Privacy Policy

1. Information We Collect

We collect information you provide directly when you register, configure your properties, or contact support:

• Name, email address, phone number, and job title
• Property and portfolio details (building names, locations, asset types)
• BIM files and digital twin data you upload
• Payment and billing information (processed securely by our payment provider)
• Communication preferences and support correspondence

We also automatically collect certain technical data when you use the platform:

• IP address, browser type, and operating system
• Pages visited, session duration, and in-platform activity logs
• Device identifiers and geolocation data (city/country level)

2. How We Use Your Information

• Provision and operate the Clickpad platform on your behalf
• Process payments and manage your subscription
• Send service notifications, maintenance alerts, and platform updates
• Provide customer support and respond to your enquiries
• Analyze usage patterns to improve platform performance and features
• Detect fraud, ensure security, and comply with legal obligations
• Send marketing communications where you have given consent (you may opt out at any time)

3. Sharing Your Information

We do not sell or rent your personal information. We may share data with:

• Service providers — cloud hosting, payment processing, analytics, and SMS delivery (e.g., Twilio), all bound by data processing agreements
• Legal authorities — when required by law, court order, or to protect the rights and safety of Clickpad and its users
• Business successors — in the event of a merger, acquisition, or sale of assets, subject to confidentiality obligations

Your property data and BIM files are never shared with third parties except as required to deliver the platform service to you.

4. Data Security

• TLS/SSL encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls and multi-factor authentication
• Regular security audits and penetration testing
• SOC 2-aligned security controls across all infrastructure
• Incident response plan with breach notification within 72 hours as required by applicable law

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods:

• Account and profile data: duration of subscription + 12 months
• Property and asset data: duration of subscription + 30 days (exportable)
• Billing records: 7 years for tax and legal compliance
• Support communications: 3 years
• Activity logs: 12 months

6. International Data Transfers

Your data is primarily stored on servers in Canada. When data is transferred to service providers operating in other countries (including the United States), we ensure appropriate safeguards are in place through standard contractual clauses, data processing agreements, and adequacy decisions recognized under PIPEDA and applicable provincial privacy law.

7. Your Rights and Choices

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent for marketing communications at any time
• Export your property and asset data in machine-readable format
• Lodge a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at hello@clickpad.com. We will respond within 30 days.

8. Children's Privacy

The Clickpad platform is intended for use by property operations professionals and is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email at least 15 days before the updated policy takes effect. We encourage you to review this page periodically. Your continued use of the platform after a policy change constitutes your acceptance of the updated terms.