Privacy Policy

Your organization's records and your account

Panafold One is a CRM used by organizations, such as architecture and design firms ("your organization"). Your organization decides who has an account and what information it keeps in Panafold One. We handle two kinds of information, in two different roles.

Your organization's records. Contacts, companies, notes, files and the other records your organization keeps in Panafold One belong to your organization. We process them on its behalf and under its instructions, to provide the Service. We do not sell them, use them for advertising, or use them for any purpose of our own. If your details are in an organization's records and you have a question about them, please contact that organization. We will help it respond.
Information about you as a user. We handle this to run your account and keep the Service working. It includes your account email address, your account identifier, and diagnostic reports from the iPhone app.

Panafold One is offered to organizations in the United States. Your organization's records and your account information are stored in the United States, in Amazon Web Services' US West (Oregon) region (us-west-2).

Your account

Your organization's administrator creates your account with your email address, and may add your name. There is no sign-up in the Service. We store your account with Amazon Cognito, Amazon Web Services' sign-in service. Your email address is your username.

When you sign in, or ask to reset your password, your email address is sent to Cognito to verify you. Your password is checked by Cognito, and we cannot read it. We keep your account information for as long as your account exists. Your organization's administrator can remove your account.

Panafold One on the web

When you use Panafold One in a browser, we receive information your browser provides, such as the type of browser and device you use, the website you came from (the "referring URL"), and the time and date of access. This information does not identify you on its own. We use it to keep the Service working and to improve it.

The web app uses cookies and your browser's local storage: small files and values your browser keeps for the Service. Session cookies expire when you close your browser. Persistent cookies stay until you delete them. For example, the web app remembers the last signed-in user for easy sign-in, and your display preferences, such as light or dark mode.

Panafold One's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The Panafold One app for iPhone

The app lets you look up your organization's records on your iPhone. In this version it shows records; it does not create or change them.

When you use the app, it connects to:

your organization's Panafold One address, to load its sign-in settings;
Amazon Web Services, to sign you in (Amazon Cognito) and to fetch the records you open or search for (AWS AppSync and Amazon OpenSearch Service);
Sentry, only when the app has an error (see "Crash and diagnostic reports").

What you type into the search box and the filters you choose are sent to answer that request. We do not keep a history of your searches.

The app does not:

show advertising;
use advertising or analytics tools;
track you across other companies' apps or websites;
ask for your location, your phone's contacts, photos, camera or microphone.

If a record contains a link or an image hosted on another website, opening the link, or viewing the note with the image, connects to that website.

Crash and diagnostic reports

When the iPhone app crashes, has an error, stops responding, or is closed by iOS for using too much memory, it sends a report to Sentry. Sentry (Functional Software, Inc.) is a service provider that stores these reports for us in the United States.

A report contains:

technical details of the error (where in the app's code it happened);
the app's version;
your iPhone's model, iOS version and device state at the time, such as available memory;
the type of screen you were on (for example "a contact's page", never which contact);
an identifier for your organization's workspace.

It does not contain your name, email address, account identifier or IP address.

Before a report leaves your iPhone, the app removes email addresses, phone numbers, web addresses, sign-in tokens, record identifiers and quoted text from it. Sentry is set to remove identifiers and IP addresses before it stores a report.

This removal is automatic and very thorough, but not perfect: a report may occasionally include a fragment of text that was on screen when the error happened. We use reports only to find and fix problems in the app. We do not use them to identify you, and we do not combine them with other information to do so. Reports are kept for 30 days and then deleted.

Face ID and the app lock

The app can ask for Face ID, Touch ID or your iPhone's passcode before it opens. That check happens entirely inside iOS. The app is only told whether it succeeded. Your face or fingerprint data never reaches the app, Panafold or anyone else.

So that the app notices if a new face or fingerprint is enrolled, it stores a value iOS provides, which changes when enrolment changes. It is kept only on your iPhone and is never sent anywhere.

Information stored on your iPhone

To keep you signed in, the app stores the following in the iPhone's Keychain:

your sign-in session;
the workspaces you have used, with the email address you signed in with;
a short summary of your workspace's settings (its name, the words it uses for its records, which sections you can open).

Sign-in sessions can be read only while your iPhone is unlocked, and are not copied to another phone. The list of workspaces may be restored from an iPhone backup, signed out.

The app keeps your organization's records in memory while you use it, and does not save them to the iPhone. Removing a workspace in the app deletes what is stored for it. Deleting the app removes the app's data, and the app will not sign back in automatically if it is reinstalled.

Our website, panafold.com

You can browse panafold.com without telling us who you are. The site collects:

Analytics. We use Google Analytics to understand how the site is used: which pages are visited, the site you came from, your browser and device type, and your approximate location, worked out from your IP address. Google Analytics uses cookies to do this. We also use Vercel Web Analytics, which counts page visits without cookies. We look at these figures in aggregate.
Newsletter sign-up. panafold.com uses Mailchimp, our email marketing provider, to show a newsletter sign-up form. If you sign up, Mailchimp stores your email address in our newsletter list. Its script sets cookies to remember whether you've seen or dismissed the form. You can unsubscribe through the link in any newsletter.
Contact form. If you write to us through the contact form, we receive what you enter: your name, email address, phone number, project type and budget, and your message. We store it and send it to our team by email, and use it to reply to you.
Job applications. If you apply for a position, we receive the details and files you send, and use them to consider your application.
Scheduling. The Software page includes a booking calendar from Cal.com. If you book a call, Cal.com collects the details you enter, under its own privacy policy, and passes them to us so we can hold the call.
Fonts. Pages load fonts from Google Fonts and Font Awesome, which receive your IP address in order to deliver them.

We keep contact form messages and job applications until we delete them. You can ask us to delete yours at any time at privacy@panafold.com.

Children's privacy

panafold.com and the Service are not directed to anyone under the age of 13. We do not knowingly collect or solicit information from anyone under the age of 13, or allow anyone under the age of 13 to sign up for the Service. In the event that we learn that we have gathered personal information from anyone under the age of 13 without the consent of a parent or guardian, we will delete that information as soon as possible. If you believe we have collected such information, please contact us at privacy@panafold.com.

Personal information

Except as otherwise stated in this Privacy Policy, we do not sell, trade, rent or otherwise share your personal information with third parties for marketing purposes without your consent. We do share personal information with the service providers listed below, who perform services for us, such as the service that sends our email and so receives your email address. They use it only at our direction and in accordance with this Privacy Policy.

In general, we use the personal information you provide to communicate with you: to answer your questions, ask for your feedback, provide technical support, and send you messages about your account and the Service. We do not send promotional email to Panafold One users, and we do not use your account email address for marketing.

We may share personal information with outside parties if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations; address fraud, security or technical concerns; or to protect against harm to the rights, property, or safety of our users or the public as required or permitted by law.

Non-personal information

We use non-personal information, such as aggregated website statistics and the diagnostic reports described above, to keep the Service and panafold.com working and to improve them. We do not sell it or share it with advertisers. Information from the Service is never used for advertising or to track you across other companies' apps or websites.

Business transfers

In the event we undergo a business transaction such as a merger, acquisition by another company, or sale of all or a portion of our assets, your personal information may be among the assets transferred. You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your personal information as set forth in this Privacy Policy. If our information practices change at any time in the future, we will post the policy changes on this page so that you may opt out of the new information practices. We suggest that you check this page periodically if you are concerned about how your information is used.

Service providers

We use these providers to run the Service and panafold.com. Each may use the information only to provide its service to us:

Amazon Web Services: hosting, sign-in, storage, search and email delivery for Panafold One, and the forms on panafold.com;
Sentry: crash reports from the iPhone app;
Google: address suggestions in the web app (Google Maps Platform), Google services your organization chooses to connect, and analytics and fonts on panafold.com;
Mailchimp: only if your organization connects its Mailchimp account to Panafold One; and the newsletter sign-up form on panafold.com;
Vercel: hosting and page-visit counts for panafold.com;
Cal.com: booking calls from the Software page.

How we protect information

We implement security measures designed to protect your information from unauthorized access. Your account is protected by your account password, and we urge you to take steps to keep your personal information safe by not disclosing your password and by logging out of your account after each use. We further protect your information from potential security breaches by implementing certain technological security measures including encryption, firewalls and secure socket layer technology.

On iPhone, your sign-in session is kept in the iPhone's Keychain, the app can be locked with Face ID, Touch ID or your passcode, and your organization's records are not saved to the phone.

However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such firewalls and secure server software. By using our Service, you acknowledge that you understand and agree to assume these risks.

Your choices and rights

You can ask us for a copy of the personal information we hold about you as a user, to correct it, or to delete it, by writing to privacy@panafold.com. For information in your organization's records, please contact your organization. We will act on its instructions.

To remove a workspace from your iPhone, remove it in the app. This signs you out of it on that iPhone and deletes what the app stored for it. Nothing in the workspace itself is deleted.

You can block or delete cookies in your browser's settings. Parts of the web app, such as staying signed in, may not work without them. To opt out of Google Analytics on any website, you can use Google's opt-out browser add-on.

If you subscribe to a Panafold mailing list on panafold.com, you can stop receiving marketing email at any time by following the unsubscribe instructions in each email, or by writing to privacy@panafold.com. We may still send you administrative messages, such as notice of changes to this Privacy Policy.

Links to other websites and apps

As part of the Service, we may provide links to or compatibility with other websites or applications. However, we are not responsible for the privacy practices employed by those websites or the information or content they contain. This Privacy Policy applies solely to information collected by us through panafold.com and the Service. Therefore, this Privacy Policy does not apply to your use of a third party website accessed by selecting a link on our website or via our Service. To the extent that you access or use the Service through or on another website or application, then the privacy policy of that other website or application will apply to your access or use of that site or application. We encourage our users to read the privacy statements of other websites before proceeding to use them.

In the iPhone app, addresses, phone numbers, email addresses and web links open in Maps, Phone, Mail or Safari, under those apps' own policies.

Changes to this policy

We reserve the right to change this policy and our Terms of Service at any time. We will notify you of significant changes to our Privacy Policy by sending a notice to the primary email address specified in your account or by placing a prominent notice on panafold.com. Significant changes will go into effect 30 days following such notification. Non-material changes or clarifications will take effect immediately. The current policy is always posted at https://www.panafold.com/privacy, with the date it was last updated.

Contact us

If you have any questions about this Privacy Policy or your information, email privacy@panafold.com, or write to Panafold, Inc., 208 Pennsylvania Ave, Unit 001, San Francisco, CA 94107.