Privacy Policy
How Heron Networks LLC collects, uses, and protects your data in the Demarc platform.
Heron Networks LLC (“we”, “our”, “us”) operates the Demarc platform (“Demarc”), which includes the web application at app.getdemarc.com, the Demarc iOS app, and the Demarc Android app (collectively, the “Service”). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
Information We Collect
When you use Demarc, we may collect the following categories of information:
- Account information: Email address, organization name, and a hashed password when you register.
- Project data: Project names, site addresses, floor plan images, cable run records, test result CSV files imported from Fluke LinkWare, photos of cable installations, daily field logs, punch list items, BOM entries, and any other data you upload or create within a project.
- Generated documents: Warranty PDF packages and as-built closeout packages generated from your project data.
- Usage data: Basic analytics about feature usage (e.g., which sections of the app are used), error logs, and session data. We count visits to our public pages with Cloudflare Web Analytics (details under Cookies and Tracking below). We also keep daily totals of sign-ups, first projects, checkout starts and failed payments, with no visitor identifier. We do not track individual authenticated-user behavior across the web.
- Payment information: Billing is handled by Stripe. We do not store card numbers or payment method details. Stripe's privacy policy applies to payment processing.
- Device information: For mobile app users, device type, OS version, and app version may be logged for debugging purposes.
How We Use Your Information
- To provide and operate the Demarc Service, including storing your project data and generating documents.
- To send transactional emails: account confirmation, password reset, subscription notifications, and calibration alerts you have opted into.
- To diagnose errors and improve the product based on usage patterns (aggregated, not individually identifiable).
- To process payments via our payment processor (Stripe).
We do not sell your personal information or project data to third parties. We do not use your project data to train AI models.
Data Storage and Security
Your data is stored on servers hosted at Fly.io within the United States. All data in transit is encrypted via TLS 1.2 or higher. Data at rest is encrypted on managed storage volumes.
Access to customer data is restricted to personnel who need it to operate and support the Service. We do not share customer project data with third parties except as required to operate the Service (e.g., the database provider) or as required by law.
Data Retention
We retain your account and project data while your account is active. If you cancel your subscription, your account switches to read-only mode — your data remains accessible for export but no new data can be added. You may request full deletion of your account and associated data at any time by contacting [email protected]. Deletion requests are processed within 30 days.
Your Rights
Regardless of your location, you may:
- Access your data at any time from within the Demarc dashboard.
- Export your project data and generated documents at any time. All exports are available without limitation, including after cancellation in read-only mode.
- Correct your account information from within Settings.
- Delete your account and all associated data by contacting us at [email protected].
If you are located in the European Economic Area (EEA), you may have additional rights under the GDPR. Contact us at the address below to exercise any of these rights.
Cookies and Tracking
We count visits to our public pages with Cloudflare Web Analytics. It sets no cookies, uses no local storage and does not fingerprint visitors. For each page view Cloudflare records the page address, the referring site, the browser, operating system and device type, and the country (derived from the IP address, which is not kept for analytics). We see only totals, never an individual visitor. It is not loaded inside the signed-in app or the client portal.
We use no Google Analytics, no advertising pixels and no cross-site trackers, so there is no cookie banner. Separately, we keep daily totals of sign-ups, first projects, checkout starts and failed payments; these are counts by day and event only, with no visitor identifier.
The authenticated web application uses session cookies required for login. These cookies are HttpOnly and Secure. No third-party advertising cookies are set by the application.
Children's Privacy
Demarc is a professional B2B tool intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
Service Providers
We use these providers to run Demarc; each receives only what its job needs:
- Render — application hosting and the managed database that stores your account and project data.
- Cloudflare R2 — storage for uploaded files (photos, floor plans, generated PDFs).
- Brevo — delivers transactional email (the recipient address and the message).
- Stripe — payment processing.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to account holders. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the Service after a change constitutes acceptance of the updated policy.
Contact Us
Questions about this Privacy Policy or your data? Contact us:
Heron Networks LLC
Email: [email protected]
Business phone: (703) 249-9248