Four Stripes LLC Privacy Policy

Effective Date: October 12, 2026

Four Stripes LLC (“us,” “we,” “our,” the “Company,” or “Four Stripes”) publishes this Privacy Policy to describe our practices regarding the collection, use, and disclosure of information in connection with our web-based application, website, and related online services, including any artificial intelligence-enabled features made available through the Services (“AI Features”).

This Privacy Policy is applicable to information obtained in the course of our business, including through our website, our web-based application, social media accounts, communications you may have with Four Stripes, and other services (collectively, the “Services”). This Privacy Policy does not apply to any third-party products, services, or websites that you may access in connection with using the Services, including any third-party AI provider you choose to connect through the MCP Connector described in Section 1(h), which may have data collection, storage, and use practices and policies that differ materially from this Privacy Policy. This Privacy Policy supplements and is incorporated by reference into the Four Stripes Terms of Service (the “Terms”). Terms not defined herein shall have the meaning set forth in the Terms.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.

As used in this Privacy Policy, “you” and “User” refer to anyone who accesses or uses the Services, including: (i) Team Members, meaning individuals who are employees or personnel of a subscribing firm and who hold an internal role (Owner, Admin, Team Leader, or Team Member); (ii) External Collaborators, meaning builders, architects, subcontractors, or similar individuals who are invited by a subscribing firm to access limited, project-specific areas of the Services; and (iii) Clients, meaning individuals or households who receive services from a subscribing firm and who may view certain project information through a Client Portal, as described in Section 1(g) below, without creating an account.

Our Relationship With You

Depending on how you use the Services, Four Stripes may act either as a data controller or as a data processor (or “service provider,” under certain U.S. state privacy laws) with respect to your information. Where a subscribing firm (a “Workspace”) has engaged Four Stripes to provide the Services to its Team Members and Clients, that subscribing firm is the controller/business responsible for the Personal Information submitted to or stored within its Workspace, and Four Stripes acts as a processor/service provider on its behalf. In that case, the Workspace’s own Owner or Admin determines how long information is retained, who may access it, and may restrict, suspend, or terminate a Team Member’s access, view records of a Team Member’s or Client’s use of the Services, and export or delete Workspace data, subject to our agreement with that firm. If you register for an account directly with Four Stripes and are not part of a subscribing firm’s Workspace, Four Stripes acts as the controller/business of your Personal Information for purposes of this Privacy Policy.

1. Types of Information Collected

a. Personal Information

“Personal Information” is information that identifies, relates to, or is reasonably linkable to you. In registering for a Four Stripes account, using our Services, contacting us directly, or interacting with us on social media, you may provide us with certain Personal Information, including your name, email address, and mailing or physical address.

To provide the Services, the Application also records the information users enter and the actions they take within it (“Activity Data”). Activity Data includes each user’s name, email address, firm or Workspace, and role, and a record of which user created, updated, completed, or commented on which project, task, file, or other record, and when. Activity Data is visible to the Workspace’s Owner and Admins, as described in “Our Relationship With You,” and to authorized Four Stripes personnel with administrative access who need it to operate, support, and secure the Services.

b. Account and Subscription Information

“Account Information” is information collected in connection with your Four Stripes subscription account, which we collect and store directly through our website and web-based application. Account Information may include the type of subscription, billing method, effective dates of the subscription, username and password (“Subscription Information”), and records of your interactions with our Services, such as customer service communications, purchase history, and preferences.

c. Payment Information

“Payment Information” is information collected to process payments for our Services, such as a credit or debit card number and related billing details. Payments made through the Services are processed by our third-party payment processor, Stripe. Four Stripes does not directly store full payment card numbers; our payment processor handles payment data in accordance with applicable payment card industry standards, and we may retain limited information such as the last four digits of your card and your billing name and address to identify your payment method and maintain transaction records.

d. Traffic Data

“Traffic Data” is information that internet browsers send whenever you visit or use the Services, as well as other generic user information gathered through commonly used information-gathering tools, such as cookies and web beacons. Traffic Data may include your device’s Internet Protocol (“IP”) address, browser type, operating system, device identifiers, pages viewed, referring/exit pages, and timestamps.

e. AI Interaction Data

The Services currently offer two AI Features: (1) Finish Schedule import, which reads a finish schedule you upload and maps its fields to the corresponding fields in the Services; and (2) weekly summaries, which generate a summary of Workspace activity for a user who sets up the weekly summary email. When you use an AI Feature, the content you submit or that the feature draws on, such as an uploaded file or Workspace project data (“Inputs”), is sent to our AI service providers, and a response is generated in return (“Outputs,” and together with Inputs, “AI Interaction Data”). AI Interaction Data may include Personal Information if it is contained in the Inputs.

Four Stripes does not store Inputs or Outputs after the requested Output is generated, except that (i) the results of a Finish Schedule import become part of your Workspace data once you complete the import, and (ii) a weekly summary that is saved as a draft is stored within the Workspace and is visible only to authorized users of that Workspace.

f. Analytics and Product Usage Data

We use analytics tools to understand how the Services are used so that we can maintain and improve functionality, identify popular features, and make informed decisions about updates.

In-app product analytics. Within the Application, we use Mixpanel to record how features are used, such as pages visited, features used, and session duration.Mixpanel receives a workspace identifier and a project identifier with each event, along with technical information that Mixpanel collects automatically, such as IP address, device and browser type, and approximate location (city and country) derived from IP address. We do not send names or email addresses to Mixpanel.

Website analytics. On our public website, we use Google Analytics and Microsoft Clarity, which may collect information such as pages visited, click and scroll behavior, device type, IP address, and approximate location to help us understand traffic and usability. More information is available in Google’s and Microsoft’s privacy policies.

We will update this Privacy Policy to reflect any material change in the analytics providers we use. If you do not wish to participate in analytics tracking, you may adjust your cookie preferences through the cookie banner on our public website, use your browser’s opt-out tools or settings, or contact our support team at support@myfourstripes.com.

g. Client Portal Information

Where a subscribing firm chooses to share project information with its clients, we generate a unique, token-based link (the “Client Portal”) that allows a client to view designated project information, such as project status, timelines, files, and communications, without creating a Four Stripes account or otherwise authenticating with the Services. A Client Portal link remains active until the subscribing firm revokes it or generates a new link. Personal Information accessible through a Client Portal is entered and controlled by the subscribing firm, and Four Stripes processes this information on the firm’s behalf in accordance with this Privacy Policy.

h. MCP Connector and Third-Party AI Tools

The Services offer a Model Context Protocol connector (the “MCP Connector”) that allows an individual user to connect an AI assistant or provider of their own choosing (for example, Claude or ChatGPT) to their Four Stripes account. When you use the MCP Connector, your chosen AI provider can access only the Workspace data that you are permitted to access within the Services, and cannot access data belonging to other users or Workspaces. The prompts you enter and the responses you receive are exchanged between you and your AI provider; Four Stripes does not receive, view, or store them. Your AI provider’s collection, retention, and use of that information, including whether it is used to train models, is governed by your agreement with that provider and your settings with it, not by this Privacy Policy. We encourage you to review your AI provider’s privacy settings before connecting it.

2. Legal Basis, Use and Retention of Information

a. Use of Information Collected

We may process your Personal Information for the purposes identified in this Privacy Policy, pursuant to the following legal basis: (1) with your consent, (2) for compliance with a legal obligation, (3) for the performance of a contract to which you are party, (4) in order to protect your interests, or (5) when we have determined in our discretion that it is necessary for the purposes of the legitimate interests pursued by Four Stripes or a third party to whom it may be necessary to disclose information and such processing is not contrary to law.

Your Personal Information may be used for our legitimate interests in operating and improving our business and Services, including to: provide our Services, products, and other offerings to you; establish, manage, and administer your subscription and account; personalize and improve your experience, including through AI Features; respond to requests and inquiries; optimize our website and customer experience; provide customer support; inform you about our products and services; and ensure that our operations are conducted in an appropriate and efficient manner. We may also use your Personal Information to perform analytics, to protect against and prevent safety and security issues, fraud, and other criminal activity, and to comply with and enforce applicable legal requirements, relevant industry standards, and our policies and terms. Personal Information is also used to send important notices, such as communications about your subscription and changes to our policies. Because this information is important to your interaction with Four Stripes, you may not opt out of receiving these communications.

Although the analytics data we send to Mixpanel does not include names or email addresses, Four Stripes can link its workspace and project identifiers back to the corresponding Workspaces and accounts within our own systems. We do this internally to analyze how the Services are used, troubleshoot and resolve issues, improve features, and contact specific users or Workspace Admins about problems affecting their account. We do not share this linked information with third parties for analytics or advertising.

We may aggregate and/or de-identify information collected through the Services (for example, statistics about how many Workspaces, projects, or tasks are created) so that it can no longer reasonably be used to identify you or your device. We may use, disclose, and share such aggregated or de-identified information for any business purpose, including research, product improvement, and marketing, without further restriction under this Privacy Policy.

b. Use of AI Interaction Data

We use AI Interaction Data solely to provide the AI Feature you request: to map the fields of an imported finish schedule, or to generate a weekly summary.

We do not use AI Interaction Data to train or fine-tune any artificial intelligence or machine learning models. Our AI service providers process AI Interaction Data solely to generate the requested Outputs on our behalf and do not retain it or use it to train their models.

Four Stripes personnel and contractors do not review AI Interaction Data, except where needed to investigate a support request you make or a suspected security or abuse issue, using the logs described in Section 1(e). Inputs and Outputs are not retained by Four Stripes after the Output is generated, except as described in Section 1(e) (completed imports and saved summary drafts, which are retained as Workspace data under Section 2(c). Our AI service providers process AI Interaction Data solely to generate the requested Outputs on our behalf and do not retain it or use it to train their models.

If any AI Feature is used to make or support a decision that produces a legal or similarly significant effect concerning you, additional rights and disclosures applicable to California residents are described in the “Automated Decisionmaking Technology” section below.

c. Retention of Information

We retain the information we collect for as long as you have an active subscription account with us, so that we can service your subscription and the Services efficiently. If a subscription is canceled or lapses, we retain Workspace data for ninety (90) days to allow the subscribing firm to reactivate its account or export its data, after which it is permanently deleted or de-identified from our active systems. Should you request to deactivate your account or to erase your Personal Information, we will delete or de-identify the Personal Information you have provided within thirty (30) days of verifying your request. AI Interaction Data is handled as described in Sections 1(e) and 2(b). Retention periods may be extended if we are required to preserve information because of litigation, investigations, or similar proceedings, or if a longer retention period is required or permitted by applicable law, including for accounting and tax records.

3. Third Parties

We do not sell, otherwise disclose, or share the data we collect about you except as described in this Privacy Policy. We may share your personal data with third parties as described below. A current list of the categories of subprocessors and third-party service providers we use to help operate the Services, including the AI service providers, analytics providers, and productivity integrations described below, is available upon request by emailing support@myfourstripes.com.

a. Business Affiliates

We may share your data with our affiliates, subsidiaries, and parent companies (“Affiliates”) for the purpose of any necessary collaboration. In addition, if Four Stripes is involved in a merger, acquisition, or asset sale, your Personal Information and data may be transferred as a business asset.

b. Independent Contractors

In certain circumstances in the performance of the Services, Four Stripes may rely on independent contractors who may have access to certain Personal Information. Four Stripes’s policies for independent contractors prohibit them from disclosing, transferring, selling, or using for their own benefit the Personal Information of any subscribers of Four Stripes. Four Stripes requires contractors with access to Personal Information to agree in writing to protect it and to use it only to perform services for Four Stripes.

c. Payment Processors

Four Stripes relies on third-party payment processor Stripe to process subscription payments made through the Services. This third-party processor may collect certain Payment Information from you directly, including your name, email address, and billing information. The use and privacy of your Payment Information is also governed by the applicable payment processor’s terms, conditions, and privacy policy.

d. AI Service Providers

To power the AI Features described in Section 1(e), we route requests through Vercel’s AI Gateway to Anthropic, PBC, which provides the underlying AI model. We may change or add AI service providers from time to time and will update this Privacy Policy to reflect any material change. Our AI service providers process AI Interaction Data solely to generate the requested Outputs on our behalf and do not retain it or use it to train their models. AI providers that you connect yourself through the MCP Connector are not our service providers; see Section 1(h).

e. Consultants or Vendors

Four Stripes may engage certain third parties, including without limitation information technology consultants or vendors, who may process data submitted to Four Stripes to perform certain business-related functions and to improve the performance of our Services. Depending on the circumstances of the services provided by a particular consultant or vendor, we may provide them with information including Personal Information, Account Information, and Traffic Data in connection with their performance of such functions.

f. Business and Productivity Integrations

We may connect certain third-party business and productivity tools to the Services at your firm’s direction, including QuickBooks Online, which may be used to sync invoices, payments, and client billing details, and Google drive, which may be used to sync company activities and scheduling information. These providers process the information necessary to perform the connected function and are subject to their own privacy policies and terms.

Google user data. If you connect a Google account, we access only the Google data needed for the features you turn on, such as drive files. Four Stripes’ use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, or use it to train AI models, and we do not allow people to read it except with your consent, for security purposes, or to comply with law.

g. Hosting, Infrastructure, and Email Providers

We use the following service providers to host and operate the Services: Sentry, Vercel (hosting, file storage, serverless functions, and the AI gateway described in Section 3(d)); Neon (database); Resend (delivery of account, notification, and weekly summary emails); N8N (forms)and Clerk (sign-in and account authentication). These providers process Personal Information and Workspace data only to provide their services to us.

4. Cookies and Tracking Technologies

Four Stripes relies on one or more third-party service providers to host and operate its website and web-based application. Those providers, along with the analytics providers described in Section 1(f), may implement the collection of cookies, pixels, local storage, and similar tracking technologies in the course of operating the Services. Cookies are files with a small amount of data that may include an anonymous unique identifier. They are sent to your browser from a website and transferred to your device. Although Four Stripes does not directly control cookie data from users, it is possible that Four Stripes may have access to cookies from the providers who host and operate the Services. Cookie data is used in the operation of the Services, including to remember your preferences, keep you logged in, and understand usage patterns, and for the advertising purposes described below.

You can manage your cookie preferences through the cookie banner on our public website or through your browser settings, which apply on both our website. Please note that disabling certain cookies may affect the functionality of the Services.

We also allow advertising partners, such as Meta, LinkedIn, and Google, to place pixels and similar technologies on our public website for advertising and analytics purposes, including measuring the effectiveness of our marketing and showing you more relevant ads about our Services when you visit other websites. Under certain state privacy laws, this may be considered “sharing” Personal Information for cross-context behavioral advertising, “targeted advertising,” or a “sale.” We do not sell Personal Information for money. You can also opt out of non-essential cookies, including advertising and analytics cookies, at any time through the cookie banner on our public website or your browser settings, or by enabling the Global Privacy Control signal described in the U.S. State Privacy Rights section below.

5. Opting Out of Communications

Four Stripes relies or may rely on third-party companies to manage the administration of bulk electronic communications, such as promotional email, text message, or other communications. Four Stripes requires that such email service providers offer you the ability to opt out of receiving these communications. If you continue to receive unwanted communications after opting out, please contact Four Stripes so that we can raise the issue with the electronic communications provider(s).

6. Compliance with Law

We will disclose your Personal Information where required to do so by law or subpoena, or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Services. Where we receive a subpoena, court order, or other legal request for your Personal Information, we will make reasonable efforts to notify you or the applicable subscribing firm’s Workspace Admin before disclosing the information, so that you or they may have an opportunity to seek protective relief, unless we are prohibited from doing so by law or court order, or we believe in good faith that notice would create a risk of injury to any person, risk to the integrity of our Services, or would be otherwise inappropriate under the circumstances (for example, in cases involving suspected fraud, abuse, or an emergency).

7. Data Across Borders

Our Services are operated primarily in the United States. If you are located outside of the United States, please be aware that any information you provide to us will be transferred to and stored in the United States, where data protection laws may be different from those of your country of residence. By using the Services and providing us with your Personal Information, you consent to our collection, transfer, storage, and continued use of your Personal Information in accordance with this Privacy Policy.

8. Review and Correct Personal Information

You can make a request to review and correct your Personal Information collected via our website or the Services by emailing us or by accessing and reviewing your account settings directly on our website. We may take steps to verify your identity before providing you with access to your Personal Information.

9. Children’s Privacy

The Services are intended for business use by individuals who are at least eighteen (18) years old. Our Services are not directed at anyone under the age of thirteen (13), and we do not knowingly collect personal information from anyone under the age of thirteen (13). Additionally, you must be over the minimum age required by the laws of your country to consent to the processing of your personal data in order to use our Services.

10. Security

Four Stripes undertakes reasonable efforts to implement and maintain administrative, technical, and physical security measures appropriate to the nature of the information we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure. Four Stripes relies extensively on the expertise and technology of third-party providers, including our AI service providers, to facilitate such security. Please be aware that no method of transmission over the internet, or method of electronic storage, can be absolutely guaranteed to be secure, and as such we are unable to guarantee the absolute security of Personal Information.

11. Automated Decisionmaking Technology

Four Stripes does not currently use Automated Decisionmaking Technology (“ADMT”), as defined under California law, to make decisions that produce a legal or similarly significant effect concerning you, such as decisions affecting access to services, pricing, eligibility, or fraud determinations. The only automated processing performed by our AI Features is (i) mapping the fields of an imported finish schedule to the corresponding fields in the Services, which you can review before completing the import, and (ii) generating weekly summaries of Workspace activity. Neither produces a legal or similarly significant effect.

If we begin using ADMT for such decisions, we will update this Privacy Policy and, where required by law: (1) provide a pre-use notice describing the purpose of the ADMT and your applicable rights; (2) allow you to opt out of such use, subject to applicable legal exceptions; and (3) provide you with access to information about how the ADMT was used to make a decision about you, upon a verifiable consumer request.

Where required by regulations adopted by the California Privacy Protection Agency, Four Stripes will conduct risk assessments for processing activities that present significant risk to consumers’ privacy, including certain uses of AI and ADMT, and will complete cybersecurity audits.

U.S. State Privacy Rights

Residents of certain U.S. states, including California, Virginia, Colorado, Connecticut, and Utah, have additional rights regarding their personal information. This section supplements the information contained in our Privacy Policy and applies solely to individuals who reside in these states.

Personal Information We Collect

We collect the categories of personal information described in the “Types of Information Collected” section of this Privacy Policy. These categories may include:

• Identifiers (e.g., name, address, phone number, email)
• Commercial information (e.g., purchase and subscription history)
• Internet or other electronic network activity (e.g., IP address, browsing and usage data)
• Account and subscription data
• Geolocation data (approximate location derived from IP address)
• AI Interaction Data, as described in Section 1(e)
• Sensitive personal information, limited to account log-in credentials (e.g., username and password) used solely for the purpose of securing your account

We use and disclose this information for the purposes described in the “Use of Information Collected” section above.

Your State-Specific Privacy Rights

Depending on your state of residence, you may have one or more of the following rights:

• Right to Access: You may request to know what personal data we collect, use, disclose, or sell.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right to Opt Out: You may request to opt out of the sale or sharing of your personal data, the use of your data for targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects. Note: Four Stripes does not currently sell personal data or share it for cross-context behavioral advertising.
• Right to Data Portability: You may request a copy of your personal data in a portable format.
• Right to Limit Use of Sensitive Personal Information (California): If applicable, you may request to limit the use and disclosure of sensitive personal information.
• Right to Opt Out of and Access Information About Automated Decisionmaking Technology (California): Where we use ADMT to make a decision producing a legal or similarly significant effect concerning you, you may request to opt out of, and access information about, that use, as described in the “Automated Decisionmaking Technology” section above.
• Right to Appeal: Where your state law provides this right, you may appeal a denial of their privacy rights request.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights, including by denying goods or services, charging different prices, or providing a different level or quality of goods or services, except as permitted by law.

We will respond to verifiable consumer requests within 45 days of receipt, which may be extended once by an additional 45 days when reasonably necessary, with notice provided to you.

How to Exercise Your Rights

To exercise any of the rights described above, please submit a request by one of the following methods:

• Email: support@myfourstripes.com
• Mailing Address: 55 N Merchant St #122, American Fork, UT 84003-9998

We may need to verify your identity before processing your request. You may also designate an authorized agent to submit a request on your behalf in accordance with applicable law.

If your Personal Information was submitted by a design firm that uses Four Stripes (for example, if you are a client of that firm), the firm controls that information. Please send your request to the firm directly. If you contact us instead, we will forward your request to the firm and help it respond.

Appeals

If we deny your request, you may appeal the decision by submitting a written appeal to the contact methods listed above. We will inform you of our response to your appeal within the time period required by law.

Global Privacy Control

We recognize Global Privacy Control (GPC) signals as a valid request to opt out of the sale or sharing of personal data and targeted advertising for residents of California and other states where such signals are legally recognized.

12. Changes to This Privacy Policy

This Privacy Policy is effective as of the date listed above. It will remain in effect except with respect to any changes in its provisions in the future. We reserve the right to update or change our Privacy Policy at any time, and you should check this page periodically. If we make a material change, we will notify you by email or within the Application before it takes effect. Your continued use of the Services after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide by and be bound by the modified Privacy Policy.

13. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us at:

Four Stripes LLC Email: support@myfourstripes.com Mailing Address: 55 N Merchant St #122, American Fork, UT 84003-9998 myfourstripes.com