Privacy Policy.

Effective September 16, 2026 · Last updated September 16, 2026

1. Who we are and what this covers

Inspect Point is fire inspection software for fire protection contractors. The company behind it is Zenpush, LLC, doing business as Inspect Point, at 24 4th Street, Troy, New York 12180. In this policy, "Inspect Point," "we," and "us" mean that company.

This policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. It covers:

• Our websites: www.inspectpoint.com, pages.inspectpoint.com (campaign and event pages), engage.inspectpoint.com (forms and email links run on Salesforce Account Engagement), and support.inspectpoint.com (our help center).
• Our marketing: emails we send, ads we run, events and webinars we host, and the industry survey we run each year.
• The Inspect Point platform: the web application your company signs in to at its own address under inspectpoint.com, the Inspect Point mobile app, the customer portal, Inspect Point Fleet, Inspect Point Payments, and the API (together, the "Services").

FireCAD (getfirecad.com) and FormLink (formlinksystems.com) are Inspect Point products with their own websites and apps. This policy covers what those teams share with us about you; it does not cover those websites, which carry their own notices.

Our Terms of Service incorporate this policy. If your company has signed a separate agreement with us, that agreement governs the data your company puts into the platform where the two differ.

2. The short version

• If you fill out a form, we get what you typed plus where you came from. It goes into Salesforce, and a salesperson may follow up.
• Our websites run advertising and analytics trackers from Google, LinkedIn, Microsoft, OpenAI, Hyros, Capterra, and Salesforce. In the United States they are on by default and you can turn them off. We honor the Global Privacy Control signal on www.inspectpoint.com and pages.inspectpoint.com.
• One of those services, Hyros, can identify a business visitor who never filled out a form. When it does, we may add that person to Salesforce and reach out.
• We also upload hashed email addresses from our own customer and prospect records to Google, Microsoft, and Meta so they can match them to accounts and show or withhold ads. Turning off trackers in your browser does not stop that; emailing us does.
• We do not sell personal information for money. We do "share" it with advertising platforms in the sense some state laws use, and you can opt out.
• Data your company puts into the platform belongs to your company. We process it to run the Services. It is not used to train public AI models.
• You can ask us what we hold about you, ask us to correct or delete it, and opt out of marketing at any time. Section 12 says how.

3. Information we collect

3.1 Information you give us

Forms on our websites. When you request a demo, register for an event, download a report, ask about a partnership, or register a lead as a partner, we collect what the form asks for. Depending on the form that is your first and last name, work email address, company, phone number, job role, the number of technicians at your company, your inspection volume, which plan you are looking at, whether you are interested in FireCAD, whether you are a current customer or partner, training goals, and anything you type in a notes field. If you arrived from an ad or an email, the form also carries the campaign parameters and click identifiers from that link (utm_source, utm_medium, utm_campaign, utm_content, utm_term, utm_network, gclid, msclkid). Forms on www.inspectpoint.com include two hidden fields used only to screen out automated submissions: a trap field that a person never sees or fills, and a token that records how long the page had been open before you submitted. Our server also records the page the submission came from. Giving us your details on a form is voluntary; if you do not, we cannot book the demo or send what you asked for.

Lead forms inside other platforms. If you fill out one of our lead forms inside LinkedIn, LinkedIn sends us what you entered and we load it into Salesforce.

Account registration. When your company sets you up as a user of the platform, we hold the details its administrator enters to create your account, typically your name, work email address, and role, plus your sign-in credentials. Companies can instead sign users in through Microsoft Entra ID (Azure AD) single sign-on.

Support. When you open a ticket or write to support, we collect your contact details, your company, and what you tell us about the problem, including any files you attach.

Payments. If your company uses Inspect Point Payments, card and bank details are entered directly into our payment processor's checkout. We receive confirmation of the payment and the details needed to post it to the right invoice. We do not receive or store full card numbers.

Events, webinars, and the survey. When you register for a webinar or an Inspect Point Academy session, visit our booth at a trade show, or answer our fire and life safety industry survey, we collect what you provide at registration or in your answers. Webinars are recorded. Survey results are published in aggregate in our annual industry report; individual answers are not published. We sometimes run prize drawings at events. Entering is optional and you get the same service either way.

Conversations. If you call, email, or message us, we keep the correspondence.

3.2 Information collected automatically

Server logs. Every request to www.inspectpoint.com is logged by our hosting provider and copied to a monitoring server we run. A log line holds the date and time, the page requested, your IP address, your browser and device type (the user agent string), the page that referred you, and the response status. When you submit a form, the log also records the email address and company you entered and whether our automated bot screening accepted or held the submission. If a submission is held as likely automated, we keep the complete set of fields it contained so a person can check it, and a summary goes to our team's internal chat. A person looks at everything that is held. We keep these logs and held submissions for 90 days. The providers that host pages.inspectpoint.com, support.inspectpoint.com, and engage.inspectpoint.com keep their own request logs under their terms.

Trackers. Cookies, pixels, scripts, and local storage set by us and by the advertising and analytics vendors listed in section 4. These collect your IP address, device and browser details, the pages you view, how long you stay, what you click, the ad or search that brought you, and identifiers the vendor assigns to your browser.

Site preferences. Our own pages store a few things in your browser: your consent choices, whether you dismissed a notice, the last pages you viewed on our site (used to reorder the resources hub, and only if you allowed analytics), the campaign parameters from the link you arrived on (kept for 90 days so they can be attached to a form you fill out later), and, briefly, what you typed into a form if it came back with an error.

Email engagement. Marketing emails we send contain a tracking pixel and tracked links. We can see whether an email was opened, which links were clicked, and, if you then visit our site, connect that visit to your record.

Platform activity. The platform keeps sign-in and activity logs needed to run, secure, and support it.

Mobile app. The Inspect Point app asks your permission before it uses your device's precise location, camera, or photo library, and uses them for app functions such as inspections and photos. You can turn each permission off in your device settings. The app also records device identifiers and usage data for app functionality.

Inspect Point Fleet. If your company uses Inspect Point Fleet, a telematics service provided with Azuga, devices in company vehicles report vehicle location in real time, vehicle diagnostics, and driving events such as speeding and harsh braking, which appear as technician locations on the dispatch board and as driver scorecards for your company. Your company decides whether to use Fleet and who sees this data. Requests about Fleet data go to your company.

3.3 Information from other sources

Identity resolution. We use Hyros, an advertising attribution service. In addition to measuring which ads work, Hyros can match an otherwise anonymous visit to our website to a business email address using data it holds from other sources. We pull those matches daily, screen them against our records, and may create a Salesforce lead record and contact the person. On a first visit from the United States, Hyros loads before you have had a chance to decline. Declining advertising trackers or turning on Global Privacy Control stops it on that page and on later visits.

Business data providers. Our sales and marketing teams use ZoomInfo and Clay to fill in or confirm business contact details such as job title, company, work email address, and phone number for people who have shown interest in us or who work at companies we think would benefit from the product.

Event organizers and industry associations. When we sponsor or exhibit at an event, the organizer may give us the attendee list. When we are a member of or partner with an association, it may share member or registrant contact details.

Partners. Integration and channel partners such as BuildOps, Simpro, The Compliance Engine (Brycer), and accounting and field-service vendors may refer a customer to us or tell us about a customer we share. If you check the FireCAD box on our demo form, your request is also routed to the FireCAD team, an Inspect Point product.

Advertising platforms. Google, Microsoft, LinkedIn, and OpenAI report to us how their ads performed and pass click identifiers in the links you follow. An ad click does not identify you to us. A lead form you fill out inside one of those platforms does.

Public sources. Company websites and professional profiles, when we are researching whether a company is a fit.

If we contact you and you want to know where we got your details, ask and we will tell you. Every message we send links to this policy and gives you a way to opt out.

3.4 Information your company puts into the platform

Customers use Inspect Point to run their business. In doing so they enter information about their own customers, buildings, fire protection systems, inspections, deficiencies, proposals, invoices, and payments, including names, addresses, phone numbers, email addresses, photos, signatures, and notes. We call this Customer Content. Your company controls it and decides how it is used. We process it to provide the Services under our Terms and our agreement with your company. Section 8 has more on this.

4. Cookies, pixels, and other trackers

This table lists the third parties that set cookies or receive data on our websites, as measured on www.inspectpoint.com on September 15, 2026, plus tags that load only on specific pages. We update it when we add or remove a vendor. Lifetimes are the maximum a vendor sets; your browser may clear them sooner. Our cookie policy carries the same list.

How consent works here. If you visit from the United States, the advertising and analytics trackers above are active when the page loads. Visitors from California and other states with consumer privacy laws see a banner with a Decline button and can change their choice any time through Cookie Preferences in the footer of every page. Visitors from the European Economic Area, the United Kingdom, Switzerland, and Canada are asked before non-essential trackers load. Visitors from other U.S. states see no banner today, and the footer links do not open the preference center there; the opt-outs that work everywhere are Global Privacy Control and email (section 7). If your browser sends the Global Privacy Control signal on www.inspectpoint.com or pages.inspectpoint.com, we treat it as an opt-out of advertising and analytics trackers and of "sharing" under state privacy laws: no advertising vendor loads and no cookies are set. The signal applies to your browser. If you also want it applied to the record we hold for you, email us (section 12). Some browsers send a Do Not Track signal; there is no agreed standard for what it means, so we do not respond to it.

pages.inspectpoint.com uses the same tag container, the same consent manager, and the same footer links. support.inspectpoint.com runs Google Analytics through our help-center provider.

Until September 15, 2026, six pages on pages.inspectpoint.com loaded these trackers without a consent manager. That is fixed.

5. How we use information

• To respond to you. Booking the demo you asked for, answering a support ticket, sending the report you downloaded, registering you for an event.
• To sell. Deciding whether a company is a fit, routing a lead to a salesperson, following up by email and phone, keeping notes on the conversation, and reporting on our pipeline.
• To market. Sending newsletters and product announcements, inviting you to webinars and events, showing you ads on other sites and platforms, and measuring which ads and content work.
• To run the Services. Creating and securing your account, syncing data between the web app and the mobile app, processing payments through our processor, generating reports and proposals, running the AI assistant on your company's data, and providing support.
• To improve the product and our content. Analyzing how the website and the platform are used, testing changes, and producing aggregate industry statistics. Aggregate statistics are built so they do not identify a person or a company.
• To keep things secure and honest. Screening form submissions for bots, detecting abuse, investigating incidents, and enforcing our Terms.
• To meet legal obligations. Tax and accounting records, responding to lawful requests, and defending legal claims.

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Our bot screening can hold a form submission for review; a person looks at anything it holds.

6. Who we share information with

Service providers that work for us. Companies that host our sites and data, run our CRM and email, screen leads, process payments, provide support tooling, host video and audio, run our survey, provide telematics, and analyze our traffic. As of the effective date they are: our website hosting providers, Salesforce (CRM and marketing automation, including Account Engagement), a sales email platform, a support ticketing platform, a webinar platform, SurveyMonkey (survey), Termly (consent), our internal email and chat tools, YouTube and Simplecast (media players), ZoomInfo and Clay (business data), Azuga (Inspect Point Fleet), the model provider behind our AI features, and our payment processor. Our contracts require them to use the information only to perform services for us.

Advertising platforms. Google, LinkedIn, Microsoft, OpenAI, Hyros, and Capterra receive the tracker data described in section 4, and Google, Microsoft, and Meta receive the hashed email lists described in section 7, under their own terms, which allow them to use it for their own purposes such as improving their services. This is the "sharing" described in section 7.

Partners. If you ask about an integration or a partner refers you to us, we may share your contact details and the status of your inquiry with that partner. If you check the FireCAD box on the demo form, your request goes to the FireCAD team as well.

Your company. If you use the Services as an employee or contractor of a customer, your company's administrators can see your account details and what you do in the platform, including Fleet data if your company uses Fleet.

Legal and safety. When required by law, subpoena, or court order; to protect the rights, property, or safety of Inspect Point, our customers, or others; or to enforce our Terms.

Business transfers. If Inspect Point is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this policy.

With your direction. When you ask us to connect the platform to another product (accounting software, a compliance reporting service, a field service system), we send the data you choose to that product.

Other than the partner referrals above and the advertising platforms, we do not give third parties personal information for their own direct marketing, and we do not sell personal information for money.

7. Advertising, "selling," and "sharing"

Several U.S. state laws treat sending personal information to an advertising platform so it can show you ads elsewhere as a "sale" or "sharing," even when no money changes hands. Some define a sale to include exchanges for other valuable consideration. Under those definitions, in the twelve months before the effective date we did two things that count:

• Trackers. We shared identifiers (cookie and device identifiers, IP address, click identifiers), internet activity (pages viewed, ads clicked, forms submitted), approximate location from IP address, and commercial information (which pages and forms you used) with Google, Meta, LinkedIn, Microsoft, Reddit, OpenAI, MNTN, Hyros, Capterra and, until September 15, 2026, TikTok, for cross-context behavioral advertising.
• List uploads. We uploaded hashed email addresses from our own customer and prospect records to Google, Microsoft, and Meta so those platforms could match them to their users and either show ads to them or leave them out.

We have not sold personal information for money. We do not knowingly share the personal information of anyone under 16, and we do not knowingly use the personal information of anyone under 18 for targeted advertising or sell it.

You can opt out. Any of these is enough for the trackers; the third also covers the list uploads:

• Click Do Not Sell or Share My Personal Information in the footer of any page and turn off advertising.
• Turn on Global Privacy Control in your browser or a browser extension. We honor it on every page of www.inspectpoint.com and pages.inspectpoint.com.
• Email info@inspectpoint.com with "opt out" in the subject. We mark the opt-out on any record that matches your email address, remove that address from future list uploads, and act within 15 business days.

Opting out in your browser stops the advertising trackers on our sites in that browser. It does not stop the ad platforms from using data they already hold about you under their own policies; each has its own controls. Google Analytics and Google Ads tags keep loading in cookieless mode after you decline, as described in section 4.

8. Data inside the Inspect Point platform

Roles. For Customer Content, your company is the controller (or "business," in state law terms) and we are its service provider or processor. We use Customer Content to provide, secure, support, and improve the Services under our Terms and our agreement with your company. We do not use it for our own advertising and we do not sell it.

Requests about Customer Content. If you are a building owner, tenant, technician, or other person whose details a contractor entered into Inspect Point, that contractor controls the record. Send your request to them. If you send it to us, we will forward it and help the contractor respond. If you are not sure which contractor entered your information, tell us what you know and we will try to work it out.

AI features. The Inspect Point Assistant and the AI review features answer questions and take actions using your company's own data in the platform, and, where your company uploads them, your company's procedures. They are built on a third-party language model that processes the content of a request in order to answer it. Your Customer Content is not used to train public AI models. Bulk actions show a preview before they run and can be undone for a limited time, described in the product.

Aggregate and de-identified data. As our Terms allow, we may de-identify Customer Content and combine it across customers to produce benchmarks, product analytics, and industry research such as our annual industry report. We publicly commit to keep that information de-identified, not to try to re-identify it except to test that the de-identification works, and to require anyone we give it to to do the same.

Payments. Card and bank details go straight to our PCI-compliant payment processor through its own checkout. Inspect Point does not store full card numbers.

Location. The mobile app asks your permission before it uses precise location, and you can turn it off in your device settings. Fleet vehicle location is collected through devices your company installs. We do not use platform or Fleet location data for our own advertising.

Export and deletion. Your company receives a full export of its data when it cancels. If we terminate an account, our Terms give your company up to 30 days to retrieve Customer Content. After the account closes we delete or de-identify Customer Content, except where we are required to keep records or it persists in a backup until that backup is overwritten.

9. Marketing email, calls, and texts

If you give us your work email address on a form, at an event, or through a partner, we may send you marketing email: newsletters, product news, webinar invitations, and industry content. Every marketing email identifies us, includes our postal address, and has an unsubscribe link. We stop within 10 business days, usually immediately. Emails from a salesperson stop when you reply and ask. Unsubscribing from marketing does not stop service emails your company needs, such as invoices, password resets, and security notices.

If you give us a phone number we may call you about your request. If it is a mobile number we may also text you about it; message and data rates may apply. Reply STOP to a text, or tell the caller or email us, and we add you to our do-not-call list.

For recipients in Canada, we send commercial email only where we have express consent, an existing business relationship, or a business address the person published without saying they do not want unsolicited messages.

10. How long we keep information

11. Security

Inspect Point's controls are audited against SOC 2 Type II. Data in the Services is encrypted in transit and at rest. Access to customer data inside the company is limited to people who need it for their work. Customers can require single sign-on through Microsoft Entra ID. Our security page describes the controls in more detail. No system is perfectly secure. If a security incident involves personal information, we notify the people and authorities the law requires us to notify; when the information came from a customer's account, we notify that customer.

12. Your choices and rights

Wherever you live, you can ask us to:

• Tell you whether we hold personal information about you and give you a copy, in a portable format where we send it electronically.
• Correct information that is wrong.
• Delete your information, subject to records we have to keep.
• Stop marketing email, calls, and texts.
• Stop advertising trackers, list uploads, and "sharing" (section 7).

We handle these requests the same way for everyone, whether or not a particular state law applies to us.

How to ask. Use our online request form, email info@inspectpoint.com with "privacy request" in the subject, write to Inspect Point, Attn: Privacy, 24 4th Street, Troy, NY 12180, or use the Cookie Preferences and Do Not Sell or Share links in the footer for tracker opt-outs. Tell us what you want and the email address or company we would know you by. If you ask for a copy we go back further than 12 months where we can.

Verification. We match your request to information we already hold, usually by sending a confirmation to the email address on the record. Platform users are verified through their account. We may ask for more if the request involves sensitive information or we cannot match it.

Agents. Someone else can make a request for you if they show us your written permission or a power of attorney. We may still confirm directly with you.

Timing. We confirm receipt within 10 business days and respond within 45 days. Opt-outs of sale or sharing are acted on within 15 business days. If we need longer, we will say so and why; the total will not exceed 90 days. There is no charge unless requests are clearly excessive.

Appeals. If we decline a request, we will tell you why. You can appeal by replying to that message, or by emailing info@inspectpoint.com with "privacy appeal" in the subject, within 45 days. A different person reviews the appeal and answers within 45 days. If we deny the appeal we include a link to your state attorney general's complaint form, or tell you which regulator to contact where you live.

No retaliation. We will not deny you service, charge you a different price, or provide a different level of service because you exercised these rights.

Customer Content and Fleet data. Requests about information a contractor entered about you in the platform, or collected about you through Fleet, go to that contractor (section 8).

Accessibility. If you use assistive technology and cannot read this page, email us and we will send it in another format.

13. California residents

This section adds the disclosures the California Consumer Privacy Act, as amended by the California Privacy Rights Act, calls for. The rights in section 12 are the rights to know, correct, delete, opt out of sale or sharing, limit the use of sensitive personal information, and not be discriminated against.

In the twelve months before the effective date we collected the following categories of personal information.

We use sensitive personal information only to provide the Services you or your company asked for and to keep accounts secure. Those uses are exempt from the right to limit, so there is no separate link to limit it; if that changes we will add one. We do not sell personal information for money. We share the categories marked above for cross-context behavioral advertising, and section 7 says how to opt out. We do not knowingly sell or share the personal information of consumers under 16. Prize drawings at events are optional and do not change the service you get.

Retention. Section 10.

Shine the Light. Other than the partner referrals described in section 6, we do not disclose personal information to third parties for their own direct marketing. California residents can email us for the list contemplated by Civil Code section 1798.83.

14. Residents of other U.S. states

Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with consumer privacy laws have the rights in section 12, including the right to opt out of targeted advertising, sale, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not profile people in a way that produces such effects, so Minnesota's right to question a profiling decision does not come up; if that changes we will say so here. Global Privacy Control is honored as your opt-out of targeted advertising and sale. If you live in Oregon or Minnesota you can ask us for the list of specific third parties we have disclosed personal data to, and we will send it. Section 12 describes the appeal process these laws require. Nevada residents can email us to say we should not sell covered information as Nevada law defines it; we do not make those sales.

15. Canada

We serve contractors in Canada. PIPEDA does not apply to business contact information we use only to communicate with you about your job or your company's business, which covers most of what we hold about Canadian contacts. Everything else is collected with your consent, express or implied from the context, and used for the purposes in section 5. We collect only what we need for those purposes and keep it accurate for them; tell us if something is wrong and we will correct it. You can withdraw consent, subject to legal and contractual limits, by telling us. Section 4 lists the technologies on our sites that can identify or locate you and how to turn them off.

Your information is stored and processed in the United States. U.S. courts, law enforcement, and government authorities may be able to obtain it under U.S. law. Our privacy contact, who is also the person in charge of the protection of personal information for the purposes of Quebec's Law 25, can be reached at info@inspectpoint.com. Quebec residents can also ask for a copy of their computerized personal information in a structured, commonly used format. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.

16. European Economic Area, United Kingdom, and Switzerland

Our products are built for the North American fire protection market and we do not direct our services to people in the EEA, the UK, or Switzerland. Our websites do run advertising and analytics technology that may apply to a visit from there, and where EU or UK law applies to a visit because of that, we handle it as described here. Our legal bases for processing are: performance of a contract or steps at your request before one (responding to your inquiry, providing the Services); our legitimate interests in running and marketing our business, securing our systems, and improving our products, balanced against your rights; your consent, for non-essential cookies and marketing email, which you can withdraw at any time; and compliance with legal obligations. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your data protection authority, or with the Information Commissioner's Office if you are in the UK.

Your information is transferred to and processed in the United States. We have not certified under the EU-U.S., UK, or Swiss-U.S. Data Privacy Framework. Occasional transfers, such as answering an inquiry you sent us, rely on the exceptions for transfers that are necessary to perform your request or that you have consented to. If you do not want routine advertising and analytics data sent to the United States, decline non-essential trackers when you arrive.

17. Children

Our websites and Services are for businesses and the adults who work for them. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

18. Where information is processed

Inspect Point is based in New York and operates from the United States. Our websites, CRM, and platform run on providers in the United States. If you use our sites or Services from outside the United States, your information is transferred to the United States.

19. Changes to this policy

When we change this policy we post the new version here with a new effective date. If a change materially reduces your rights or expands what we collect or share, we will also tell account holders and recent contacts by email before it takes effect. Earlier versions are available on request.

20. How to contact us

Inspect Point (Zenpush, LLC)
Attn: Privacy
24 4th Street
Troy, NY 12180
United States
info@inspectpoint.com

Questions about the Terms of Service go to the address in section 17.11 of the Terms. Product support lives at support.inspectpoint.com.