Privacy Policy

• Account information: name, email address, organization, role and permissions, invitations, language and application preferences.
• Content you upload: plans, specifications, drawings, photos, estimates, libraries and project data. These are business documents, but they may contain personal information such as the names or contact details of clients, professionals or site contacts.
• Usage and technical data: log data, IP address, browser and device information, pages viewed, actions taken in the application, timestamps and error reports.
• Communications: the messages you send us, demo requests and support requests.
• Payment information: billing name and address, tax numbers and invoices. Card details are entered on Stripe's pages; we only see the card brand and last four digits.
• Cookies: cookies strictly necessary for authentication and sessions, a cookie that remembers your language, aggregated audience measurement on this website, and Microsoft Clarity cookies that record how visitors use this website.

We collect and use your information to:

• create and manage your account and your organization, including invitations and roles;
• provide the Services: read your documents, detect rooms, measure surfaces, extract materials, and produce quantities and estimates;
• secure the Services, prevent fraud and abuse, and troubleshoot problems;
• communicate with you about your account, support requests and service changes;
• improve and develop our features;
• handle billing where fees apply;
• comply with our legal obligations.

We do not sell your personal information, and we do not use it for advertising.

To produce takeoffs and estimates, the content you upload is analyzed by artificial intelligence models operated by us and by the AI providers listed below. Their outputs are decision support and are always subject to your review.

We do not use the Services to make decisions about individuals based exclusively on automated processing. If that ever changes, we will inform you as required by law and give you the opportunity to submit observations.

We may use de-identified, anonymized, aggregated or otherwise protected client data to improve our services and to develop, test and train artificial intelligence models and related technologies.

Anonymization is carried out according to generally accepted best practices, and we do not attempt to re-identify anonymized data. We do not use identifiable client content to train our models, and our AI providers are not permitted to use content submitted through the Services to train their own models.

We rely on the following providers, which act on our instructions under contracts requiring appropriate confidentiality and security measures:

• Clerk: authentication and account management (United States).
• Convex: application database and document storage (United States).
• Vercel: hosting, content delivery and website audience measurement (United States and global network).
• Google Cloud: Gemini artificial intelligence models (Vertex AI) and text recognition (Vision, Document AI), used to read plans and specifications (United States, Canada and Europe).
• Mistral AI: artificial intelligence models used to extract text from documents (European Union).
• Backup AI providers, used only when the providers above are unavailable: Anthropic (Claude), OpenAI, xAI (Grok) and OpenRouter for AI models, and Microsoft Azure and Amazon Web Services for text recognition (United States).
• OVH: servers that read and analyze the plans and specifications you upload, and store the text index used to search them (France).
• Resend: transactional email such as invitations (United States).
• HubSpot: management of our sales relationships and email communications with clients and prospects (United States).
• Stripe: payment processing, subscriptions, invoices and taxes. Card details are entered on Stripe's pages and never stored by KALK (United States).
• Zoho: demo scheduling from this website (outside Canada).
• Microsoft Clarity: analysis of how visitors use this website (clicks, scrolling, mouse movements, session replays and heatmaps), to improve it. Text typed into forms is masked by default (United States).

Your information, including the plans, specifications and estimates you upload, may be stored, processed or accessed outside Québec and Canada, including in the United States and Europe, by us or by our service providers. As a result, your information may be subject to the laws of those jurisdictions, including lawful access by their authorities.

Before communicating personal information outside Québec, we assess the privacy risk as required by law and put in place reasonable contractual, technical and organizational safeguards to protect your information.

• Members of your organization, according to the roles and permissions its administrators set.
• The service providers listed above.
• A purchaser or successor, in connection with a corporate transaction, subject to equivalent protections.
• Public authorities, where required by law or by a valid legal request.
• Anyone else, with your consent.

For the content that an organization uploads to KALK, and for the personal information about third parties it may contain, the organization decides why and how it is processed, and we act on its behalf:

• we process this content only to provide the Services to the organization, on its instructions, or where the law requires it;
• we use only the service providers listed in section 5, under equivalent obligations, and we remain responsible for them;
• we notify the organization without undue delay of any confidentiality incident affecting its content, with what we know about it and the measures taken;
• we forward to the organization any request from a person concerned, and we help it respond;
• at the end of the subscription, the content remains available for export, then is deleted as provided in our Terms of Service.

The Services do not need sensitive information, such as health information, social insurance numbers or payment card numbers. Please do not upload any in your documents or fields.

We keep your information for as long as your account is active and as long as necessary for the purposes described above.

The content of an organization without an active subscription is kept for twelve months, in read-only mode, so that it can be consulted, exported or reactivated. After that, it may be deleted, after notice to the organization's owner at least 30 days in advance.

When an account or an organization is closed, we delete or anonymize the associated personal information and content within a reasonable period, normally no more than twelve months, except where retention is required by law (for example, billing and accounting records, kept for as long as tax laws require, currently six years) or necessary to establish or defend legal claims. Backups are purged on a rolling schedule.

We use reasonable safeguards, including encryption in transit, role-based access controls, least-privilege access for our personnel, logging, and providers that maintain recognized security practices. No system is perfectly secure.

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we notify the Commission d'accès à l'information du Québec and the persons concerned, as the law requires.

Subject to the conditions set out by law, you may:

• access the personal information we hold about you and obtain a copy;
• have inaccurate, incomplete or outdated information corrected;
• withdraw your consent or ask us to stop using certain information, which may prevent us from providing the Services;
• ask for the deletion of information we no longer need;
• receive the computerized personal information you provided in a structured, commonly used technological format (portability);
• ask that information be de-indexed or that its dissemination cease, where the conditions of the law are met.

To exercise a right, write to info@kalk.ca. We may need to verify your identity, and we respond within 30 days. If our answer does not satisfy you, you may file a complaint with the Commission d'accès à l'information du Québec, or with the Office of the Privacy Commissioner of Canada where PIPEDA applies.

If your personal information was uploaded to KALK by an organization that uses our Services, we process it on that organization's behalf. Please contact it directly; we will forward your request if you write to us.

The application uses cookies that are strictly necessary for authentication and session management, plus a cookie that remembers your language. This website uses aggregated audience measurement and Microsoft Clarity, which sets cookies to recognize a visitor across pages and visits and to record how the website is used. You can block cookies in your browser, but authentication will not work without the necessary ones.

The Services are intended for business use by adults. We do not knowingly collect personal information from children.

We may update this Policy. The effective date above tells you when the current version took effect, and we give notice of significant changes by email or in the application. Where the law requires it, we will obtain your consent again.

Les Solutions Estimation Kalk inc. (KALK), 258, rue Jean-Chauvin, Laval (Québec) H7L 5G9, Canada. Privacy questions and requests: info@kalk.ca.