Two things up front. This website sets no cookies, runs no analytics, and carries no advertising or tracking pixels — there is nothing here to opt out of. And your drawings are yours: we never use a customer’s plan sets to train models that serve anyone else.

One to Many Corp (“One to Many,” “we,” “us”) builds automated window and door takeoff software. This policy covers two different things: this website, and the plan sets and pricing data customers send us during an evaluation or a paid engagement.

This website

The site is a set of static pages served from Amazon S3 and CloudFront. It sets no cookies. It runs no analytics, no advertising or conversion pixels, no A/B testing, no session recording, and no chat widget. There is no account, no login, and no form to submit. Nothing about your visit is stored in your browser.

Our content delivery network records standard server request logs — IP address, timestamp, requested URL, user agent, referrer — which exist to serve the site and to defend it against abuse. We do not use them to build profiles of visitors.

The site links out to Calendly for booking, to our email address, and to our LinkedIn page. Once you follow one of those links you are on someone else’s service, under their privacy policy rather than ours.

Do Not Track. We honor it by construction: there is no tracking on this site for a signal to switch off.

Booking a demo

Every “Book a Demo” button on this site opens the same Calendly page. What you enter there — your name, your email address, whatever company or context you choose to add, and the slot you pick — goes to Calendly and arrives in our email inbox. We use it to hold the call and to follow up about it.

The links carry a parameter that tells us which page of this site the booking came from. It identifies the page, not you. Calendly acts as our scheduling processor; see the Calendly privacy notice.

Email

If you email us, we keep the message thread and your contact details so we can reply and follow up. That is business correspondence, processed on our legitimate interest in responding to you (GDPR Art. 6(1)(f)). Tell us to stop and we stop.

We run no newsletter and no marketing list. We do not buy contact lists, we do not use data brokers or contact-enrichment services, and we do not send text messages.

Plan sets, pricing data, and AI

This is the part that matters if you are evaluating the product.

What we receive. The drawings, window and door schedules, specifications, catalogs, and price lists you send us so we can run a takeoff, plus the schedules and quotes we produce from them.
Why. To run the takeoff you asked for and return the result. Nothing else.
Who controls it. You do. On that material we act as your processor: we handle it under your instructions and under the agreement between us, and this policy does not override that agreement.
We do not train on your work. Your files, your schedules, and our outputs from them are never used to train or fine-tune models that serve other customers. We do measure our own performance and keep aggregated, de-identified metrics — unit counts, error rates, processing times — that carry no drawing content and cannot be traced back to you or your project.
AI sub-processors. Some steps of the takeoff run on third-party AI infrastructure: Anthropic, OpenAI, and Google (Gemini). They process your material as our sub-processors, under contract, are prohibited from training on it, and are configured for zero data retention where the provider offers it.
Storage. Files are encrypted in transit and at rest, in Amazon’s US East (N. Virginia) region. We delete them on request.
What not to send. Please leave out personal information a takeoff does not need — homeowner details, payroll data, anything sensitive. Redact it before you send the set.

Who else sees your information

Amazon Web Services. Hosting and content delivery for this site; storage for the files you send us.
Calendly. Scheduling demo calls.
Google Workspace. Our business email.
Anthropic, OpenAI, and Google (Gemini). Processing steps inside the takeoff, as described above.

That is the whole list. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we work with no advertising networks.

Beyond those providers we disclose information only where we must: to comply with the law or a valid legal request, to establish or defend legal claims, or to a professional advisor bound by confidentiality. If the business is ever sold or merged, information may transfer to the acquirer, and the terms of this policy follow it.

What we do not collect

Government identification numbers. Payment card numbers — engagements are invoiced, so no card data ever touches our systems. Health, biometric, or precise location data. Anything about children. Please do not submit any of it.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, give you a copy, correct it, delete it, or stop a particular use. In the EU, the UK, and Switzerland you may also object to or restrict processing and complain to your supervisory authority. In California you may know, delete, correct, and opt out of the sale or sharing of your information — there is nothing to opt out of, because we do neither.

Email s@onetomany.us and say what you want. We may ask for enough information to confirm who you are, we answer within the time the law allows (45 days for California requests, one month under the GDPR), and we never treat anyone worse for asking.

If you work for a customer and your information reached us inside a project file, ask that customer first: on their material we act on their instructions. Write to us and we will route the request.

Security

Data is encrypted in transit and at rest. Access to customer files is limited to the people who need it to run your takeoff, through individual accounts with multi-factor authentication. We review the providers listed above before sending them anything. No set of controls is perfect and we do not claim otherwise; if a breach ever affects your data, we notify you and the authorities as the law requires.

Children

The product and this site are for businesses. We do not knowingly collect information from anyone under 16, and we delete it if we learn that we have.

Where we operate

One to Many Corp is a Florida corporation and processes data in the United States. If you are in the EEA, the UK, or Switzerland, your information is transferred there under the European Commission’s Standard Contractual Clauses.

Changes to this policy

We may update this policy. The date at the top always reflects the version in force, and we email active customers before a material change takes effect.

Contact

One to Many Corp, Florida, United States — s@onetomany.us. Privacy questions, requests, and complaints all reach a person at that address.