ExComS WiFi Survey Agent Privacy Policy

Current live URL: the app serves this page itself at /privacy (no sign in required); the Marketplace listing points there.

Last updated: 3 August 2026

This Privacy Policy explains how Express Communication Services Ltd, trading as ExComS (“ExComS”, “we”, “us”), collects, uses, and protects personal data in connection with the ExComS AI WiFi Survey Agent (the “Service”). We are the data controller for the personal data described here. The Service is developed by ExComS Innovation Center Ltd (company number 10982946).

• Company number: 08099517
• Registered office: 960 Capability Green, Capability Green, Luton, LU1 3PE
• ICO registration number: ZB224770
• Privacy contact: hello@excoms.ai

1. Data we process

• Account and identity. Name, work email, and organisation, provided via Microsoft Entra sign in.
• Customer Content. Floor plan images and survey data you upload or generate. These may incidentally contain text (for example room labels); we do not seek personal data in floor plans, and we ask that you do not include it unless necessary.
• AI derived data. Data the Service infers from your floor plans: detected walls and their predicted materials, recognised floor plan text, predicted coverage models, and access point placement recommendations. These are modelled outputs derived from your Customer Content and are stored with it.
• Usage and billing metadata. Feature usage, floor plan counts (for plan allowances), operational logs, and support correspondence. Where you purchase through the Microsoft Commercial Marketplace, Microsoft handles payment as merchant of record; we do not receive or store your card or bank details.

We do not intentionally collect special category data.

2. How we use it, and our lawful bases

| Purpose | Legal basis (UK GDPR Article 6) |

|—|—|

| Provide the Service: process floor plans, generate coverage predictions, placement plans, and reports | Performance of a contract |

| Authenticate sign in and manage your account | Performance of a contract |

| Administer plans, seats, and allowances | Performance of a contract |

| Keep the Service secure and reliable, prevent abuse, diagnose faults | Legitimate interests (running a secure service) |

| Communicate about service, security, and account matters | Legitimate interests / legal obligation |

We do not use your uploaded floor plans to train AI models, and we do not sell your personal data.

3. Data residency

Your data is stored and processed in the United Kingdom (Microsoft Azure, UK South region). We do not transfer your data outside the UK and EEA in the course of providing the Service.

4. Sub-processors

We use Microsoft Azure services as sub-processors, all configured to the UK region:

• Azure Container Apps and Azure Database for PostgreSQL: application hosting and database.
• Azure Blob Storage: floor plan storage.
• Azure AI Document Intelligence: optical character recognition of plans.
• Azure OpenAI Service: wall material classification. No content sent to it is used for model training.
• Microsoft Entra: authentication.
• Microsoft Commercial Marketplace: billing, where you purchase via the Marketplace.

5. Retention

We retain account data for the life of your account, and Customer Content (with its AI derived data) until you delete it or your account is closed. Trial data is retained for up to 30 days after the trial ends, after which it may be deleted. Billing records are retained as required by tax and accounting law. We delete or anonymise data when it is no longer needed.

6. Security

We use encryption in transit and at rest, access controls, and tenant isolation. No system is perfectly secure, but we take reasonable measures to protect your data, and we will notify you and regulators of any breach as the law requires.

7. Your rights

Under UK GDPR you have rights to access, rectify, erase, restrict, port, and object to processing of your personal data. To exercise them, contact hello@excoms.ai. You may also complain to the UK Information Commissioner’s Office (ico.org.uk), though we would appreciate the chance to resolve concerns first.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or cross site tracking cookies.

9. Children

The Service is for business use and is not directed at individuals under 18.

10. Changes

We may update this Policy; material changes will be notified through the Service or by email, and the date above will be revised.

11. Contact

Privacy questions or requests: hello@excoms.ai · https://excoms.ai/contact-us/