R-Zero Privacy Policy

Last updated: June 1, 2026

At R-Zero Systems, (“R-Zero”, “we”, “our”, or “us”), the privacy of our Customers is of the utmost importance. Thank you for taking the time to read our privacy policy (the “Privacy Policy”). R-Zero is a healthy building technologies company that provides products and services (collectively, the “Services”) to enterprises developing or managing real estate properties. This Privacy Policy sets out how we collect, use, process, store, and disclose your personal information on https://www.rzero.com (the “Website”) and the Services.

By accessing and using our Services you freely and expressly consent to the collection, use, processing, storage, and disclosure of your personal information as set out in this Privacy Policy and our Terms of Service.

Interactions with the Products and Services
Information We Collect
How We Use Your Personal Information
How We Disclose Your Personal Information
Your Privacy Choices
Use of Cookies and Tracking Technologies
Jurisdiction-Specific Privacy Rights
Security
Retention
Changes To This Privacy Policy
Contact Information

Interactions with the Products and Services

To the extent that R-Zero processes customer data in response to interactions with our smart building products and services, we process that data via our contract with our Customer, not via this Privacy Policy. Solely for convenience, we provide the following information about our data collection:
- Camera information. Certain R-Zero sensors include camera technology to assist with building operations, such as determining whether people are present in a particular area of a building and how many people are present. Depending on the sensor type, this may include thermal imaging, which is inherently incapable of producing identifiable images of individuals. Where optical cameras are used, all images are processed entirely on the sensor device itself by on-board artificial intelligence and are converted into anonymous, aggregate data (such as occupancy counts and directional movement). No image data is transmitted from the sensor, stored in our cloud systems, or accessible to any person, including R-Zero or our Customers. Only anonymous operational data, such as occupancy status and count totals, is transmitted from the sensor for use in our Services. Our sensors do not provide any capabilities for video monitoring or surveillance, and are not designed or intended to identify individuals.
- Proximity and other sensors. Our sensors may categorize whether a person or item is in a particular workspace, and enable our Customers to use this categorical information to determine whether and how the workspace is occupied.
If you are a current or former employee or site visitor of one of our Customers and would like to exercise your privacy rights with respect to any information collected through our sensors or other technologies, please contact a representative of that Customer. We cannot provide personal information about a specific individual on behalf of a Customer.

We provide more information about sensor privacy by design on our Blog.
Information We Collect

Information you provide:

Inquiries. We collect information from your inquiries into our services, or how you otherwise indicate you may be interested in our services, which may include signing up for email communications or providing us with your name, work email, phone number, company name, and title.

Account Creation. When an organization enters into an agreement for our Services (become a “Customer”), we collect contact details such as your name, email address, phone number, and professional information such as company and title.

Payment Information. We may collect data necessary to process your product or service purchases, such as your credit card number, or other financial instrument used to make a payment. We use a third party payment processor to store and process payment information.

Information we automatically collect through our website:

Metadata and Analytics. We collect metadata and analytics of your use of our Website, including IP address and approximate geographic location derived from it, device information, date/time of visits, new or returning visits, products viewed, page response times, URL clickstreams, referring URLs, how long you stay on our pages, what you do on those pages.

Information from third parties:

Demographic or Other Third Party information. We may collect information from third party data brokers, including firmographic and demographic information about our current or prospective customers. This may include attempts to identify business visitors to our websites. See below for more information about "Cookies and Tracking Technologies."

Social Media Activity. When you interact with our accounts on a social media platform such as LinkedIn, we may collect certain information that you or the platform makes available to us such as your social media account profile, social media "likes", click-throughs to our Website, or custom interactions.

Our Website and Services are designed for business professionals. We do not offer products and services to individual consumers, and we do not intentionally collect any personal information from minors under the age of 18. If you believe we have obtained personal information associated with children, please contact us at privacy@rzero.com and we will delete it.
How We Use Your Personal Information

We use the personal information we collect for the following purposes:
- To provide, manage, operate, and improve our Services.
- To manage Customer relationships, including negotiating agreements, facilitating account creation and managing user accounts.
- To respond to contact form inquiries and facilitate potential business conversations.
- To conduct business operations in support of our services, such as auditing, security, fraud prevention, invoicing and accounting, sales and marketing, analytics, debugging, troubleshooting, and research and development, including to maintain business records.
- To perform analytics, identify usage trends, and otherwise measure all activities on the Services, including to understand how visitors use our Website and to improve its content and functionality.
- For customer support, including via email.
- To communicate with you, including via our newsletter or to request feedback.
- To comply with laws, regulations, and other legal processes and procedures, and to establish, exercise, or defend our legal rights.
- To provide services to our Customers, or otherwise at your direction or with your consent.
How We Disclose Your Personal Information

We do not sell personal information, and we have not sold Personal Information in the preceding 12 months. We share personal information only in the following circumstances:

Customer Instruction. We share personal information at your direction or with your consent.

Service Providers. We share personal information with vendors and service providers that perform functions on our behalf, including cloud hosting, data analytics, AI, customer support and communications, and marketing technology services. These parties are authorized to use personal information only as necessary to provide their services to us and are subject to appropriate confidentiality, training limitations, and data protection obligations.

Third-Party Analytics Technology Providers. As described in "Cookies and other Tracking Technologies" below, certain third-party analytics technologies that operate on our Website independently collect and process information about your visit to our Website, subject to their own privacy policies and terms of service.

Legal Compliance and Protection. We may share information with external parties when complying with legal process (eg; subpoena), to protect our intellectual property and other legal rights, to prevent fraud or imminent harm, and to secure the use of our Services. We reserve the right to disclose information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a law enforcement order, such as a search warrant, judicial proceeding, or court order. We may also retain and use information as necessary to comply with our legal obligations, resolve disputes, and enforce our Terms of Service.

Other Group Entities. We may disclose your Personal Information to our other R-Zero group companies, including third-party employers-of-record (EOR), to provide you with tailored services and communications, or in accordance with our business administrative practices. Some of these may be abroad outside the USA. Additionally, we may share your provided log files with these group entities and other service providers or contractors located in other countries or jurisdictions for select technical issues.

Business Transfers. In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, personal information may be transferred as part of that transaction, subject to standard confidentiality protections. We will endeavor to notify any Customers via email and/or a prominent notice on the Services of any completed change in ownership or materially different uses of personal information. This Privacy Policy will become binding upon the new owner of the information until amended.

Anonymous Data. We may use and disclose anonymous or aggregated information about our Customers to any external parties, including current and potential business partners/affiliates, investors, or the public, or use it for research or analytics purposes.
Your Privacy Choices

R-Zero provides you with the ability to exercise the following choices with our use of your personal information:
- Access the personal information we maintain about you.
- Delete the personal information we maintain about you.
- Correct inaccurate personal information we maintain about you.
- Opt out of certain uses of your personal information, notably, you can unsubscribe to our email list by clicking the unsubscribe link at the bottom of marketing emails.
You can exercise these rights by contacting us at privacy@rzero.com. We will verify your identity before responding and will respond within the timeframe required by applicable law. If we decline to act on a request, we will inform you of our reasons and, where required by law, provide information about how to appeal our decision.

In addition, if you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.
Depending on where you are located, you may have additional rights with respect to your data. Please see Section 7, “Jurisdiction-Specific Privacy Rights,” below.

Use of Cookies and Tracking Technologies

Our Website uses cookies and similar tracking technologies like web beacons and pixels (“cookies”) to access or store information for functional and analytics purposes.

We display a cookie consent banner when you first visit our Website and, where required by applicable law, we obtain your consent before placing non-essential cookies. You may control your cookie preferences using this banner or by sending us an opt-out signal like Global Privacy Control. In addition, you may manage cookies through your browser settings, though doing so may affect your experience on the Website.

In addition to browser-based opt-out mechanisms, you may opt out of certain interest-based advertising practices through the Network Advertising Initiative opt-out tool at optout.networkadvertising.org and the Digital Advertising Alliance opt-out tool at optout.aboutads.info.

We currently use the following third-party technologies on our Website, and you may also visit them directly to manage your preferences.

Third Party Advertising Services
Google	Google Advertising Opt Out (https://support.google.com/ads/answer/2662922)
Meta (Facebook)	Facebook Advertising Preferences (https://www.facebook.com/help/568137493302217)
Zoominfo	Zoominfo Privacy Choices (https://www.zoominfo.com/legal/privacy-policy#your-choices)
Adobe Marketo	Adobe Privacy (https://www.adobe.com/privacy)
LinkedIn	LinkedIn Privacy (https://www.linkedin.com/legal/privacy-policy)

Jurisdiction-Specific Privacy Rights

Depending on where you are located, you may have specific privacy or data protection rights.

EEA, UK, and Switzerland (GDPR and UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland and personal data about you is processed by R-Zero in connection with your visit to our Website, you have the rights enumerated in Section 5, as well as the right to data portability. You may contact us at privacy@r-zero.com to exercise your rights.

Legal Basis:

Our lawful bases for processing personal data include:

Processing Activity	Legal Basis under GDPR
Providing our Services	Contract Fulfillment
Processing and Responding to Contract Form Submissions	Contract Fulfillment
Improving our Website and Services	Legitimate Interest
Product, Marketing or Service-Related Communications	Legitimate Interest
Customer Support	Contract fulfillment
Protecting the security and integrity of our Website and business	Legitimate Interest
Cookies and Other Tracking Technologies	Legitimate Interest or Consent, essential cookies where required

Our Role:

Under the GDPR, we act as a controller for all information collected through this website.

We act as a processor, and not a controller, for any information provided by our Customers through our Services, to the extent that any information may constitute personal information.

Cross-Border Data Transfers:

R-Zero is headquartered in, and stores all data in, the United States. If you are a resident of the EEA, the UK, or Switzerland, please be aware that your information will be transferred to and processed in the United States, which may have data protection laws that differ from those in your country.

When we transfer your data to other countries, we will protect the data as described in this Privacy Policy and comply with applicable legal requirements providing adequate protection for the transfer of data to countries outside the EEA, UK, and Switzerland. We rely on Standard Contractual Clauses (“SCCs”), as well as the UK"s International Data Transfer Addendum to the SCCs, to provide appropriate safeguards.

For more information on cross-border transfers of your Personal Data or the appropriate safeguards in place, please contact us at privacy@rzero.com.

Additional Rights for UK or European Economic Area Residents:

In addition to the rights granted above, if you are a UK or EEA resident, the GDPR grants you the right to lodge a complaint against us with your local data protection authority. You can find your data protection authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

Canada (PIPEDA)

If you are located in Canada, you have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including the rights enumerated in Section 5. You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada.

We collect, use, and disclose personal information about individuals in Canada only with appropriate consent, which may be express or implied depending on the sensitivity of the information and the circumstances of collection, or as otherwise permitted or required by law. We identify the purposes for which personal information is collected at or before the time of collection and use it only for those purposes. We collect only the information necessary for those identified purposes.

United States (State-Specific Privacy Rights)

Several U.S. states have enacted comprehensive privacy laws. This section addresses rights available under laws including, without limitation, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA); the Virginia Consumer Data Protection Act (VCDPA); the Colorado Privacy Act (CPA); the Connecticut Data Privacy Act (CTDPA); the Texas Data Privacy and Security Act (TDPSA); the Illinois Biometric Information Privacy Act (BIPA); and comparable legislation enacted in other states.

Under these laws, you have the rights enumerated in Section 5, as well as the right not to be discriminated against for exercising your privacy rights. To exercise any of the rights listed above, please contact us at privacy@rzero.com.

We do not collect sensitive personal information as defined under the CPRA or other privacy laws. The information collected through R-Zero cameras and sensors are not considered to be "biometric data" as defined by any U.S. law, including BIPA, due to the privacy controls used by R-Zero to obfuscate any imagery or unique characteristics associated with individuals.

No Sale of Personal Information. We do not sell personal information as that term is defined under applicable state privacy laws.

Additional Disclosures for California Residents

Categories of Personal Information Collected. Within the preceding 12 months, we have collected the following categories of personal information:

Identifiers (such as name, email address, IP address, and device identifiers)
Professional or employment-related information (such as company name and job title)
Internet or other electronic network activity information (such as browsing activity on our Website)
Geolocation data (approximate, derived from IP address)

Our Role. We act as a business for all information collected through this website. We act as a service provider for any information provided by our Customers through our Services, to the extent that any information may constitute personal information.

Categories of Sources. We collect personal information directly from you (via the contact form, order form, and service agreement) and automatically through cookies and tracking technologies operated by us and our third-party providers.

Business or Commercial Purpose for Collection. We collect personal information for the purposes described in Section 3 of this Privacy Policy.

Categories of Third Parties with Whom We Share Personal Information. We share personal information with service providers, including third-party analytics technology providers.

Retention Periods. See Section 10.

Shine the Light. California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for their own direct marketing purposes. We do not make such disclosures.

Security

We protect information we collect about you by maintaining physical, electronic and procedural safeguards designed to prevent unauthorized access to user data retained in our servers, however, due to the inherent open nature of the internet, we cannot ensure or warrant the security of any information provided online. We take reasonable precautions to protect your information both online and offline. The servers on which we store data are kept in a secure environment.
Retention

We will retain your Customer information for as long as your account or inquiry is active or as needed to provide you with the website or any requested services, and for a reasonable time thereafter in accordance with our standard procedures or as necessary to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Even if we delete some or all of your personal information, we may continue to retain and use aggregate or anonymous data previously collected and/or anonymize or aggregate your Personal Information. Please note that we will not be liable for disclosures of your data due to errors or unauthorized acts of third parties.
Changes To This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will communicate directly with you via email and/or post the updated Privacy Policy on this page with a “Last Updated” effective date of the revisions. We encourage you to look for updates and changes to this Privacy Policy by checking this page when you access our Services.
Contact Information

If you have any privacy-related questions, you can contact us at privacy@rzero.com or

R-Zero Systems, Inc.
595 Pacific Ave. Floor 4
San Francisco, CA 94133
+1 (801) 823-0314 (United States)