Privacy Policy

Who is responsible for your data

C9X PRO is operated by C9X Pro LLC, which is the controller of the personal information described here. Website design services offered alongside C9X PRO are provided separately by Obsidian Lynx LLC, under its own terms.

What we collect when you enquire

The signup form collects your name, company, email, business phone, what kind of lighting you install, and — if you choose to answer — what CRM or field-service software you use today.

The CRM question is there to decide which integration gets built first. That is the only reason we ask, and it is optional.

What a free trial collects

A 14-day trial takes your name, company, email and business phone to create the account. It does not take a payment card, because the trial cannot charge you.

When you activate your account you are asked to accept the Terms of Service, and existing customers are asked again when the Terms materially change. We record which version you accepted, a fingerprint (SHA-256) of that exact document, the date and time on our server, and the version of this policy that was in force at the time. When we give an existing customer notice of a change, we also record when that notice was first shown to them, because the notice period runs from that moment. These records exist so that both of us can later say precisely what was agreed and when. See "How long we keep it" for how long they are retained.

What we collect when you use the product

Your account details, the photos you upload, the designs you trace, your price book, and the customer and property records you create — including your customers' names, addresses, phone numbers and email addresses where you enter them.

Your customers are not our customers. We do not contact them, market to them, or use their information for anything other than running C9X PRO for you.

Analytics

This website uses Vercel Web Analytics, which is cookieless and aggregate, and Google Analytics, which sets cookies in your browser to distinguish visits. The application uses Google Analytics for the same purpose: to see which screens are used and where people get stuck. We do not send your name, email, phone number, company or any customer data to either, and the application scrubs page paths that could carry such values before they are reported. We do not run advertising trackers or build cross-site profiles, and nothing is sold to anybody.

How we know which advert brought you

If you arrive from an advert or a link that carries campaign information in the address — the "utm_source", "utm_campaign" and similar values you can see in the URL, and the click identifier an advertising platform adds to it — your browser keeps those values in its own storage on this site, along with the site that linked to you and the page you landed on.

They stay in your browser and go nowhere unless you choose to submit the signup form. If you do, they are sent with it and stored once against your company record, so we can tell which advertising actually reaches contractors. We keep the FIRST set we ever saw for you and never replace it.

We record the referring site's address and page only, never its search terms. This is first-party storage: it is not a cookie, it is not shared with any advertising network, and it cannot follow you to another website. Clearing your browser storage for this site removes it, and the site works exactly the same without it.

Who else processes your data

Vercel hosts this site and the application. Neon stores the database. Vercel Blob stores uploaded photos and generated images. Resend delivers our transactional email — activation links, password resets, trial reminders and support replies. Zoho Bigin holds enquiries and customer records. Stripe processes payments — we never see or store your card number.

Two Google services are used inside the product. Google Maps Platform geocodes the addresses you enter, suggests addresses as you type, and supplies Street View imagery of a property when you use that feature. Google's Gemini image model produces the AI night render: the daytime photo you upload and the design drawn over it are sent to Google to generate that image, and nothing else about you or your customer goes with them. Google Analytics is described above.

Each of these processes data on our instruction only. We do not sell personal information to anybody, for any purpose.

How long we keep it

Account data for as long as you have an account, and for a reasonable period afterwards for tax and accounting. Enquiries that never become customers: up to two years, then deleted. Campaign information recorded at signup is deleted with the account it belongs to.

Records of your acceptance of the Terms of Service, and of when you were given notice of a change to them, are kept separately from your account data so that they survive account closure. They are retained for six years after your account is closed — the period within which a claim on a written contract may be brought under Tennessee law, which governs the Terms — and are then deleted. Each record holds only your email address, the version and fingerprint of the document, the timestamp, and the version of this policy acknowledged. Nothing else about you or your customers is kept under this rule.

Your rights

Ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Deleting your account deletes your projects, photos and customer records — including any proposals you have shared. Take your exports first.

Email support@c9xpro.com from your account address and say what you want done — an export of your account data, a correction, or closure of your account. It is the address we designate for privacy requests, and it reaches a person. We may verify your identity and authority before releasing or deleting data. You do not have to accept the current Terms of Service to make any of these requests; the acceptance screen inside the application links to them directly.

Security, honestly stated

Passwords are stored hashed. Access is scoped so one company can never see another's work. Traffic is encrypted in transit. Uploaded photos are stored in a private store and served only to your own signed-in users or to a customer holding a live proposal link.

Customer proposal links are unguessable, expiring URLs that need no login by design — so that a homeowner can open one. Anyone you send that link to can open it.