Privacy Policy

Effective Date: January 13, 2026

Last Updated: January 13, 2026

1. Introduction

Welcome to Framework. Framework Construction Services Inc. (“Framework,” “Company,” “we,” “us,” or “our”) is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy (“Policy”) describes how we collect, use, disclose, store, and protect your personal information when you access or use our website located at https://framework.construction (the “Website”) and all related services, applications, tools, features, and functionalities (collectively, the “Service”).

Framework Construction Services Inc. is a corporation registered in Ontario, Canada, with its principal place of business at 25 Nicholas Ave, Toronto, Ontario.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our privacy practices, please do not access or use the Service.

This Privacy Policy is incorporated into and forms part of our Terms and Conditions. Capitalized terms not defined herein shall have the meanings ascribed to them in the Terms and Conditions.

2. Scope of This Policy

This Privacy Policy applies to:

  • Information we collect through the Service
  • Information you provide to us directly
  • Information collected automatically when you use the Service
  • Information we receive from third parties
  • Information collected through cookies and similar technologies
  • Information collected through our advertising and marketing activities

This Privacy Policy does not apply to:

  • Third-party websites, services, or applications linked from our Service
  • Information collected by third parties through their own services
  • Publicly available information
  • Information that is not personal information as defined by applicable law

3. Information We Collect

We collect various types of information depending on how you interact with the Service. This section describes the categories of information we may collect.

3.1 Information You Provide Directly

Account Registration Information:

  • First and last name
  • Email address
  • Password (stored in encrypted form)
  • Company or organization name
  • Job title or role
  • Phone number (optional)
  • Business address
  • Profile picture (optional)

Payment and Billing Information:

  • Payment method details (credit card, debit card, or other payment information)
  • Billing name and address
  • Transaction history
  • Subscription plan details

Note: Payment card details are processed and stored by our third-party payment processor. We do not directly store your full credit card numbers on our servers.

User Content:

  • Documents you upload (including construction documents, specifications, drawings, contracts, and other files)
  • Project information and descriptions
  • Communications and messages within the Service
  • Search queries and prompts
  • Notes, annotations, and comments
  • Any other content you submit or create using the Service

Communications:

  • Emails and messages you send to us
  • Customer support inquiries and tickets
  • Feedback, suggestions, and feature requests
  • Survey responses
  • Information provided during calls or video conferences

3.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

Device and Technical Information:

  • IP address
  • Device type and identifiers
  • Operating system and version
  • Browser type and version
  • Screen resolution and display settings
  • Time zone and language settings
  • Mobile network information (for mobile devices)

Usage Information:

  • Pages viewed and features used
  • Date and time of access
  • Duration of sessions
  • Click patterns and navigation paths
  • Search queries and commands entered
  • Documents accessed and files downloaded
  • Frequency and patterns of Service use
  • Referring URLs and exit pages

Location Information:

  • Approximate geographic location based on IP address
  • General region, city, or country
  • Note: We do not collect precise GPS location without your explicit consent

3.3 Information from Third Parties

We may receive information about you from third parties, including:

Authentication Providers:

  • If you sign in using a third-party authentication service, we receive information from that provider such as your name, email, and profile picture

Payment Processors:

  • Transaction status and history
  • Payment method information (last four digits only)
  • Fraud prevention and verification data

Business Partners and Integrations:

  • If you connect third-party services to your account, we may receive information from those services as permitted by your settings and their privacy policies

Public Sources:

  • Publicly available business information
  • Professional networking platforms (when you authorize access)

Service Providers:

  • Analytics data
  • Customer support interaction history
  • Marketing and advertising data

3.4 Information from AI and Automated Processing

When you use AI-powered features of the Service, we collect:

  • Queries, prompts, and instructions you provide
  • Documents and content submitted for AI analysis
  • AI-generated responses and outputs
  • Interaction patterns with AI features
  • Feedback on AI-generated content (such as ratings or corrections)

4. How We Use Your Information

We use the information we collect for the following purposes:

4.1 Providing and Operating the Service

  • Creating and managing your account
  • Processing and completing transactions
  • Providing customer support and responding to inquiries
  • Enabling collaboration and communication features
  • Storing and managing your documents and data
  • Delivering requested features and functionality
  • Processing documents through AI and machine learning technologies
  • Generating search results, recommendations, and insights

4.2 Improving and Developing the Service

  • Analyzing usage patterns to understand how the Service is used
  • Identifying areas for improvement and new feature development
  • Conducting research and development
  • Testing new features and functionality
  • Troubleshooting technical issues and bugs
  • Training and improving AI and machine learning models
  • Optimizing Service performance and user experience

4.3 Communication and Marketing

  • Sending transactional communications (account confirmations, receipts, password resets)
  • Providing Service-related announcements and updates
  • Responding to your inquiries and requests
  • Sending marketing and promotional communications (with your consent where required)
  • Conducting surveys and collecting feedback
  • Personalizing content and recommendations

4.4 Security and Protection

  • Protecting against fraud, unauthorized access, and abuse
  • Verifying identity and authenticating users
  • Monitoring for security threats and vulnerabilities
  • Enforcing our Terms and Conditions
  • Investigating potential violations and suspicious activity
  • Maintaining the security and integrity of the Service

4.5 Legal and Compliance

  • Complying with applicable laws, regulations, and legal obligations
  • Responding to legal requests and government inquiries
  • Protecting our legal rights and interests
  • Enforcing agreements and policies
  • Participating in legal proceedings as necessary
  • Meeting tax and accounting obligations

4.6 Business Operations

  • Processing payments and managing billing
  • Managing subscriptions and account statuses
  • Conducting audits and financial reporting
  • Planning business development and strategic initiatives
  • Analyzing business performance and metrics
  • Facilitating corporate transactions (mergers, acquisitions, etc.)

5. Legal Basis for Processing (For Users in Applicable Jurisdictions)

If you are located in a jurisdiction that requires a legal basis for processing personal data (such as the European Economic Area, United Kingdom, or other applicable regions), we rely on the following legal bases:

5.1 Contract Performance

We process your information as necessary to perform our contract with you, including:

  • Providing the Service you requested
  • Processing payments and managing your subscription
  • Providing customer support
  • Managing your account

5.2 Legitimate Interests

We process your information based on our legitimate business interests, including:

  • Improving and developing the Service
  • Marketing and promoting our services
  • Protecting against fraud and abuse
  • Analyzing usage and trends
  • Ensuring network and information security

Where we rely on legitimate interests, we balance our interests against your rights and only proceed where our interests do not override your fundamental rights and freedoms.

5.3 Consent

Where required by law, we obtain your consent before:

  • Sending marketing and promotional communications
  • Using cookies and similar tracking technologies for non-essential purposes
  • Processing sensitive categories of personal data
  • Any other processing that requires consent under applicable law

You may withdraw your consent at any time by contacting us or adjusting your preferences.

5.4 Legal Obligations

We process your information as necessary to comply with legal obligations, including:

  • Tax and accounting requirements
  • Responding to valid legal requests
  • Complying with data protection laws
  • Meeting regulatory requirements

6. How We Share Your Information

We may share your information with third parties in the following circumstances:

6.1 Service Providers

We engage third-party companies and individuals to perform services on our behalf and may share your information with them for those purposes. Categories of service providers include:

Cloud Infrastructure and Hosting Providers:

  • Data storage and computing services
  • Content delivery networks
  • Server hosting and maintenance

Payment Processors:

  • Payment processing and billing services
  • Fraud detection and prevention
  • Subscription management

Artificial Intelligence and Machine Learning Providers:

  • Document analysis and processing
  • Natural language processing
  • Search and recommendation algorithms
  • AI model training and improvement

Analytics and Performance Providers:

  • Usage analytics and reporting
  • Performance monitoring
  • Error tracking and debugging

Communication and Customer Support:

  • Email delivery services
  • Customer support platforms
  • Chat and messaging services

Marketing and Advertising:

  • Email marketing platforms
  • Advertising networks and platforms
  • Social media platforms
  • Conversion tracking and attribution

Security Services:

  • Authentication and identity verification
  • Fraud prevention
  • Security monitoring and threat detection

All service providers are contractually obligated to use your information only for the purposes for which it was disclosed and to maintain appropriate security measures.

6.2 Business Partners and Integrations

If you choose to connect third-party services to your account or use integrations, we may share information with those services as necessary to enable the integration. Such sharing is subject to your settings and the privacy policies of those third parties.

6.3 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including:

  • Complying with a subpoena, court order, or legal process
  • Responding to lawful requests from government agencies
  • Protecting our rights, property, or safety, or those of our users or others
  • Detecting, preventing, or addressing fraud, security, or technical issues
  • Enforcing our Terms and Conditions

6.4 Business Transfers

In connection with any merger, acquisition, reorganization, sale of assets, bankruptcy, or similar corporate transaction, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

6.5 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

6.6 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analysis, benchmarking, or other business purposes.

7. Artificial Intelligence and Data Processing

7.1 AI Processing of Your Content

The Service uses artificial intelligence and machine learning technologies to provide features including, but not limited to, document analysis, search functionality, content organization, and automated insights. When you use these features:

  • Your documents and content may be transmitted to AI service providers for processing
  • AI systems may analyze, index, and process your content to generate outputs
  • Your interactions with AI features help improve the Service and AI capabilities

7.2 Third-Party AI Providers

We use third-party AI service providers to power certain features of the Service. When your content is processed by these providers:

  • The processing occurs in accordance with our agreements with those providers
  • Providers are obligated to maintain confidentiality and security
  • Providers may use your content to improve their AI models unless we have opted out on your behalf where such options are available
  • Processing is subject to the providers’ own terms of service and privacy policies

7.3 AI Training and Improvement

Information about your use of AI features, including queries, feedback, and interaction patterns, may be used to:

  • Improve the accuracy and relevance of AI outputs
  • Train and fine-tune AI models
  • Develop new AI-powered features
  • Identify and correct errors or issues

7.4 Opting Out of AI Processing

If you do not wish to have your content processed by AI features, you may:

  • Choose not to use AI-powered features of the Service
  • Contact us to discuss alternatives where available
  • Delete content you have submitted for AI processing

Please note that certain core features of the Service may require AI processing to function.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. We use cookies and similar technologies (such as pixels, beacons, local storage, and scripts) to collect information about your interactions with the Service.

8.2 Types of Cookies We Use

Essential Cookies:

  • Required for the Service to function properly
  • Enable basic features such as security, authentication, and session management
  • Cannot be disabled without affecting Service functionality

Performance and Analytics Cookies:

  • Help us understand how visitors use the Service
  • Collect information about pages visited, time spent, and errors encountered
  • Used to improve Service performance and user experience

Functional Cookies:

  • Remember your preferences and settings
  • Enable personalization and enhanced functionality
  • Store information about your choices and customizations

Advertising and Marketing Cookies:

  • Deliver relevant advertisements
  • Track advertising campaign effectiveness
  • Measure conversion rates and attribution
  • Enable retargeting and remarketing

8.3 Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages, including:

  • Analytics providers
  • Advertising networks
  • Social media platforms
  • Customer support tools

These third parties may collect information about your online activities over time and across different websites.

8.4 Managing Cookies

You can control cookies through various methods:

Browser Settings:
Most browsers allow you to block or delete cookies through settings. Please note that blocking cookies may affect Service functionality.

Cookie Consent:
Where required by law, we obtain your consent before setting non-essential cookies.

Opt-Out Tools:

  • For advertising cookies, you may opt out through industry opt-out tools such as the Digital Advertising Alliance (DAA) or Network Advertising Initiative (NAI)
  • You may also adjust privacy settings within specific advertising platforms

8.5 Do Not Track

Some browsers offer a “Do Not Track” (DNT) feature. Our Service does not currently respond to DNT signals, as there is no industry standard for how to interpret such signals.

9. Data Retention

9.1 Retention Periods

We retain your personal information for as long as necessary to:

  • Provide the Service and fulfill the purposes described in this Privacy Policy
  • Comply with our legal and regulatory obligations
  • Resolve disputes and enforce our agreements
  • Maintain security and prevent fraud

Active Accounts:
We retain your information for as long as your account is active and you continue to use the Service.

After Account Termination:
Following account termination, we may retain certain information for a reasonable period to:

  • Complete any pending transactions
  • Comply with legal retention requirements
  • Protect against potential claims or disputes
  • Maintain backup and disaster recovery systems

Specific Retention Periods:

  • Transaction records: As required by tax and accounting laws (typically 7 years)
  • Security logs: Up to 2 years for security and fraud prevention
  • Marketing data: Until you opt out or as required by law
  • Aggregated analytics: Indefinitely in de-identified form

9.2 Deletion

When retention periods expire or upon your valid request, we will:

  • Delete or anonymize your personal information
  • Instruct our service providers to do the same
  • Remove your information from active systems

Please note that information in backup systems may take additional time to delete, and some information may be retained for legal compliance purposes.

10. Data Security

10.1 Security Measures

We implement reasonable technical, administrative, and physical security measures to protect your personal information, including:

Technical Measures:

  • Encryption of data in transit using TLS/SSL
  • Encryption of sensitive data at rest
  • Secure access controls and authentication
  • Regular security assessments and penetration testing
  • Intrusion detection and prevention systems
  • Regular software updates and patching

Administrative Measures:

  • Employee training on data protection and security
  • Access controls based on role and necessity
  • Confidentiality agreements with employees and contractors
  • Incident response procedures
  • Regular policy reviews and updates

Physical Measures:

  • Secure data center facilities (through our cloud providers)
  • Access controls and monitoring
  • Environmental controls and disaster recovery

10.2 Limitations

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, and you acknowledge that:

  • You transmit information at your own risk
  • You are responsible for maintaining the security of your account credentials
  • You should promptly notify us of any suspected security incidents

10.3 Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

  • Notify affected individuals as required by applicable law
  • Notify relevant regulatory authorities where required
  • Take appropriate steps to mitigate the impact of the breach

11. International Data Transfers

11.1 Cross-Border Transfers

Framework Construction Services Inc. is based in Canada. Your information may be transferred to, stored, and processed in Canada and other countries where we or our service providers operate.

These countries may have different data protection laws than your country of residence. When we transfer your information internationally, we take appropriate steps to ensure adequate protection.

11.2 Transfer Mechanisms

For transfers from jurisdictions that require specific transfer mechanisms (such as the European Economic Area), we rely on:

  • Standard contractual clauses approved by relevant authorities
  • Adequacy decisions where applicable
  • Other lawful transfer mechanisms as permitted by applicable law

11.3 Canadian Privacy Law

As a Canadian company, we comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

12. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. We honor these rights regardless of location where reasonably practicable.

12.1 Access and Portability

You have the right to:

  • Access the personal information we hold about you
  • Receive a copy of your personal information in a structured, commonly used format
  • Request information about how your data is processed

12.2 Correction and Update

You have the right to:

  • Correct inaccurate personal information
  • Update incomplete personal information
  • Ensure your information is current and accurate

12.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions, including:

  • Compliance with legal obligations
  • Establishment, exercise, or defense of legal claims
  • Completing ongoing transactions
  • Fraud prevention and security

12.4 Restriction and Objection

You have the right to:

  • Restrict processing of your personal information in certain circumstances
  • Object to processing based on legitimate interests
  • Opt out of marketing communications

12.5 Withdrawal of Consent

Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing before withdrawal.

12.6 Automated Decision-Making

You have the right to:

  • Not be subject to decisions based solely on automated processing that significantly affect you
  • Obtain human intervention in automated decisions where required by law
  • Contest automated decisions and express your point of view

12.7 How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: support@framework.construction

Mail: Framework Construction Services Inc., 25 Nicholas Ave, Toronto, Ontario, Canada

We will respond to your request within the timeframes required by applicable law. We may ask you to verify your identity before processing your request.

12.8 Appeals

If you are not satisfied with our response to your request, you may:

  • Appeal our decision by contacting us
  • Lodge a complaint with the relevant data protection authority in your jurisdiction

13. Specific Regional Rights

13.1 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know:

  • Categories of personal information collected
  • Sources of personal information
  • Purposes for collection and use
  • Categories of third parties with whom information is shared

Right to Delete:
Request deletion of your personal information, subject to exceptions.

Right to Correct:
Request correction of inaccurate personal information.

Right to Opt-Out:
Opt out of the sale or sharing of your personal information for cross-context behavioral advertising.

Right to Limit Use:
Limit the use and disclosure of sensitive personal information.

Non-Discrimination:
We will not discriminate against you for exercising your privacy rights.

Categories of Personal Information Collected:

  • Identifiers (name, email, IP address)
  • Commercial information (transaction history)
  • Internet activity (browsing history, usage data)
  • Professional information (job title, company)
  • Inferences drawn from the above

Do Not Sell or Share:
To opt out of the sale or sharing of your personal information, please contact us at support@framework.construction.

13.2 European Economic Area, United Kingdom, and Switzerland (GDPR)

If you are located in the EEA, UK, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent legislation:

  • Right of access
  • Right to rectification
  • Right to erasure (“right to be forgotten”)
  • Right to restriction of processing
  • Right to data portability
  • Right to object
  • Rights related to automated decision-making

Data Protection Officer:
For GDPR-related inquiries, please contact us at support@framework.construction.

Supervisory Authority:
You have the right to lodge a complaint with your local data protection authority.

13.3 Canadian Residents (PIPEDA)

If you are a Canadian resident, you have rights under PIPEDA and applicable provincial legislation:

  • Right to access your personal information
  • Right to challenge the accuracy and completeness of information
  • Right to know how information is used and disclosed
  • Right to withdraw consent (subject to legal restrictions)

Office of the Privacy Commissioner of Canada:
You may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

14. Children’s Privacy

14.1 Age Restrictions

The Service is not intended for use by children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.

14.2 Parental Notification

If we learn that we have collected personal information from a child under the applicable age limit, we will take steps to delete such information promptly. If you believe we may have collected information from a child, please contact us immediately at support@framework.construction.

15. Third-Party Links and Services

15.1 External Links

The Service may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services.

15.2 Third-Party Privacy Practices

We are not responsible for the privacy practices, content, or policies of third parties. We encourage you to review the privacy policies of any third-party services before providing your personal information.

15.3 Social Media Features

The Service may include social media features or integrations. Your interactions with these features are governed by the privacy policies of the respective social media platforms.

16. Changes to This Privacy Policy

16.1 Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

16.2 Notification of Changes

If we make material changes to this Privacy Policy, we will notify you by:

  • Posting the updated Privacy Policy on our Website with a new “Last Updated” date
  • Sending you an email notification (for material changes)
  • Displaying a prominent notice in the Service

16.3 Your Continued Use

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should discontinue use of the Service.

16.4 Prior Versions

Prior versions of this Privacy Policy may be available upon request.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Framework Construction Services Inc.

Address:
25 Nicholas Ave
Toronto, Ontario
Canada

Email: support@framework.construction

Website: https://framework.construction

Response Time:
We aim to respond to all privacy-related inquiries within 30 days or as required by applicable law.

18. Additional Information

18.1 Language

This Privacy Policy was prepared in English. If this Privacy Policy is translated into any other language and there is a conflict between the English version and the translated version, the English version shall prevail.

18.2 Relationship to Terms and Conditions

This Privacy Policy is incorporated into and forms part of our Terms and Conditions. In the event of any conflict between this Privacy Policy and the Terms and Conditions, the Terms and Conditions shall prevail with respect to matters not specifically addressed in this Privacy Policy.

18.3 Severability

If any provision of this Privacy Policy is held to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect.

By using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.