Privacy Policy

Effective Starting: April 17, 2026

Dome PPP LLC operates a cloud-based Document Management Engine built for Public-Private Partnerships. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

1

Introduction

Dome PPP LLC (“Dome PPP,” “we,” “our,” or “us”) operates a cloud-based Document Management Engine built for Public-Private Partnerships. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at domeppp.com or use the Dome PPP application (collectively, the “Service”).

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2

Information We Collect

We may collect the following categories of personal information that you voluntarily provide when you register for, access, or use the Service:

2.1 Information You Provide to Us

  • Name, email address, phone number, job title, and company or organization name
  • Mailing address or business address
  • Account credentials (managed through Microsoft Entra ID)
  • Any documents, files, or data you upload to the Service
  • Communications you send to us, including contact form submissions, support requests, and demo requests

2.2 Information Collected Automatically

When you access the Service, we may automatically collect certain technical information, including:

  • IP address and approximate geographic location
  • Browser type, operating system, and device information
  • Pages visited, features used, and time spent on the Service
  • Referring URL and exit pages
  • Authentication and session data provided by Microsoft Entra ID

2.3 Information from Third-Party Sources

We may receive information about you from third-party authentication providers, specifically Microsoft Entra External ID, when you use Single Sign-On (SSO) to access the Service. This may include your name, email address, organizational affiliation, and profile information associated with your Microsoft account.

3

How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Service
  • To create and manage your user account
  • To authenticate your identity and manage access controls
  • To process and respond to your inquiries, support requests, and demo requests
  • To send you administrative communications, such as updates, security alerts, and support messages
  • To monitor and analyze usage patterns to improve the Service
  • To detect, prevent, and address technical issues, fraud, or security breaches
  • To comply with legal obligations and enforce our terms of service
  • To protect the rights, property, and safety of Dome PPP, our users, and the public
  • We use information about you where you have given us consent to do so for a specific purpose not listed above
4

Data Storage and Security

Your data is hosted on Microsoft Azure, a leading cloud infrastructure platform. We use the following Azure services to store and protect your data:

  • Azure Cosmos DB (NoSQL) for structured application data
  • Azure Blob Storage for documents, files, and attachments
  • Azure Key Vault with Managed Identity for secure management of encryption keys and credentials
  • Microsoft Entra ID for identity management and access control

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (TLS) and at rest, role-based access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

5

How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

  • With service providers and infrastructure partners (principally Microsoft Azure) who process data on our behalf and are bound by contractual obligations to protect your information
  • With other authorized users within your organization, as determined by your organization's access controls and permissions within the Service
  • When required by law, regulation, legal process, or governmental request
  • To protect the rights, property, or safety of Dome PPP, our users, or the public
  • In connection with a merger, acquisition, reorganization, or sale of assets, in which case you will be notified of any change in ownership or uses of your personal information
6

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. We may also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. When your data is no longer needed for these purposes, we will securely delete or anonymize it.

If you or your organization terminates your account, we will delete or anonymize your personal data within a reasonable period following the termination date, except where retention is required by law or for legitimate business purposes.

7

International Data Transfers

Dome PPP is based in the United States, and the Service is hosted on Microsoft Azure infrastructure located in the United States. If you are accessing the Service from outside the United States, including from the European Economic Area (EEA), the United Kingdom, or other jurisdictions, please be aware that your information may be transferred to, stored, and processed in the United States.

Where we transfer personal data from the EEA or the United Kingdom to the United States, we rely on appropriate legal mechanisms to ensure adequate protection, including the EU–U.S. Data Privacy Framework, Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms as applicable.

8

Your Rights Under the GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have certain rights under the General Data Protection Regulation (GDPR) and the UK GDPR, including:

  • Right of access: You may request a copy of the personal data we hold about you.
  • Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
  • Right to erasure: You may request that we delete your personal data, subject to certain exceptions.
  • Right to restrict processing: You may request that we limit how we use your personal data.
  • Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
  • Right to object: You may object to our processing of your personal data for certain purposes.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us using the information provided in the Contact Us section of our homepage. We will respond to your request within 30 days, or within the timeframe required by applicable law.

Legal basis for processing: We process your personal data on the following legal bases: (a) performance of a contract, when processing is necessary to provide the Service; (b) legitimate interests, such as improving the Service and ensuring security; and (c) consent, where you have provided your explicit consent for a specific processing activity.

9

U.S. State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Virginia, or another U.S. state with an applicable privacy law, you may have additional rights regarding your personal information, including:

  • The right to know what personal information we collect and how it is used
  • The right to request deletion of your personal information
  • The right to opt out of the sale or sharing of your personal information (Dome PPP does not sell personal information)
  • The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information in the Contact Us section of our homepage.

10

Cookies and Similar Technologies

The Service may use cookies and similar technologies to maintain your session, remember your preferences, and ensure the security of your account. We use only essential cookies that are strictly necessary for the operation of the Service. We do not use cookies for advertising or third-party tracking purposes.

You can control cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Service.

11

Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 16, please contact us immediately.

12

Third-Party Links and Services

The Service may contain links to third-party websites or services that are not operated by Dome PPP. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.

13

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this policy and, where appropriate, by providing additional notice through the Service or by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@domeppp.com.

For privacy-related requests from the EEA or the United Kingdom, you may also contact your local data protection authority if you are not satisfied with our response.