specifically authorized under the customer’s agreement with KanGate.

13. External links and third-party services

Our websites and Services may link to or integrate with third-party websites, applications, and services. Their privacy practices are governed by their own notices. We encourage you to review them before providing information or enabling an integration.

14. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, our practices, or legal requirements. The effective date above identifies the latest version. If changes are material, we will provide reasonable notice through the Services, by email, on the website, or by another appropriate method before the changes take effect when required by law.

15. Contact us

Questions, privacy requests, and concerns may be sent to:

KanGate, LLC
900 Lincoln Ave.
Pacific Junction, Iowa 51561
United States
Email: jamie@kangatetech.com

If applicable law gives you the right to appeal a denied privacy request, state that you are submitting a “Privacy Appeal” and explain why you believe the decision should be reconsidered.