Notice at Collection

IntelaMetrix Holdings, Inc.

Notice at Collection  ·  CCPA / CPRA Required  ·  Effective Date: July 21, 2026  ·  Applies to California Residents

California law requires IntelaMetrix Holdings, Inc. ("IntelaMetrix," "BodyMetrix," or "the Company") to give you this notice at or before the point we collect personal information from you — not just in a general privacy policy. This notice covers our eCommerce storefront, the legacy BodyView software license validation process, the BodyMetrix App cloud platform, and any forms you use to interact with IntelaMetrix.

You will see a short version of this notice at checkout, when creating an account, and on contact forms. This page contains the complete notice. For our full data practices, see our Privacy Policy. Use of the Platform is governed by the Master End User License Agreement (EULA), which controls for Platform data matters.

01   Personal Information We Collect

Legacy BodyView measurement data is not collected by IntelaMetrix. Body composition measurements generated through the legacy BodyView software are stored exclusively on your local PC and are never transmitted to, stored by, or accessible by IntelaMetrix. Data submitted through the BodyMetrix App cloud platform is collected and processed as described below.

Category Examples Purpose Retention Sold?
Identifiers & Contact Name, email address, mailing address, phone number, account username Order processing, account management, customer support, marketing (with consent) Relationship duration + 2 years No
Commercial & Transaction Data Order history, device purchases, subscription records, dunning records Order fulfillment, subscription billing and renewal, dunning management 7 years (tax compliance) No
Financial Data Payment card data — processed by our Payment Platform Payment processing only. Raw card data is never stored by IntelaMetrix. Transaction duration + 2 years No
License Validation Data (legacy BodyView) IP address, device/machine identifier, license key, software version, OS version, validation timestamp License enforcement, anti-piracy, fraud prevention, software update eligibility. Transmitted automatically by BodyView software on periodic license check. 2 years from last validation No
Customer Data (BodyMetrix App) Body composition measurements, End User records, assessment results submitted through the cloud platform Operating, supporting, and improving the Platform; generating aggregated, de-identified, and derived data; AI/ML model development, per Master EULA Sections 4 and 5 Active subscription + 30 days post-termination (EULA Section 4.8). Aggregated and de-identified data retained indefinitely. No
Regulatory Self-Identification (BodyMetrix App) The regulatory frameworks you indicate govern your organization’s use of the Platform (HIPAA, FERPA, COPPA/CIPA, International Data Protection Laws, or “Does not apply”), and the date of selection Compliance administration: activating applicable contractual schedules (e.g., the Business Associate Agreement), determining data-transfer eligibility, and maintaining acceptance records per Master EULA Section 1.2 Relationship duration + 2 years No
Device Telemetry (BodyMetrix App) Subscription status, device activity, error logs, performance data License enforcement, abuse detection, security, Platform operation (EULA Section 7.2). Collected continuously; cannot be disabled. Per EULA Section 4.8 No
Device & Usage Data (storefront) Browser type, pages visited, click events, session data Storefront analytics (anonymized), security monitoring, platform improvement. Only with consent. 2 years No
Geolocation (IP-derived) IP-derived location, shipping address Shipping calculation, tax compliance, fraud prevention 2 years No
Communications Support ticket content, email correspondence, feedback Customer service, product improvement 5 years from resolution No
Legacy BodyView Measurement Data Measurements generated through legacy BodyView software NOT COLLECTED by IntelaMetrix. Stored locally on your device only. N/A — not held by IntelaMetrix Never collected

02   Sensitive Personal Information

The CPRA designates certain categories of personal information as "sensitive." IntelaMetrix collects the following sensitive categories:

  • Financial account data — payment card information processed by our Payment Platform for the purpose of completing your purchase. We do not store raw card numbers.
  • License validation identifiers — device ID and machine fingerprint used solely for license enforcement.
  • Body composition data (BodyMetrix App) — measurements submitted through the cloud platform by or on behalf of professional and organizational Customers. This data may constitute biometric information or health data under applicable US state laws, including the Illinois Biometric Information Privacy Act (BIPA). As set forth in Master EULA Schedule B7, the Customer, as the data controller for End User data, is responsible for compliance with applicable state biometric and health data laws, including obtaining all required consents and providing all required notices to End Users.

Our eCommerce storefront does not collect health data, medical data, or biometric data. Legacy BodyView measurement data is stored locally on your device and is never transmitted to IntelaMetrix.

We use sensitive personal information only for the purposes described above and in the Master EULA. We do not use it to infer characteristics about you unrelated to the services you have requested.

Right to Limit Use. You have the right to request that we limit our use of your sensitive personal information to purposes that are reasonably necessary to provide the services you requested. To exercise this right, submit a request at Privacy Rights Request Form or email privacy@BodyMetrix.com.

03   Sources of Collection

  • Directly from you — when you place an order, create an account, contact support, or submit a form on our website
  • Automatically — via cookies and server logs when you navigate our eCommerce storefront (subject to your cookie consent preferences)
  • Via legacy BodyView software — periodic license validation calls transmit License Validation Data automatically when the software checks license status
  • Via the BodyMetrix App — Customer Data submitted to the cloud platform by you or your organization, and continuous device telemetry, as governed by the Master EULA
  • From our service providers — our eCommerce Platform, our CRM, our fulfillment provider, our Payment Platform, and our cloud computing platform, each of which may provide us with data related to your interactions with those platforms in connection with our services

04   Do We Sell or Share Your Personal Information?

We do not sell your personal information for money. IntelaMetrix does not and will not sell your personal information to third parties in exchange for monetary consideration.

We may share limited device and usage analytics data with advertising platforms where you have provided explicit consent through our cookie preference controls. This sharing may constitute "sharing" as defined by the CPRA for the purpose of cross-context behavioral advertising.

IntelaMetrix may use, license, or commercialize aggregated, de-identified, and derived data generated from Platform use. This data does not identify you or any individual and is not personal information under the CCPA / CPRA, per Master EULA Section 4.3.

You have the right to opt out of sharing at any time. To opt out:

  • Use the cookie preference controls at Cookie Policy
  • Click "Do Not Sell or Share My Personal Information" in the footer of our website
  • Submit a formal opt-out request at Privacy Rights Request Form
  • Enable Global Privacy Controls (GPC) in your browser — we will honor this signal automatically

05   Your California Privacy Rights

As a California resident, you have the following rights under the CCPA as amended by the CPRA. You may exercise these rights without fear of discrimination or denial of service.

  • Know what personal information we have collected about you and why
  • Access a copy of the specific personal information we hold
  • Request deletion of your personal information (subject to legal exceptions)
  • Request correction of inaccurate personal information
  • Opt out of the sale or sharing of your personal information
  • Limit our use of your sensitive personal information
  • Have your Global Privacy Control (GPC) signal honored automatically
  • Designate an authorized agent to submit requests on your behalf

To submit a rights request, visit our Privacy Rights Request Form or contact us at privacy@BodyMetrix.com. We will respond within 45 days.

Deletion Requests — Active Subscriptions. Deletion requests cannot be processed while you have an active paid subscription. Your subscription must be cancelled and your final billing date must have passed before deletion can proceed. For Customer Data processed through the BodyMetrix App, deletion is handled per Master EULA Sections 4.8 and 5.4: identifiable source data is deleted or de-identified, while aggregated, de-identified, and derived data, and previously trained AI/ML models, are not subject to deletion. See our Privacy Rights Request Form for full details.

End Users of Professional Customers. If your body composition data was collected by a gym, trainer, clinic, school, or other organization through the Platform, that organization is the data controller for your data. We recommend directing rights requests to that organization first; we will assist Customers in responding to valid requests as set forth in the Master EULA Schedule C.

06   Minors

Our eCommerce storefront and web properties are not directed at children under 16, and we do not knowingly collect personal information from individuals under 16 through the storefront. IntelaMetrix does not knowingly collect personal information directly from children under 13.

The Platform may be used by professional and organizational Customers in connection with minors, including in Youth Sports Compliance deployments. In those deployments, the Customer is the data controller for End User data and is responsible for compliance with all applicable child data protection laws, including COPPA, CIPA, and FERPA, and for obtaining all required parental or guardian consents, as set forth in Master EULA Section 6.4.

07   Related Documents

This Notice at Collection is a required point-of-collection disclosure. For complete information about our data practices, please review the following documents:

IntelaMetrix Holdings, Inc. — Privacy Team
Questions about this notice or your privacy rights: privacy@BodyMetrix.com  ·  916-840-0096  ·  Submit a Privacy Request