FireFly Automatix Privacy Statement

Official policy document for data handling, user rights, and consent practices

1. Introduction

FireFly Automatix, Inc., a Delaware corporation, provides this Privacy Statement in connection with its website and any other information services where we link to or post this Privacy Statement (collectively, the "Services"). "We," "our," and "us," refer collectively to FireFly Automatix, Inc. We are committed to protecting the privacy and security of personal information and providing transparency about how we process personal information (also known as personal data). For the purposes of this Privacy Statement, we regard personal information as any information that relates to an identified or identifiable person or household.

This Privacy Statement does not address our collection of personal information of employees or applicants for employment.

Within the context of the Services, this Privacy Statement explains how we process personal information. It also explains your rights and choice with respect to certain uses and disclosures of your personal information. We may update this Privacy Statement from time to time, or as our privacy practices change, to ensure it accurately describes how we use your information on behalf of our customers. When we do so, we will make the updated Privacy Statement available on the Services. We recommend that you review this Privacy Statement from time to time for the latest information.

To exercise your rights (as described further below) or for other privacy-related inquiries that relate to how we process your personal information as a controller, you may contact us at:

FireFly Automatix, Inc.
1130 S 3800 W, Suite 100
Salt Lake City, UT 84104
United States
Email: webmaster@fireflyautomatix.com
Toll-free Phone: +1 (888) 700-6086

You may submit data rights requests via our Data Rights Request Form.

2. How We Collect and Process Personal Information

We collect and process personal information in the following ways.

2.1 Data processing contexts

The following table summarizes the main ways FireFly Automatix collects, processes, and shares personal information through the Services and related platforms.

For purposes of this table, "Contact Information" includes details such as name, email address, phone number, company name, job title, mailing address, and general location (country, state, and/or region) that enable us to identify or communicate with an individual or their organization.

Categories of Individuals Categories of Personal Information Purposes of Collection and Processing Sources / Methods of Collection Categories of Third-party Recipients
Website visitors (server logs)IP address; Timestamp; URL and query parameters accessed; Referrer URL; User-Agent (browser, OS, device)Security monitoring and intrusion prevention; Website performance optimization; Troubleshooting and diagnostics; Traffic / usage analysisAutomatically via server logsNone
Website visitors (analytics and tracking)IP address (may be anonymized); Device / browser type; Pages visited, clicks, session duration; Referrer URL; Non-precise geographic informationWebsite performance and optimization; Security monitoring; Marketing insights and reporting; Business purposesAutomatically via scripts on the websiteAnalytics providers; Tracking providers; Business intelligence providers
Users who submit contact / inquiry formsContact information; Comments / questions; Department requestedRespond to inquiries; Customer support; Marketing communications (if permitted); Business purposesDirectly from userCustomer relationship management providers; Business intelligence providers
Users who subscribe to newsletters, marketing messages, or text messagesContact informationEmail / SMS marketing; Business purposesDirectly from userCustomer relationship management providers; Business intelligence providers
Users who submit forms requesting quotes, demos, or consultationsContact information; Product or service interest; Session selection for webinars; Comments / questionsRespond to requests; Schedule demos / consultations; Marketing communications (if permitted); Business purposesDirectly from userCustomer relationship management providers; Business intelligence providers
Users who request information or updates for used equipmentContact information; Equipment type, budget, year, hoursProvide info on used equipment availability; Respond to user requests; Marketing communications (if permitted); Business purposesDirectly from userCustomer relationship management providers; Business intelligence providers
Users who submit parts orders or leasing applicationsContact information; Product / machine selection; Timing/urgency info; Comments / questionsProcess orders or leasing requests; Respond to inquiries; Business purposesDirectly from userCustomer relationship management providers; Enterprise resource planning providers; Order management providers; Business intelligence providers
Users who register for a support account or submit warranty claimsContact information; Product ownership information; Machine information; Support portal ticket number; Optional: SMS opt-in, photos, additional notesProvide access to support portal; Respond to support / warranty requests; Send service bulletins; Marketing communications (if permitted); Engineering support and solutionsDirectly from userCustomer support providers; Helpdesk service providers; Issue tracking providers; Customer relationship management providers; Business intelligence providers
Users who make e-commerce or merchandise purchasesContact information; Delivery method; Payment information; Optional account sign-in info / saved payment preferencesProcess purchases; Provide shipping; Marketing communications (if permitted); Business purposesDirectly from userE-commerce and online storefront providers; Payment processing service providers; Fulfillment and delivery service providers

3. Our Use of Cookies and Similar Technologies

We process identity data, usage data, inference data, transaction data, and general location data in connection with our use of cookies and similar technologies on our Services. We may collect this data automatically.

We and authorized third parties may use cookies and similar technologies to process such data for the following purposes:

  • for "essential" purposes necessary for our Services to operate (such as maintaining user sessions, content delivery, and the like);
  • for "functional" purposes, such as to enable certain features of our Services (for example, to preserve certain preferences similar tool);
  • for "analytics" purposes and to improve our Services, such as to analyze traffic and user behaviors and improve functionality;
  • for "targeted advertising" and other advertising and marketing purposes, including technologies that process inference data and similar data;
  • for "social media," including third-party social media cookies and social sharing functionality.

For a full list of the cookies we use, click here.

We may also process this personal data for our Business Purposes. See the Rights and Choices section below for information regarding opt-out rights for cookies and similar technologies.

4. Business Purposes

In addition to the processing described above, we generally process personal information for several common purposes in connection with our business ("Business Purposes").

Operate our Services and Fulfill Obligations - We process personal information as necessary to provide the Services and to fulfill obligations to you.

Internal Processes and Service Improvement - We may process personal information to improve service design and functionality, understand how Services are used, and develop new features.

Security and Incident Detection - We process personal information to maintain security, prevent fraud, verify users, and respond to unlawful activity.

Aggregate Analytics - We process personal information to create aggregate analytics and reports regarding use and performance of the Services.

Compliance, Safety and Public Interest - We may process personal information for legal compliance and public-interest purposes as required or permitted by law.

4.1 Targeted advertising

To support business development, we may engage in advertising based on interests or retarget users with advertisements related to our Services on third-party websites ("Targeted Advertising").

5. Disclosure and Sharing

In addition to the third parties listed above, we and our customers may share personal information with:

  • Service providers for billing, data storage, quality assurance, web hosting, security, fraud prevention, and marketing.
  • Corporate affiliates including current or future affiliated entities, subsidiaries, and parent companies.
  • Legal compliance recipients such as courts, government agencies, and law enforcement where required by law.
  • Corporate events recipients in connection with merger, acquisition, liquidation, or sale transactions.

We may also disclose personal information to third parties with your consent or at your direction.

If you interact with features linking to social media, YouTube, or other third-party services, those third parties may collect and process personal information subject to their own privacy policies.

5.1 International transfers

Your personal information may be processed in the United States where our operations are located. Transfers from other jurisdictions are handled in compliance with applicable legal requirements.

5.2 SMS/Text communications and marketing communications

If you provide your mobile number and opt in, you may receive customer service and marketing text messages. Message frequency varies. Standard text and data rates may apply. Reply STOP to opt out, or HELP for assistance. You can also withdraw consent to email marketing by using unsubscribe links in marketing emails.

5.3 Children's privacy

Our Services are not directed at children, and we do not knowingly process personal information from children under the age of 13.

6. Security, Quality, and Retention

We use reasonable administrative, technical, and physical safeguards to protect personal information in our possession from misuse, interference, loss, unauthorized access, unauthorized modification, or unauthorized disclosure. No data storage system or data transmission over the internet can be guaranteed to be fully secure, accurate, complete, or current.

We retain personal information for as long as necessary for the purposes used, or as required by law. Factors include legal retention periods, industry best practices, privacy risk, systems limitations, and costs of continued retention.

Our Services do not respond to Do Not Track browser signals. The Services do respond to universal opt-out mechanisms such as Global Privacy Control (GPC), and treat those signals as opt-out requests for selling personal information and targeted advertising processing.

7. California Supplemental Privacy Information

The following information is provided for California residents under applicable law.

7.1 Collection categories and disclosure categories

CategoryCollectedSold or shared (12 months)Disclosed for business purposes (12 months)
A. IdentifiersYesYesYes
B. Customer recordsYesNoYes
C. Protected classificationsNoNot collectedNo
D. Commercial informationYesNoYes
E. Biometric informationNoNot collectedNo
F. Usage dataYesYesYes
G. Geolocation dataNoNot collectedNo
H. Sensory dataYesNot collectedNo
I. Professional or employment informationNoNot collectedNo
J. Education informationNoNot collectedNo
K. InferencesYesNot collectedNo

7.2 Sensitive personal information

We process account login and payment-related credential information to process payments, as required by law.

7.3 Rights

California residents may have rights to know, delete, correct, opt out, use authorized agents, and avoid discrimination for exercising rights. Residents may appeal request decisions and may submit rights requests using contact information in this statement.

We do not disclose personal information to third parties for direct marketing purposes under California's Shine the Light law.

8. EEA, UK, and Switzerland Supplemental Information

8.1 Controller

The controller of personal data collected under this Privacy Statement is FireFly Automatix, Inc.

8.2 Lawful bases of processing

Categories of IndividualsCategories of Personal InformationLawful basis/bases
Website visitors (server logs)IP address; timestamp; URL/query parameters; referrer URL; user-agentOur legitimate interests
Website visitors (analytics and tracking)IP address (may be anonymized); device/browser type; pages/clicks/session duration; referrer URL; non-precise geolocationOur legitimate interests
Contact / inquiry usersContact information; comments/questions; department requestedYour consent
Newsletter / text subscribersContact informationYour consent
Quote / demo / consultation usersContact information; service interest; webinar session; comments/questionsYour consent; our legitimate interests
Used equipment inquiry usersContact information; equipment/budget/year/hoursYour consent; our legitimate interests
Parts orders or leasing usersContact information; product selection; timing; comments/questionsYour consent; our legitimate interests
Support account / warranty usersContact information; ownership data; machine data; support ticket; optional SMS/photos/notesYour consent; our legitimate interests
E-commerce usersContact information; delivery method; payment information; optional sign-in/payment preferencesYour consent; our legitimate interests

Residents may have rights including access, consent withdrawal, deletion, portability, restriction, objection, rectification, and regulator complaint rights, subject to legal limitations and identity verification requirements.

9. Other Jurisdictions Supplemental Information

Depending on law in your jurisdiction, you may have rights to opt out of targeted advertising/sales/profiling, confirm processing, access portable copies, correct inaccuracies, request deletion, avoid discrimination, and appeal responses to rights requests.

To submit requests, contact us using the information in this statement. Requests must include sufficient detail for verification and response.

Document Dates

Last Revised: December __, 2025

Effective Date: __________