Privacy Policy

• Account information: name, email address, organization, role and permissions, invitations, language and application preferences.
• Content you upload: plans, specifications, drawings, photos, estimates, libraries and project data. These are business documents, but they may contain personal information such as the names or contact details of clients, professionals or site contacts.
• Usage and technical data: log data, IP address, browser and device information, pages viewed, actions taken in the application, timestamps and error reports.
• Communications: the messages you send us, demo requests and support requests.
• Cookies: cookies strictly necessary for authentication and sessions, a cookie that remembers your language, and aggregated audience measurement on this website.

We collect and use your information to:

• create and manage your account and your organization, including invitations and roles;
• provide the Services — read your documents, detect rooms, measure surfaces, extract materials, and produce quantities and estimates;
• secure the Services, prevent fraud and abuse, and troubleshoot problems;
• communicate with you about your account, support requests and service changes;
• improve and develop our features;
• handle billing where fees apply;
• comply with our legal obligations.

We do not sell your personal information, and we do not use it for advertising.

To produce takeoffs and estimates, the content you upload is analyzed by artificial intelligence models operated by us and by the AI providers listed below. Their outputs are decision support and are always subject to your review.

We do not use the Services to make decisions about individuals based exclusively on automated processing. If that ever changes, we will inform you as required by law and give you the opportunity to submit observations.

We may use de-identified, anonymized, aggregated or otherwise protected client data to improve our services and to develop, test and train artificial intelligence models and related technologies.

Anonymization is carried out according to generally accepted best practices, and we do not attempt to re-identify anonymized data. We do not use identifiable client content to train our models, and our AI providers are not permitted to use content submitted through the Services to train their own models.

We rely on the following providers, which act on our instructions under contracts requiring appropriate confidentiality and security measures:

• Clerk — authentication and account management (United States).
• Convex — application database and document storage (United States).
• Vercel — hosting, content delivery and website audience measurement (United States and global network).
• Google — Gemini artificial intelligence models used to read plans and specifications (United States).
• Mistral AI — artificial intelligence models used to extract text from documents (European Union).
• Resend — transactional email such as invitations (United States).
• Zoho — demo scheduling from this website (outside Canada).

Your information, including the plans, specifications and estimates you upload, may be stored, processed or accessed outside Québec and Canada, including in the United States and Europe, by us or by our service providers. As a result, your information may be subject to the laws of those jurisdictions, including lawful access by their authorities.

Before communicating personal information outside Québec, we assess the privacy risk as required by law and put in place reasonable contractual, technical and organizational safeguards to protect your information.

• Members of your organization, according to the roles and permissions its administrators set.
• The service providers listed above.
• A purchaser or successor, in connection with a corporate transaction, subject to equivalent protections.
• Public authorities, where required by law or by a valid legal request.
• Anyone else, with your consent.

We keep your information for as long as your account is active and as long as necessary for the purposes described above.

When an account or an organization is closed, we delete or anonymize the associated personal information and content within a reasonable period, normally no more than twelve months, except where retention is required by law (for example, accounting records) or necessary to establish or defend legal claims. Backups are purged on a rolling schedule.

We use reasonable safeguards, including encryption in transit, role-based access controls, least-privilege access for our personnel, logging, and providers that maintain recognized security practices. No system is perfectly secure.

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we notify the Commission d'accès à l'information du Québec and the persons concerned, as the law requires.

Subject to the conditions set out by law, you may:

• access the personal information we hold about you and obtain a copy;
• have inaccurate, incomplete or outdated information corrected;
• withdraw your consent or ask us to stop using certain information, which may prevent us from providing the Services;
• ask for the deletion of information we no longer need;
• receive the computerized personal information you provided in a structured, commonly used technological format (portability);
• ask that information be de-indexed or that its dissemination cease, where the conditions of the law are met.

To exercise a right, write to info@kalk.ca. We may need to verify your identity, and we respond within 30 days. If our answer does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec, or with the Office of the Privacy Commissioner of Canada where PIPEDA applies.

If your personal information was uploaded to KALK by an organization that uses our Services, we process it on that organization's behalf. Please contact it directly; we will forward your request if you write to us.

The application uses cookies that are strictly necessary for authentication and session management, plus a cookie that remembers your language. This website uses aggregated audience measurement. You can block cookies in your browser, but authentication will not work without the necessary ones.

The Services are intended for business use by adults. We do not knowingly collect personal information from children.

We may update this Policy. The effective date above tells you when the current version took effect, and we give notice of significant changes by email or in the application. Where the law requires it, we will obtain your consent again.

[legal entity name to be completed] (KALK), [business address to be completed], Québec, Canada. Privacy questions and requests: info@kalk.ca.