Privacy Policy

Last Updated: September 4, 2026

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when using our services:

• Account Information: Name, email address, company name, job title, phone number
• Project Documents: P&IDs, equipment lists, scope documents, and other files you upload for analysis
• Payment Information: Billing address and payment details (processed securely by third-party payment processors)
• Communications: Messages, feedback, and support requests you send to us
• Pilot Application Data: Information submitted through our pilot request forms

1.2 Information Collected Automatically

When you access our platform, we automatically collect:

• Usage Data: Features accessed, actions taken, time spent on platform
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, referring URLs
• Cookies and Tracking: Session cookies, analytics cookies (see Section 7)

2. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, support, and improve CapexIQ capital-governance, estimating, market-intelligence, integration, and decision-support services
• Document and Data Analysis: To process project documents and structured data using deterministic and AI-assisted platform capabilities
• Account Management: To create and manage your account, process transactions, and provide customer support
• Communication: To send service updates, security alerts, and respond to inquiries
• Product Improvement: To analyze usage patterns and improve our platform functionality
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To detect, prevent, and address fraud, security issues, and technical problems

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Contract Performance: Processing necessary to fulfill our service agreement with you
• Legitimate Interests: Processing for our legitimate business interests, such as improving services and ensuring security
• Consent: Where you have provided explicit consent for specific processing activities
• Legal Obligation: Processing required to comply with applicable laws

4. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

4.1 Service Providers

We engage trusted third-party service providers who assist in operating our platform:

• Cloud hosting and infrastructure providers
• Payment processors
• Analytics services
• Customer support tools

All service providers are contractually bound to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose information when required by law, court order, or government request, or when necessary to:

• Comply with legal obligations
• Protect our rights, privacy, safety, or property
• Enforce our terms of service
• Respond to claims of content violations

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

5. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Support legitimate business purposes

Project Documents: Uploaded documents are retained for the period applicable to the customer account and configured retention policy, subject to the applicable agreement and legal requirements.

Account Data: Retained only for as long as reasonably necessary for service, legal, security, contractual, and audit purposes, subject to applicable requirements.

6. Your Rights

6.1 Rights Under Canadian Law (PIPA/PIPEDA)

You have the right to:

• Access your personal information held by us
• Request correction of inaccurate information
• Withdraw consent for certain processing activities
• File a complaint with the Office of the Information and Privacy Commissioner of Alberta

6.2 Rights Under GDPR (European Users)

If you are in the European Economic Area, you have additional rights:

• Right of Access: Obtain a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at admin@capexiq.io. We will respond within the timeframes required by applicable law.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Enable core platform functionality and security
• Analytics Cookies: Understand how users interact with our platform
• Preference Cookies: Remember your settings and preferences

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

8. Data Security

We use administrative, technical, and organizational safeguards designed to protect information appropriate to the nature of the data and the deployed service environment. These safeguards may include:

• Protected data transmission and storage
• Access controls and authentication mechanisms
• Security assessment and vulnerability-management practices
• Personnel confidentiality and security procedures
• Incident response and recovery processes

For detailed security information, see our Security page.

9. International Data Transfers

Your information may be processed in Canada and other jurisdictions where CapexIQ or its service providers operate. Where cross-border transfers are subject to legal transfer requirements, we use appropriate contractual, organizational, or other safeguards as required by applicable law.

10. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notification to registered users
• Displaying a prominent notice on our platform

Your continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

13. Governing Law

This Privacy Policy is governed by the laws of the Province of Alberta, Canada, without regard to conflict of law principles. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Alberta, Canada.