AI-Enhanced MEPAI-Enhanced MEPAI-Enhanced MEPLegal
Effective date: October 5, 2026
RUHLai, Inc. (“RUHLai,” “we,” “us,” or “our”) provides an AI-enhanced building-decarbonization platform at ruhlai.com. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you use our websites, applications, reports, and services that link to this Policy (the “Service”). It does not apply to professional engineering or consulting services governed by a separate agreement.
We collect the following categories of information:
Identifiers and professional information: name, business email address, phone number, company, job title, account credentials, and single-sign-on identifier.
Commercial information: report purchases, billing address, transaction history, and payment status. Our payment processor collects full payment-card details; RUHLai does not store full payment-card numbers.
Building and Service information: building address, property identifiers, floor area, occupancy/use information, equipment and system information, utility or consumption information, capital plans, documents, notes, searches, saved buildings, reports, and support requests.
Internet and device information: IP address, browser, operating system, device identifiers, log data, referring pages, pages viewed, features used, timestamps, and approximate location derived from IP address.
Communications and preferences: messages, feedback, marketing preferences, and records of communications with us.
Personalization information: account settings, permitted role and organization information, Service usage, saved-building and report history, stated preferences, and inferences used to tailor Service features and Outputs.
We receive information directly from you; automatically through the Service; from public government sources, including the latest available New York City Local Law 84 energy-disclosure data and New York City and New York State property, permit, and violation data; from utility or other energy-data sources you authorize; and from payment, security, analytics, and business-contact providers.
We use information to provide, administer, support, secure, and improve the Service; create accounts; process purchases; generate and deliver reports; respond to requests; communicate about transactions and, where permitted, marketing; detect and prevent fraud and security incidents; comply with law; and establish, exercise, or defend legal claims.
If you enable Personalization, we use Personalization Information to tailor the Service and Outputs to you or your organization, including relevant building views, report presentation, recommendations, saved settings, and communications. Personalization is not used to make decisions producing legal or similarly significant effects concerning you. You may disable Personalization at any time in account privacy settings; disabling it does not affect processing necessary to provide the Service.
We may use aggregate and de-identified information to develop and improve our models, benchmarks, analytics, and Service. We do not attempt to reidentify de-identified information except to test the effectiveness of our de-identification controls.
Currently, optional Personalization provides a shortcut to your most recently purchased report in your portfolio. This feature uses your report history and does not transmit additional information to an AI provider. Personalization is off unless you enable it.
The Service uses automated, statistical, and artificial-intelligence tools to generate building profiles, estimates, benchmarks, and planning information. When Personalization is enabled, limited Personalization Information may be processed to make Service functions and Outputs more relevant to you or your organization.
RUHLai applies data-minimization and security controls to AI processing. We require AI providers that process information for RUHLai to act only on our instructions and not use RUHLai inputs or outputs to train their general-purpose models. Automated outputs, including Local Law 97 penalty projections calculated using the statutory framework and available data at the time of generation, may be inaccurate, incomplete, or outdated; they are informational estimates and not professional engineering, legal, financial, or compliance advice.
We disclose personal information to service providers that support our operations, including hosting, storage, authentication, security, payment processing, email delivery, customer support, analytics, and AI providers acting under our instructions. We also may disclose information to professional advisers; persons you direct us to share with; engineering or contracting partners when you request an introduction or coordination; parties to a corporate transaction; and government authorities or others when required by law or necessary to protect rights, safety, or security.
We may disclose or publish aggregate and de-identified information. We require recipients of de-identified information to maintain it in de-identified form and not attempt reidentification.
We use cookies, local storage, and similar technologies to authenticate users, remember preferences, secure the Service, understand Service use, diagnose performance, and, if Personalization is enabled, remember and apply your Service preferences. You can control cookies through browser settings; blocking them may impair functionality.
We do not sell personal information or share personal information for cross-context behavioral advertising. This statement assumes RUHLai does not use advertising pixels, ad-network retargeting, or similar technologies that cause such sharing. If those practices change, we will update this Policy and provide required privacy choices.
We retain each category of personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Service, maintain Personalization where enabled, comply with legal obligations, resolve disputes, and enforce agreements. Account and Personalization Information are generally retained during the account relationship. After account closure, account and Personalization Information is deleted from active systems within 30 days, except for limited records needed to comply with legal obligations, resolve disputes, prevent fraud, or enforce agreements. Backup copies are isolated from ordinary use and expire within 90 days. Transaction records and records of acceptance of these Terms and this Policy are generally retained for seven years from the transaction or acceptance, with restricted access. Records subject to a legal preservation requirement may be retained longer. We may retain aggregate and de-identified information indefinitely.
We use administrative, technical, and physical safeguards designed to protect personal information. No security measure is perfect; we cannot guarantee absolute security.
You may update certain account information through the Service, disable Personalization throughaccount privacy settings, unsubscribe from marketing messages using the unsubscribe link, and request access, correction, deletion, or a portable copy of personal information, subject to legal exceptions.
To make a privacy request, email info@ruhlai.com. We will verify requests using information appropriate to the nature of the request. You may use an authorized agent where applicable; we may request proof of the agent’s authority and verify your identity. We will not discriminate against you for exercising applicable privacy rights.
This section supplements the other parts of this Policy for California residents. In the preceding 12 months, we have collected the following California categories of personal information: identifiers; commercial information; internet or other electronic network activity; approximate geolocation; professional or employment-related information; and inferences from the information we process to personalize the Service and Outputs. We may also receive electronic information contained in documents or communications you submit.
We collect these categories from you, your organization, your devices and Service activity, public sources, authorized utility or energy-data providers, payment processors, and service providers. We use them for the purposes stated in Section 2, including optional Personalization. We disclose identifiers, commercial information, internet/device information, professional information, Personalization Information, and Customer Data to service providers for the business purposes stated in Section 4. We do not sell or share personal information for cross-context behavioral advertising.
California residents may request to know/access, correct, or delete personal information; receive information about our collection, use, and disclosure practices; and exercise the right not to be discriminated against. We will respond to a verifiable request within the period required by applicable law. We use sensitive personal information, if any is present in a submission, only as reasonably necessary to provide the Service, maintain security, or meet legal obligations; we do not use it to infer characteristics about you.
The Service is a business tool intended for adults. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.
Third-party sites and services have their own privacy practices. The Service is operated from the United States; information may be processed and stored in the United States.
We may revise this Policy by posting an updated version with a revised Effective Date. For material changes, we will provide reasonable advance notice where required by law.
RUHLai, Inc.
One World Trade Center, 85th Floor
New York, NY 10007
info@ruhlai.com