There are many different ways you can use our services. When you share information with us, for example, by creating a BMS Front Account, we can make those services even better. As you use our services, we want you to be clear about how we're using information and the ways in which you can protect your privacy.
Our Privacy Policy explains:
- What information we collect and why we collect it.
- How we use that information.
- The choices we offer, including how to access and update information.
We've tried to keep it as simple as possible, but if you're not familiar with terms like cookies, IP addresses, pixel tags and browsers, then read about these key terms first. Your privacy matters to BMS Front, so whether you are new to BMS Front or a long-time user, please do take the time to get to know our practices – and if you have any questions, contact us.
Information we collect
We collect information to provide better services to all of our users.
We collect information in two ways:
- Information you give us. For example, many of our services require you to sign up for a BMS Front Account. When you do, we'll ask for personal information, like your name, email address, telephone number. If you provide a telephone number, we use it for account, support, and service purposes, not for marketing calls or texts. If you purchase services, payment details may be collected by us or our payment processor. Your organization may also provide an organization logo and company contact information for display in the services to logged-in users who are authorized in the Services to see that organization's support or contact information. When you request building services through our platform, we may collect information about the request, such as the building address or site involved, the requested date and time, service details, and the requester’s account or contact information. That is site or building information for fulfilling the request, not GPS or other tracking of a person’s location. If you enter connection information or credentials so the Services can send commands to a building management system, we may store that information and use it to provide the Services. That is your data. Your organization may designate organization administrators who manage accounts for other users in your organization. Organization administrators, other persons your organization authorizes to manage accounts, or BMS Front acting on that instruction, may provide personal information about those users so we can create and support their accounts and deliver the services. If your account was created by an organization administrator, by another person your organization authorizes to manage accounts, or by BMS Front on their behalf, that organization administrator or other authorized account manager may be able to access, update, or manage your account information as described in this Privacy Policy.
-
Information we get from your use of our services.
We may collect information about the services that you use and how you use them. This information includes:
- Device information. We may collect device-specific information (such as your hardware model, operating system version, and unique device or browser identifiers). BMS Front may associate those identifiers with your BMS Front Account.
-
Log information. When you use our services or view content provided
by BMS Front, we may automatically collect and store certain information in
server logs. This may include:
- details of how you used our service.
- Internet protocol address.
- device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of your request and referral URL.
- cookies that may uniquely identify your browser or your BMS Front Account.
- Local storage. We may collect and store information (including personal information) locally on your device using mechanisms such as browser web storage (including HTML 5) and application data caches.
- Cookies and unique identifiers. We use various technologies to collect and store information when you visit a BMS Front service, and this may include sending one or more cookies or unique identifiers to your device. We may also use cookies and unique identifiers in connection with our ads that appear on other sites, for example to measure whether an ad led you to visit our services.
How we use information we collect
We use the information we collect to provide, maintain, protect and improve our services, to develop new ones, and to protect BMS Front and our users. We may also use information to offer tailored content. For personal or organization information that a customer organization puts into our product (such as account data, service requests, logos, company contact information, or connection information and credentials entered so the Services can operate), we use that information to provide the Services to that customer, to secure and support the Services, and for other purposes permitted by our agreement with them or by law. We do not use that customer product data for BMS Front’s unrelated advertising, and we do not use it to develop new products for other customers except in aggregated or de-identified form that does not identify the customer or its users.
Each BMS Front Account has a profile used within our services (for example, to show your name to other users in your organization). Profiles are not public. We may use the name you provide for your profile across the services that require a BMS Front Account, and we may replace past names associated with your account so that you are represented consistently in those services. If your organization provides a logo or company contact information, we may display that information to logged-in users who are authorized in the Services to see that organization's support or contact information. It is not shown as a public website listing.
When you contact BMS Front, we may keep a record of your communication to help solve any issues you might be facing. We may use your email address to inform you about our services, such as letting you know about upcoming changes or improvements. If we send you marketing emails, each message will include a way to unsubscribe. You can also use our Contact Form to opt out of marketing emails. We may still send non-marketing messages about your account or our services. We do not use telephone numbers for marketing calls or text messages.
We use information collected from cookies and other technologies, like pixel tags, to improve your user experience and the overall quality of our services. For example, by saving your language preferences, we'll be able to have our services appear in the language you prefer.
On some pages, we use Google Ads conversion tracking (including tags served from googleadservices.com). These tools may collect information such as your IP address, device or browser identifiers, and pages visited, and share that information with Google so we can measure the effectiveness of our ads. Google’s use of this information is governed by Google’s privacy policy. You can manage Google ad settings at adssettings.google.com and google.com/settings/ads.
We may combine personal information from one service with information, including personal information, from other BMS Front services, subject to the limits above for customer product data.
We will ask for your consent before using information for a purpose other than those that are set out in this Privacy Policy.
BMS Front processes personal information on servers and through service providers that may be located in the United States or other countries. Your information may be processed outside the country where you live.
You may also set your browser to block all cookies, including cookies associated with our services, or to indicate when a cookie is being set. Third-party cookies (such as those used for Google Ads conversion tracking) may still be set by those parties; you can manage them through your browser settings and Google’s ad settings linked above. However, it's important to remember that many of our services may not function properly if your cookies are disabled. For example, we may not remember your language preferences.
Accessing and updating your personal information
Depending on your account type and role, you may be able to access, update, or delete certain personal information about yourself or, if you are an organization administrator, about users in your organization through the services. If your account is managed by an organization administrator or other authorized account manager, please contact them first to access, update, or correct personal information they manage for you. You may also use our Contact Form. For information managed by your organization, we may direct you to them or work with them to respond. We will help where we can, subject to verification and our need to retain information for legitimate business, security, or legal purposes. Information in backup systems may remain until those backups are deleted or overwritten in the ordinary course.
Information we share
We do not share personal information with companies, organizations and individuals outside of BMS Front unless one of the following circumstances applies:
- With your consent. We will share personal information with companies, organizations or individuals outside of BMS Front when we have your consent to do so. We require opt-in consent for the sharing of any sensitive personal information, except as described below for organization-managed accounts and payment processing.
-
With organization administrators and other authorized account managers. If your BMS Front Account is managed for you by an organization administrator or another person your organization authorizes
to manage accounts, your use of the services constitutes opt-in consent to that organization administrator and to any other
person your organization authorizes to manage accounts having access to your BMS Front Account information, including
sensitive personal information such as login credentials as needed to create, provision, and manage your account. Your
organization administrator or other authorized account manager may be able to:
- view statistics regarding your account.
- change your account password.
- suspend or terminate your account access.
- access or retain information stored as part of your account.
- receive your account information in order to satisfy applicable law, regulation, legal process or enforceable governmental request.
- restrict your ability to delete or edit information or privacy settings.
- For external processing. We provide personal information to contracted service providers and other persons who process it for us under contract, based on our instructions and in compliance with our Privacy Policy and any other appropriate confidentiality and security measures. This includes payment processors when you purchase services; providing payment details to complete a purchase constitutes consent to that sharing as needed to process the payment.
- With advertising and measurement partners. On some pages, we share information such as IP address, device or browser identifiers, and pages visited with Google for Google Ads conversion tracking and related ad measurement, as described in this Privacy Policy. Google’s use of that information is governed by Google’s privacy policy.
-
For legal reasons. We will share personal information with companies,
organizations or individuals outside of BMS Front if we have a good-faith belief that access, use, preservation or disclosure
of the information is reasonably necessary to:
- meet any applicable law, regulation, legal process or enforceable governmental request.
- enforce applicable Terms of Use, including investigation of potential violations.
- detect, prevent, or otherwise address fraud, security or technical issues.
- protect against harm to the rights, property or safety of BMS Front, our users or the public as required or permitted by law.
We may share aggregated, non-personally identifiable information publicly and with our partners. For example, we may share information publicly to show trends about the general use of our services.
If BMS Front is involved in a merger, acquisition or asset sale, we will continue to ensure the confidentiality of any personal information and give affected users notice before personal information is transferred or becomes subject to a different privacy policy.
Information security
We work hard to protect BMS Front and our users from unauthorized access to or unauthorized alteration, disclosure or destruction of information we hold. In particular:
- We use industry-standard encryption (such as TLS) to protect data in transit.
- We review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems.
- We restrict access to personal information to BMS Front employees, contractors and agents who need to know that information in order to process it for us, and who are subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations.
If we become aware of a personal information breach, we will take appropriate steps to investigate and respond, and we will notify affected customers or individuals as required by law or as we otherwise determine is appropriate.
How long we keep information
We keep personal information only as long as needed to provide the services, maintain your account, meet legal or accounting requirements, resolve disputes, and enforce our agreements. Retention can vary by information type and account role. When we no longer need personal information, we delete it or de-identify it, except that copies in backup systems may remain until those backups are deleted or overwritten in the ordinary course. If your account is managed by an organization, that organization's needs and instructions may also affect how long we retain related information.
Eligibility and age requirement
Our services are for users who are 18 years of age or older and are not directed to anyone under 18. By using our services, you represent that you are 18 or older. Use by anyone under 18 is not permitted. Contact us via our Contact Form if you believe underage use has occurred.
Application
Our Privacy Policy applies to all of the services offered by BMS Front Corporation.
When a customer organization (such as a property manager or tenant organization) puts personal or organization information into our product—for example account data, service requests, logos, or company contact information—BMS Front processes that information as a service provider for that customer, based on their instructions and our agreement with them. How we handle information for our own purposes (such as operating accounts and our marketing site) is described elsewhere in this Privacy Policy.
Our Privacy Policy does not apply to services offered by other companies or individuals, or to other sites linked from our services. Third-party advertising platforms (such as Google) have their own privacy policies. How we use Google Ads conversion tracking on our pages, and what we share with Google for that purpose, is described in this Privacy Policy.
Changes
Our Privacy Policy may change from time to time. We will not reduce your rights under this Privacy Policy without your explicit consent. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes).
Key terms
- Personal information
- BMS Front Account
- Cookie
- Unique identifier
- IP address
- Server logs
- Sensitive personal information
- Non-personally identifiable information
- Pixel tag
Personal information
This is information that identifies you or that BMS Front can reasonably link to you. It includes information you provide (such as your name, email address, or billing information) and information we collect automatically (such as IP address, device or browser identifiers, and similar data described in this Privacy Policy).
BMS Front Account
You may access some of our services by signing up for a BMS Front Account and providing us with some personal information (typically your name, email address and a password). This account information will be used to authenticate you when you access BMS Front services and protect your account from unauthorized access by others. You can edit or terminate your account at any time through your BMS Front Account settings, unless your account is managed by an organization administrator or other authorized account manager.
Cookie
A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. Cookies may store user preferences and other information. You can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some website features or services may not function properly without cookies.
Unique identifier
A unique identifier is a random string of characters that is used for the same purposes as a cookie on devices or browsers where cookie technology is not available. We may associate a unique identifier with your BMS Front Account.
IP address
Every computer connected to the Internet is assigned a unique number known as an Internet protocol (IP) address. Since these numbers are usually assigned in country-based blocks, an IP address can often be used to identify the country from which a computer is connecting to the Internet. An IP address can also help identify a device or user when combined with other information.
Server logs
Like most websites, our servers automatically record the page requests made when you visit our sites. These "server logs" typically include your web request, Internet Protocol address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser.
Sensitive personal information
Sensitive personal information includes account login credentials, connection information or credentials entered so the Services can send commands to a building management system, and, if collected, payment or financial account information. We do not seek government identification numbers, biometric identifiers, or health data, and we do not collect precise location information about a person or track person or device location.
Non-personally identifiable information
This is information that is recorded about users so that it no longer reflects or references an individually identifiable user.
Pixel tag
A pixel tag is a type of technology placed on a website or within the body of an email for the purpose of tracking activity on websites, or when emails are opened or accessed, and is often used in combination with cookies.