Privacy Policy
EverCodex Systems LLC, dba Wsec.ai Version: 2026-09-19 Effective Date: 2026-09-19 Last Updated: 2026-09-19
Wsec.ai is operated by EverCodex Systems LLC, a Washington limited liability company ("Wsec.ai," "we," "us," "our"). This Privacy Policy describes how we collect, use, and handle information when you use the Service.
1. No Expectation of Privacy
By using Wsec.ai (the "Service"), you acknowledge that there is no reasonable expectation of privacy in any information you submit, including architectural plans, wizard inputs, chatbot conversations, project details, or other content. All inputs are recorded and stored.
2. Information We Collect
We collect the following categories of information:
- Identifiers — name, email address, account credentials, account ID.
- Commercial information — purchase and transaction history, services accessed.
- Project content — project address, ZIP code, building characteristics, uploaded architectural plans, wizard inputs, chatbot messages, support communications.
- Professional information — contractor license number, company name, role (where you choose to provide them).
- Internet and network activity — pages viewed, time on site, approximate geographic region, device type, browser type, and how you interact with pages (clicks, scrolling, mouse movement, and session replays), collected via Google Analytics 4 and Microsoft Clarity.
- Geolocation — approximate location derived from your IP address and from the project address you submit.
- Payment information — collected and processed by our payment processor; we do not store full card numbers on our servers.
3. How We Use Your Data
We use your data to provide the Service (including AI outputs, the chatbot, optional phone consultations, and optional human plan review), to generate compliance reports, to train and improve our AI models, and to create aggregated insights.
- We may de-identify and aggregate your data (removing names, exact addresses, and other personal identifiers), and we own that aggregated data outright. We may use it for any business purpose, including AI training and industry benchmarks.
- We will not sell, license, or distribute your identifiable individual plans, projects, or wizard inputs to third parties. The boundary is identifiability — anything traceable back to you or your specific project will not be commercialized to outside parties; anonymized aggregate data may be.
- We may share de-identified or aggregated data with service providers who help us operate the platform.
4. Data Retention
We retain your content as long as needed to provide the Service and improve the AI. You may request deletion of your account and associated identifiable data at any time, subject to legitimate business needs and legal obligations.
5. Subprocessors
We use third-party service providers to operate the Service, including providers of AI inference, database and storage, web hosting, transactional email delivery, payment processing, and usage analytics. The specific providers may change over time as our business needs evolve. We do not transfer your data to subprocessors who would use it for their own purposes outside of providing services to us.
6. Security and Sharing
We use industry-standard security measures. However, no system is 100% secure. We may disclose data if required by law.
If you submit material to a government agency (for example, a building department), those records may become public under the public records law of that state — including Washington's Public Records Act (RCW 42.56) and Oregon's Public Records Law (ORS 192.311 to 192.478). We do not control, and are not responsible for, the disclosure of records held by a government agency.
7. Analytics and Cookies
We use two analytics providers.
Google Analytics 4 ("GA4") provides usage statistics. GA4 may set cookies in your browser and transmit aggregated usage data (pages viewed, time on site, approximate geographic region, device type) to Google. We do not use GA4 to identify individual users. You can opt out via Google's browser opt-out add-on. Google's handling of this data is governed by Google's Privacy Policy.
Microsoft Clarity records how pages are used. Clarity captures page interactions — clicks, scrolling, mouse movement — and session replays, which are reconstructions of a visit that we can play back. Consistent with Section 1, replays may include the values you enter into the Service, including project details and jobsite addresses. We use this to find broken and confusing parts of the Service. Microsoft's handling of this data is governed by the Microsoft Privacy Statement, and you can opt out at clarity.microsoft.com. Clarity sets cookies and retains session recordings for approximately 30 days.
We do not currently use third-party advertising cookies, retargeting pixels, or social media tracking.
8. Payment Processing
Paid features are processed by a third-party payment processor. When you make a purchase, that processor collects and processes your payment information (card number, billing address, etc.) directly. We do not store full payment card details on our servers. The processor's handling of this information is governed by its own privacy policy.
9. Your State Privacy Rights
Several states give residents rights over their personal information. Regardless of where you live, and regardless of whether a particular state law applies to us, we extend the following rights to every user of the Service:
- Right to know what categories and specific pieces of personal information we collect about you, how we use it, and with whom we share it.
- Right to delete the personal information we hold about you, subject to legitimate business needs and legal obligations.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing of your personal information — we do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising.
- Right to limit the use of sensitive personal information.
- Right to non-discrimination for exercising any of these rights.
If you are a California resident, these rights are also guaranteed to you by the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), together with a right to appeal a denied request.
If you are an Oregon resident, the Oregon Consumer Privacy Act (ORS 646A.570 to 646A.589) applies to controllers that meet statutory thresholds based on the number of Oregon consumers whose data they process. We do not currently meet those thresholds, so the OCPA does not currently impose obligations on us. We extend the rights listed above to Oregon residents as a matter of policy, and we will comply with the OCPA in full if and when we become subject to it.
If you are a resident of another state with a comprehensive consumer privacy law, we will honor the rights listed above and comply with that law to the extent it applies to us.
To exercise any of these rights, or to appeal a denied request, contact us at support@wsec.ai. We will respond within the timeframes required by applicable law and, where no law sets a deadline, within 45 days.
10. Children's Data
The Service is not intended for users under 18. We do not knowingly collect data from children.
11. Contact
Questions about this Privacy Policy can be sent to: