Two things up front. This website uses measurement tools, but carries no advertising or conversion pixels and sells no visitor data. And your drawings are yours: we never use a customer’s plan sets to train models that serve anyone else.

One to Many Corp (“One to Many,” “we,” “us”) builds automated window and door takeoff software. This policy covers two different things: this website, and the plan sets and pricing data customers send us during an evaluation or a paid engagement.

This website

The site is a set of static pages served from Amazon S3 and CloudFront. There is no account, no login, no chat widget, and no advertising or A/B testing. There are two forms: the optional fit check, which sends your answers and progress to One to Many without your name or email, described under “The fit check,” and the embedded dCal booking calendar, described under “Booking a demo.”

Our content delivery network records standard server request logs — IP address, timestamp, requested URL, user agent, referrer — which exist to serve the site and to defend it against abuse. We do not use them to build profiles of visitors.

Our own servers also record, without cookies or any identifier that survives a reload, which page was viewed, how far it was scrolled, whether a demo button was seen or clicked, whether the free takeoff link was clicked, and whether a demo was booked, together with the device size and the link's campaign parameters. We use it only in aggregate to improve this site.

Website measurement

We use Google Analytics 4 to understand which pages bring people here, how the site is used, and whether someone clicks “Book a Demo.” It records pages, referrers, interactions, and general browser, device, and approximate location information, and uses first-party cookies to distinguish browsers and sessions. Google Analytics also records that a demo was booked in the embedded calendar — not who booked it or when. On the product demo page, Google Analytics also records whether the video is played, how much of it is watched (25, 50, 75 and 100 percent), which chapters are opened, and which of the home page's two video links led there; to tell those links apart, the site keeps that one choice in your browser's session storage until the demo page opens. Read how Google safeguards Analytics data.

Microsoft Clarity records interaction data such as clicks, scrolling, pointer movement, viewport size, and browser and device information to produce heatmaps and session replays. It uses cookies to distinguish browsers and sessions. It cannot see inside the embedded booking calendar, and we do not send plan sets or customer project data to Clarity. We also label each Clarity session with the page type and the campaign parameters in the link that brought the visit (utm_source, utm_medium, utm_campaign). See the Microsoft Privacy Statement.

You can opt out without losing access to the site: block analytics scripts or cookies in your browser or content blocker. Google also provides a Google Analytics opt-out add-on. Browsers do not implement one common Do Not Track standard, so use those controls to make the choice effective.

We use the measurement data in aggregate to improve this site and our outreach. We do not use it for cross-context behavioral advertising.

The footer shows a “Backed by Alliance” badge. Its image is loaded directly from alliance.xyz, so your browser requests it from Alliance’s servers, which receive the same standard request data (IP address, user agent, referrer) any web server does. It sets no cookies and runs no script, and we receive nothing from it.

The site links out to our email address, to our LinkedIn page, and to our Alliance company page. Once you follow one of those links you are on someone else’s service, under their privacy policy rather than ours.

Booking a demo

Every “Book a Demo” button on this site leads to the same booking calendar at the bottom of the home page; the same calendar also sits under the video on our product demo page and under your fit check result. The calendar is provided by dCal, a scheduling service from Dapta, and is embedded from app.dcal.ai: it is their page shown inside ours. What you enter there — your name, your work email, your company, the optional answer to “How did you hear about us?”, and the slot you pick — goes to dCal and to One to Many. We use it to schedule the demo, to follow up about it, and, from that optional answer, to learn which channels bring people to us. This site passes nothing about your visit into the calendar.

dCal acts as our scheduling processor. Inside its calendar it runs its own product analytics, under its own terms; see the Dapta privacy policy. If you would rather not use it, email us and we will find a time by hand.

The fit check

The fit check at /fit-check/ asks for no contact details. Your answers prefill the ROI calculator on the result screen, and the check also sends your answers and progress (which questions were shown) to One to Many, tagged with a random ID created for that run, so we can improve the check. We do not store your name, email or IP address with them, and starting over creates a new ID. If you book a demo from the result screen, the check also sends the booking ID from dCal with that random ID, so we can link your booking (and the name and email you gave when booking) to that run of the check. Google Analytics also receives events (that the check was started, which question was answered, and that a result was shown), which never include your answers.

Email

If you email us, we keep the message thread and your contact details so we can reply and follow up. That is business correspondence, processed on our legitimate interest in responding to you (GDPR Art. 6(1)(f)). Tell us to stop and we stop.

We run no newsletter and no marketing list. We do not buy contact lists, we do not use data brokers or contact-enrichment services, and we do not send text messages.

Plan sets, pricing data, and AI

This is the part that matters if you are evaluating the product.

What we receive. The drawings, window and door schedules, specifications, catalogs, and price lists you send us so we can run a takeoff, plus the schedules and quotes we produce from them.
Why. To run the takeoff you asked for and return the result. Nothing else.
Who controls it. You do. On that material we act as your processor: we handle it under your instructions and under the agreement between us, and this policy does not override that agreement.
We do not train on your work. Your files, your schedules, and our outputs from them are never used to train or fine-tune models that serve other customers. We do measure our own performance and keep aggregated, de-identified metrics — unit counts, error rates, processing times — that carry no drawing content and cannot be traced back to you or your project.
AI sub-processors. Some steps of the takeoff run on third-party AI infrastructure: Anthropic, OpenAI, and Google (Gemini). They process your material as our sub-processors, under contract, are prohibited from training on it, and are configured for zero data retention where the provider offers it.
Storage. Files are encrypted in transit and at rest, in Amazon’s US East (N. Virginia) region. We delete them on request.
What not to send. Please leave out personal information a takeoff does not need — homeowner details, payroll data, anything sensitive. Redact it before you send the set.

Who else sees your information

Amazon Web Services. Hosting and content delivery for this site; storage for the files you send us.
dCal (Dapta). The embedded booking calendar for demo calls.
Google Workspace. Our business email.
Google Analytics. Website audience and interaction measurement.
Microsoft Clarity. Website interaction measurement, heatmaps, and session replay.
Anthropic, OpenAI, and Google (Gemini). Processing steps inside the takeoff, as described above.

That is the whole list. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we work with no advertising networks.

Beyond those providers we disclose information only where we must: to comply with the law or a valid legal request, to establish or defend legal claims, or to a professional advisor bound by confidentiality. If the business is ever sold or merged, information may transfer to the acquirer, and the terms of this policy follow it.

What we do not collect

Government identification numbers. Payment card numbers — engagements are invoiced, so no card data ever touches our systems. Health, biometric, or precise location data. Anything about children. Please do not submit any of it.

Your rights

Wherever you live, you can ask us to tell you what we hold about you, give you a copy, correct it, delete it, or stop a particular use. In the EU, the UK, and Switzerland you may also object to or restrict processing and complain to your supervisory authority. In California you may know, delete, correct, and opt out of the sale or sharing of your information — there is nothing to opt out of, because we do neither.

Email s@onetomany.us and say what you want. We may ask for enough information to confirm who you are, we answer within the time the law allows (45 days for California requests, one month under the GDPR), and we never treat anyone worse for asking.

If you work for a customer and your information reached us inside a project file, ask that customer first: on their material we act on their instructions. Write to us and we will route the request.

Security

Data is encrypted in transit and at rest. Access to customer files is limited to the people who need it to run your takeoff, through individual accounts with multi-factor authentication. We review the providers listed above before sending them anything. No set of controls is perfect and we do not claim otherwise; if a breach ever affects your data, we notify you and the authorities as the law requires.

Children

The product and this site are for businesses. We do not knowingly collect information from anyone under 16, and we delete it if we learn that we have.

Where we operate

One to Many Corp is a Florida corporation and processes data in the United States. If you are in the EEA, the UK, or Switzerland, your information is transferred there under the European Commission’s Standard Contractual Clauses.

Changes to this policy

We may update this policy. The date at the top always reflects the version in force, and we email active customers before a material change takes effect.

Contact

One to Many Corp, Florida, United States — s@onetomany.us. Privacy questions, requests, and complaints all reach a person at that address.