» Forest Metrix Privacy Policy
Forest Metrix Privacy Policy
Effective Date: 9/1/2026 Version: 1
1. Who We Are and What This Policy Covers
1.1 Who we are. Forest Metrix is a product of Field Truth Inc., a Vermont corporation doing business as Forest Metrix (“Forest Metrix,” “we,” “us,” or “our”). Our address and contact details are in Section 13.
1.2 What this policy covers. This policy describes how we collect, use, share, retain, and protect personal information when you use the Forest Metrix mobile application (the “App”), the Forest Metrix web application and account portal at account.forestmetrix.com (the “Web App”), our website at forestmetrix.com (the “Site”), and the related hosted services and support (together, the “Service”). It also covers information we collect when you contact us or when we market to you.
1.3 Relationship to the Terms. This policy is incorporated into the Forest Metrix End User License Agreement and Terms of Service (the “Terms”). Capitalized terms not defined here have the meanings given in the Terms. If this policy and the Terms conflict, the Terms control as to the parties’ contractual rights and this policy controls as to how personal information is handled.
1.4 Two kinds of information, two roles. The Service handles two categories of information, and we play a different role for each:
- Account and Usage Information — information about you as a user of the Service (your name, email, organization, how you use the App, device and diagnostic data). We decide how this information is collected and used, and this policy governs it directly.
- Customer Data — the forestry data that you and your organization enter into the Service (cruise and plot measurements, tract and ownership records, GPS locations, photographs, notes, and the reports generated from them). Customer Data belongs to the organization that holds the Organization Account (the “Customer”). We process it on the Customer’s behalf and on its instructions under the Terms. Customer Data may contain personal information about third parties, such as landowners; the Customer is responsible for collecting that information lawfully and for handling requests from those individuals. If you have questions about personal information in Customer Data, contact the Customer whose account holds it.
2. Information We Collect
2.1 Information you provide.
- Account information: name, email address, password (stored only in hashed form), organization name, role within the organization, and, if you provide it, telephone number and mailing address.
- Billing information: if you purchase a subscription, our payment processor collects your payment card or bank details directly. We do not receive or store full card numbers. We receive the transaction record, billing name and address, the last four digits and card type, and the subscription status.
- Communications: the contents of emails, support requests, feedback, and survey responses you send us, and our records of those exchanges.
- Organization records: when an Admin invites you to an Organization Account, the Admin provides your name and email address so that we can create your seat.
2.2 Customer Data you and your organization enter. Forest Data and other Customer Data, as described in Section 1.4. Depending on how your organization uses the Service, this may include precise GPS coordinates of plots, trees, and boundaries; photographs taken in the field; property and landowner names and contact details; and free-text notes.
2.3 Information collected automatically.
- Device and app information: device model, operating-system version, App version, language and region settings, screen dimensions, and a device identifier we generate for synchronization and seat enforcement. We do not collect the advertising identifier (IDFA).
- Usage information: the features and screens you use, the actions you take in the App and Web App, the timing and frequency of use, and synchronization events (what synced, when, and whether it succeeded).
- Diagnostic information: crash reports, error logs, and performance data (such as load times and sync duration). We receive crash reports for the App from Apple only when you have chosen to share diagnostics with app developers in your device settings. The App contains no third-party crash-reporting or analytics software. Our servers record errors that occur during synchronization and other requests; those records include the device information above and the identity of the account making the request, but not the contents of your Customer Data.
- Log information: when you use the Web App or Site, our servers record your IP address, browser type, referring page, pages viewed, and timestamps.
- Cookies and similar technologies: the Web App uses cookies and local storage that are strictly necessary to keep you signed in and to secure your session. The Site uses Google Tag Manager to load Google Analytics, which measures how visitors find and use the Site, and Google Ads conversion tags, which measure whether our search advertising leads to trial signups and subscriptions. The Web App loads a Google Ads conversion tag on the checkout-confirmation page only, to record that a subscription purchase completed; no other page of the Web App loads Google tags. These tools set cookies and send Google your IP address, the page you are on, and an identifier for your browser. We use them only to measure our own advertising. We do not use them to build audiences for retargeting or to show you ads on other websites.
2.4 Location information. The App collects precise location from your device’s GPS only when you take an action that uses it — recording a plot, tree, or waypoint; navigating to a location; or viewing your position on a map — and only after you grant location permission in your device settings. Location captured in this way is stored as part of Customer Data belonging to your organization. The App does not track your location in the background, does not collect location when you are not using it, and does not use location for advertising. You can withdraw location permission at any time in your device settings; the App will continue to work, but location-dependent features will not.
2.5 Camera and photos. If you use the App to take or attach photographs, the App requests camera or photo-library permission. Photographs you take or attach are stored as part of Customer Data. We do not access your photo library beyond the photographs you select.
2.6 Information from other sources. We may receive information about prospective and current customers from professional directories, industry associations, conference attendee lists, and public sources, and we may combine it with information you provide, for sales and marketing purposes. We do not purchase consumer marketing lists.
3. How We Use Information
3.1 Account and Usage Information. We use it to:
- create and administer your account and your organization’s seats;
- provide, operate, secure, and synchronize the Service, including enforcing seat limits and detecting unauthorized access;
- process payments, send invoices and receipts, and manage subscriptions and renewals;
- respond to support requests and communicate with you about the Service, including service announcements, security notices, renewal reminders, and changes to the Terms or this policy;
- diagnose and fix defects, monitor performance, and improve the Service;
- understand how the Service is used, in aggregate, to prioritize features and guide product decisions;
- send marketing communications about Forest Metrix products, features, and events, subject to Section 7.2;
- enforce the Terms, protect the rights, property, and safety of Forest Metrix, our customers, and others, and comply with law.
3.2 Customer Data. We use Customer Data only to provide the Service to the Customer, as described in the Terms: to store, synchronize, display, and process it; to generate the reports and calculations the Customer requests; to provide support the Customer asks for; and to comply with law. We may derive de-identified, aggregated data from Customer Data that does not identify any customer, user, landowner, or property, and use that de-identified data to operate, analyze, and improve the Service. We do not sell Customer Data, do not use it for advertising, and do not disclose Forest Data to third parties except as necessary to provide the Service or as required by law.
3.3 No advertising in the Service; no tracking in the App. We do not display third-party advertising in the Service and do not sell or share your information with advertising networks. The App contains no advertising or analytics software from third parties and does not track your activity across other companies’ apps or websites. The only advertising-related measurement we perform is the Google conversion tagging on the Site and the Web App’s checkout-confirmation page, described in Section 2.3, which tells us whether our own search advertising is working.
4. How We Share Information
We share personal information only in the circumstances described below. Every service provider we use is bound by contract to protect your information in a manner at least as protective as this policy, to use it only to provide services to us, and not to sell it.
4.1 Service providers. We use third-party providers to operate the Service. Current categories and providers:
- Hosting, database, and authentication: Supabase, Inc. (infrastructure hosted in the United States).
- Payment processing: Stripe, Inc. Stripe collects and stores payment details under its own privacy policy, available at stripe.com/privacy.
- Transactional email: Resend, Inc., for account, billing, security, and support email.
- App distribution: Apple Inc., through the App Store. Apple receives the information described in its own privacy policy when you download or update the App.
- Customer relationship management: [Pipedrive OÜ], which stores business contact and account-status information (name, email, organization, trial and subscription status) for our sales and support records. Customer Data is not shared with this provider.
- Crash reporting: Apple Inc., for App crash reports you have chosen to share through your device settings. We use no other crash-reporting provider.
- Website analytics and advertising measurement: Google LLC (Google Tag Manager, Google Analytics, and Google Ads), for the Site and the Web App’s checkout-confirmation page, as described in Section 2.3. Google’s privacy policy is at policies.google.com/privacy, and its description of how it uses data from sites that use its services is at policies.google.com/technologies/partner-sites.
4.2 Within your organization. Admins of your Organization Account can see your name, email address, role, seat status, last activity, and the Customer Data you create or edit. If you use the Service through your employer or another organization, that organization controls your access and may receive this information under the Terms.
4.3 Legal requirements and protection. We may disclose information if we believe it is reasonably necessary to comply with a law, regulation, subpoena, court order, or governmental request; to enforce the Terms; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of Forest Metrix, our customers, or the public. Where legally permitted, we will notify the affected Customer before disclosing Customer Data in response to legal process.
4.4 Business transfers. If Field Truth Inc. is involved in a merger, acquisition, financing, reorganization, or sale of some or all of its assets, your information may be transferred as part of that transaction. We will require the acquirer to honor this policy or to give you notice and choices before using your information in a materially different way.
4.5 With your direction or consent. We share information when you ask us to (for example, exporting Customer Data to a third-party system you designate) or when you otherwise consent.
4.6 De-identified and aggregated data. We may share de-identified, aggregated statistics that do not identify any person, customer, or property.
5. Retention
5.1 Account and Usage Information. We retain account information for as long as your account is active and for up to [90] days after it is closed, unless a longer period is required for billing, tax, dispute-resolution, or legal purposes. Usage and diagnostic information is retained for [12] months, then deleted or de-identified. Server logs are retained for [90] days. Support correspondence is retained for [3] years.
5.2 Customer Data. Customer Data is retained for as long as the Customer’s Organization Account is active. After all subscriptions end, we retain Customer Data for at least 60 days so the Customer can export it or reactivate, and may delete it thereafter, as described in the Terms. Copies may persist in routine backups for a period after deletion from active systems and are removed as those backups expire.
5.3 Billing records. Transaction records are retained for [7] years to satisfy tax and accounting requirements.
6. Deleting Your Account and Your Information
6.1 Deleting your account in the App. You can delete your account from within the App at [Settings → Account → Delete Account] or from the Web App at account.forestmetrix.com. Deleting your account removes your name, email address, password, and profile from our active systems and revokes your access to the Service.
6.2 What deletion does and does not remove. Deleting your individual account does not delete Customer Data belonging to your organization, because that data is owned by the Customer under the Terms, and the measurements, records, and reports you contributed remain part of the organization’s records. Your name may continue to appear in your organization’s records as the author of those entries. If you are the only Admin of an Organization Account, deleting your account closes the Organization Account and starts the Customer Data retention period described in Section 5.2. If you want Customer Data deleted, contact your organization’s Admin; if you are the Admin, you can request deletion of the Organization Account and its data by emailing the privacy contact in Section 13.
6.3 What we keep after deletion. We retain billing records and any information we must keep to comply with law, resolve disputes, or enforce the Terms, for the periods in Section 5. We may also retain de-identified data.
6.4 Requesting deletion by email. If you cannot access the App or Web App, email the privacy contact in Section 13 from the address on the account, and we will verify your identity and process the request within 30 days.
7. Your Choices and Rights
7.1 Access, correction, and export. You can view and update your account information in the App or Web App. Admins can export their organization’s Customer Data using the export functions of the Service. You can ask us for a copy of the personal information we hold about you by emailing the privacy contact in Section 13.
7.2 Marketing email. You can opt out of marketing email at any time by using the unsubscribe link in any marketing message or by emailing the privacy contact. We will continue to send transactional and service messages (billing, security, renewal, and legal notices) while you have an account.
7.3 Device permissions. You control location, camera, photo, and notification permissions in your device settings and can change them at any time.
7.4 Cookies and analytics. You can block or delete cookies in your browser. Blocking strictly necessary cookies will prevent you from signing in to the Web App. You can opt out of Google Analytics with Google’s browser add-on at tools.google.com/dlpage/gaoptout, and manage Google’s use of advertising data at adssettings.google.com.
7.5 Rights under state privacy laws. Some U.S. states give residents rights to access, correct, delete, and obtain a portable copy of their personal information, to opt out of the sale of personal information or targeted advertising, and to appeal a denied request. We do not sell personal information, and we do not use your personal information for targeted advertising; the Google tags described in Section 2.3 measure our own advertising and are not used for retargeting. Regardless of whether a particular state law applies to Forest Metrix, we extend the rights of access, correction, deletion, and portability to every user, and we will not discriminate against you for exercising them. To exercise these rights, email the privacy contact in Section 13. We will verify your request using the email address on your account and respond within 45 days. If we deny a request, you may appeal by replying to our response, and we will respond to the appeal within 45 days.
7.6 Requests concerning Customer Data. If your personal information appears in Customer Data (for example, you are a landowner whose property was inventoried), the Customer that collected it is responsible for handling your request. If you contact us, we will identify the Customer where we can and refer your request to it, or assist the Customer in responding.
7.7 Do Not Track. We do not respond to browser Do Not Track signals because there is no accepted standard for them and we do not track users across third-party sites. We honor Global Privacy Control signals as opt-out requests where a state law requires it.
8. Security
We maintain administrative, physical, and technical safeguards designed to protect personal information, including encryption in transit (TLS) and at rest in hosted systems, hashed password storage, role-based access controls, least-privilege access for our staff and providers, and logging of administrative access. Data collected in the App while offline is stored on your device until it synchronizes; you are responsible for securing your device with a passcode and keeping the App updated. No system is completely secure, and we cannot guarantee the security of information transmitted to or stored by us. If we learn of a security incident affecting your personal information, we will notify you and the relevant Customer as required by law.
9. Children
The Service is intended for use by adults in a professional capacity. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact the privacy contact in Section 13 and we will delete it.
10. International Users
The Service is operated from the United States, and information is stored and processed in the United States by us and our service providers. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. The Service is currently offered to customers in the United States; we do not target the Service to residents of the European Economic Area, the United Kingdom, or other jurisdictions with data-localization requirements.
11. Third-Party Sites and Services
The Service may link to third-party websites or allow you to export data to third-party services. This policy does not apply to those third parties, and we are not responsible for their privacy practices.
12. Changes to This Policy
We may update this policy from time to time. We will post the updated policy at forestmetrix.com/privacy with a new effective date and, for material changes, will notify you by email or by notice in the Service before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
13. Contact Us
Field Truth Inc. (doing business as Forest Metrix) 1708 Tucker Hill Road Thetford Center, VT 05075 Telephone: (802) 785-4260 Privacy requests and legal notices: tig@forestmetrix.com Support: donn@forestmetrix.com
Recent Comments