top of page
Paper1.jpg

Privacy Policy

Last Updated: 16/11/2025

This Privacy Policy explains how One Chimera Ltd, a company registered in England and Wales (“Chimera”, “we”, “our”, “us”), operating in the United States through its licensed subsidiary, One Chimera Inc. (Delaware), collects, uses, discloses, and protects your information when you access or use our website, platform, and software services (collectively, the “Service”).

By using the Service, you consent to the practices described in this Privacy Policy.


If you do not agree, you must not use the Service.

1. Information We Collect

We collect the following categories of information:

Category of Personal Information
Examples
Purpose of Collection
Disclosed to Service Providers
Sold or Shared
Inferences
Usage preferences or patterns
Improving service functionality
Yes
No
Sensitive Personal Information
None collected
Not applicable
No
No
Geolocation Data
Approximate location (city/region from IP)
Localisation, analytics
Yes
No
Internet/Network Activity
Browsing behaviour, usage data, log files, cookies
Analytics, security, product improvement
Yes
No
Commercial Information
Subscription details, transaction history (if applicable)
Billing, account management
Yes (payment processors)
No
Protected Classification Characteristics
None collected
Not applicable
No
No
Customer Records
Project notes, addresses, uploaded files, property details
Service functionality, AI processing, storage, UX improvement
Yes
No
Identifiers
Name, email address, account login, IP address, device IDs
Account creation, service operation, authentication, security
Yes
No

Chimera does not sell or share personal information as defined under California law.

 

A. Information You Provide

This includes:

  • Account information (name, email, password)

  • Project information

  • Property addresses

  • Notes or descriptions

  • Text entered into the Service

  • Feedback or communication with us

 

If uploads are enabled, this also includes:

  • architectural drawings

  • PDFs

  • images

  • project files

  • any other content you submit

 

You choose what to provide.


We do not collect information you do not intentionally submit.

B. Information Automatically Collected

When you use the Service, we automatically collect:

  • IP address

  • browser type

  • device information

  • operating system

  • referring URL

  • pages viewed

  • time spent on the Service

  • cookie identifiers

  • log files

  • approximate location (city/region)

  • usage patterns

 

We also collect interaction data with our AI system (prompts, responses, errors).

Sensitive Personal Information

 

We do not collect or process “Sensitive Personal Information” as defined under the California Privacy Rights Act (CPRA).

 

Because we do not collect such data:

  • We do not use it for inferring characteristics

  • We do not sell or share it

  • Users do not need to submit a “Limit Use of Sensitive Personal Information” request

 

If our data practices change in the future, we will update this Policy and provide all required disclosures.

 

C. Information from Third Parties

 

We may receive information from:

  • authentication providers

  • payment processors

  • analytics tools

  • mapping APIs

  • advertising partners (if used in the future)

  • publicly available datasets

 

We do not buy personal data from data brokers.

 

Financial Incentives

We do not offer discounts, rewards, payments, or financial incentives in exchange for personal information.
If we introduce such programs in the future, we will update this Policy and provide all legally required notices, including the material terms of the program.

D. Third-Party Service Providers

We use third-party service providers to operate and improve the Service. These include, but are not limited to:

  • Amazon Web Services (AWS) — hosting and infrastructure

  • Mapbox / Google Maps — mapping and geolocation functions

  • Stripe (or similar, when implemented) — payment processing

  • Authentication providers (e.g., Auth0, OAuth-based login providers)

  • Email delivery platforms (e.g., SendGrid, Postmark, or similar)

  • Analytics tools (e.g., Google Analytics, Plausible, or similar)

 

These service providers are contractually prohibited from using your personal information for any purpose other than providing services to Chimera.

 

E. User Authentication Data

If you create an account, we collect authentication information such as your email address, password, and any credentials provided through third-party login providers (e.g., Google or Apple). Passwords are encrypted and stored securely. Third-party authentication providers may receive basic account information necessary to facilitate login.

 

F. International User Disclaimer

The Service is primarily operated by One Chimera Ltd (UK) and made available in the United States through its licensed subsidiary.


Data may be transferred between the United Kingdom and the United States for the purposes of hosting, analytics, and service operation.


By using the Service, you consent to this transfer and acknowledge that the UK and U.S. have different data protection laws.

2. How We Use Your Information

We use your information to:

  • provide, maintain, and improve the Service

  • process your requests and data inputs

  • generate AI-based outputs

  • personalise your experience

  • analyse usage and performance

  • troubleshoot errors

  • enhance safety and security

  • comply with legal obligations

  • communicate with you (support, updates, billing)

  • develop new features

  • enforce our Terms & Conditions

 

If you upload files, we use them only to:

  • store and display them for you

  • process or analyse them as needed to generate results

  • maintain product functionality

 

We do not sell your data.

3. AI Processing

Chimera uses artificial intelligence models.


When you submit text, notes, property details, or files, the system may:

  • analyse

  • classify

  • summarise

  • extract details

  • generate suggestions

  • interpret zoning or building information

 

AI outputs may depend on the information you provide.
We store the data needed to operate and improve the Service.

We do not use your data to train public models.

 

 

4. Cookies & Tracking Technologies

We use:

  • cookies

  • analytics tools

  • session tracking

  • device identifiers

  • preference storage

 

Cookies may be required for essential functionality.

You can disable cookies in your browser settings, but this may impact features.

 

 

5. How We Share Information

 

We may share information with:

A. Service Providers (Third-Party Processors)

These include:

  • AWS (cloud hosting)

  • Google Maps / Mapbox (mapping)

  • analytics providers

  • payment processors

  • email delivery systems

  • security and anti-fraud tools

 

These partners only use data as needed to provide their services to us.

 

B. Legal, Compliance & Safety

We may disclose information when required to:

  • comply with law

  • respond to legal requests

  • prevent harm or fraud

  • enforce Terms & Conditions

 

C. Business Transfers

If Chimera merges, is acquired, or undertakes restructuring, user information may be transferred as part of the transaction.

We do NOT:

  • sell personal information

  • share personal information with advertisers for behavioural profiling

  • permit third parties to collect data for their own marketing

 

This is compliant with California CCPA/CPRA.

 

 

6. Data Retention

We retain information:

  • as long as your account is active

  • as needed to provide the Service

  • as required by law

  • as needed to maintain security and prevent fraud

 

You may request deletion (see Section 9).

Uploaded files (drawings, PDFs, images) may be deleted immediately upon account deletion unless we are legally required to retain them.

 

 

7. Data Security

We use reasonable administrative, technical, and physical safeguards to protect your information.

However, no system is perfectly secure.
You use the Service at your own risk.

 

 

8. Children's Privacy

The Service is not intended for children under 18.
We do not knowingly collect data from children.

If we become aware that we have collected such data, we will delete it.

 

 

9. Your Rights (California CCPA/CPRA)

If you are a California resident, you have the right to:

  • request access to your personal information

  • request deletion

  • request correction

  • request information about data sharing

  • opt out of “sale” or “sharing” of personal data (even though we do not sell or share it)

  • limit use of sensitive data

  • designate an authorised agent

 

You may exercise rights by contacting us at:Info@onechimera.com

 

We will verify your request before responding.

We will not discriminate against you for exercising your rights.

 

 

10. Do Not Sell or Share My Personal Information

Chimera does not sell personal information.

If we ever engage in practices regulated as “sharing” under CPRA, we will provide a visible Do Not Sell or Share My Personal Information link on our website.

 

 

11. Third-Party Links

Our Service may contain links to third-party websites or services.
We are not responsible for their privacy practices.

12. Data Transfers (U.S. Storage)

Your information is stored and processed in the United States, primarily on AWS.
If you access the Service from outside the U.S., you consent to this transfer.

 

 

13. Changes to This Privacy Policy

We may update this policy periodically.
Material changes will be communicated via email or platform notice.

14. Contact Us

For privacy-related questions or requests:
 

 

  • One Chimera Ltd
    Registered in England and Wales
    Flat 1, 28 Hayne Rd, Beckenham BR3 4JA, UK
    Email: info@onechimera.com
     

  • For U.S. inquiries, correspondence may also be directed to:
    One Chimera Inc. (Delaware)
    13775 Oro Grande St, Sylmar, CA 91342, USA

Circle3_Light.png

Want to know more or connect with our team?

Let's Talk!

bottom of page