← Back to app
Contents
1. What We Collect2. How We Use It3. Sub-Processors4. Cross-Border Transfers5. Data Retention6. Commercial Email (CASL)7. Security8. Your Rights (PIPEDA)9. Breach Notification10. Children11. ChangesContact
Legal

Privacy Policy

Effective May 22, 2026  ·  PreBuildIQ Inc., Toronto, Ontario
Privacy Officer: info@prebuildiq.ca  ·  Applies to prebuildiq.ca and the PreBuildIQ platform.

PreBuildIQ Inc. is committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and applicable provincial law. This Policy explains what we collect, how we use it, who we share it with, and your rights.

1. What We Collect

  • Account data: name, email address, company name — required to create and manage your account
  • Project and usage data: property addresses, project details, uploaded drawings, generated reports, feature interactions — necessary to deliver the Service
  • Billing data: subscription tier, payment dates, invoice amounts — payment card data is processed directly by Stripe and not stored by PreBuildIQ
  • Technical and log data: IP address, browser type, session identifiers, pages accessed — collected automatically for security and analytics
  • Communications: contents of emails or support requests you send us

2. How We Use It

  • Deliver and operate the Service (reports, checklists, drawing analysis)
  • Process subscriptions and issue billing receipts
  • Send transactional emails (account confirmations, password resets, security alerts)
  • Detect and prevent security incidents and fraud
  • Improve Service accuracy and features using anonymized or aggregated data
  • Comply with applicable law and legal process
  • Send marketing communications only with your express or implied consent (see Section 6)

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

3. Sub-Processors

We share personal information with the following service providers under contractual data protection agreements:

Supabase — database & authentication (Canada/US)
Vercel — frontend hosting (US/global edge)
Fly.io — backend API hosting (Toronto region)
Stripe — payment processing (US)
Resend — transactional email (US)
Mapbox — address geocoding (US)
Anthropic — AI drawing analysis via API; inputs not used for model training per API agreement (US)
Microsoft Azure — document intelligence/OCR (US/Canada)

4. Cross-Border Transfers

Some sub-processors are located in the United States. Your personal information may be transferred to and processed in the US, which has different privacy laws than Canada. We ensure comparable protection through contractual data processing agreements with all sub-processors. By using the Service, you consent to these transfers.

5. Data Retention

  • Active account and project data: retained for duration of account
  • Deleted account data: permanently deleted within 30 days of account closure
  • Billing/financial records: retained 7 years as required by the Income Tax Act
  • Log and technical data: retained up to 12 months, then aggregated or deleted
  • Uploaded drawings: deleted within 30 days of account closure

6. Commercial Email (CASL)

We only send marketing or promotional emails with your express or implied consent under CASL. You may withdraw consent at any time by clicking "Unsubscribe" in any marketing email or contacting info@prebuildiq.ca. Withdrawal is processed within 10 business days. Transactional emails (receipts, resets, alerts) do not require consent and cannot be opted out of while your account is active.

7. Security

We use TLS encryption in transit, encryption at rest, row-level security (RLS) in our database, and access controls limiting employee access on a need-to-know basis. No system is 100% secure. If you discover a vulnerability, please report it to info@prebuildiq.ca.

8. Your Rights (PIPEDA)

  • Access: request a copy of personal information we hold about you
  • Correction: request correction of inaccurate or incomplete information
  • Withdrawal of consent: withdraw consent to non-essential processing (may limit Service access)
  • Erasure: request deletion of your account and personal information
  • Complaint: file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

Contact our Privacy Officer at info@prebuildiq.ca to exercise any right. We respond within 30 days.

9. Breach Notification

If a security breach creates a real risk of significant harm to you, we will notify the Office of the Privacy Commissioner of Canada and affected individuals as soon as feasible, as required by PIPEDA. We maintain a breach log for a minimum of 24 months.

10. Children

The Service is for business use by adults 18 and older. We do not knowingly collect information from minors. Contact us if you believe we have inadvertently collected such information.

11. Changes

We may update this Policy. For material changes, we will provide at least 14 days' advance notice by email. Continued use after the effective date constitutes acceptance.

Contact

Privacy Officer, PreBuildIQ Inc.
Toronto, Ontario, Canada
info@prebuildiq.ca

See also our Terms of Service.