1. Introduction
Norvexy operates a software platform for Quebec construction companies, offering tools for quotes, email management, payroll, and invoicing. This policy explains what personal information we collect, why, how we use and protect it, and what rights you have over it.
Norvexy is a young company in active development. This policy will evolve as the platform does — the last-updated date appears at the top of this page.
2. Scope
This policy applies to: users at a client company who use the Norvexy platform, a client company's employees who log their hours through the time-clock link, visitors to norvexy.com and people who submit a demo request, and the contacts (clients or prospects) a client company adds into Norvexy.
It does not apply to third-party services Norvexy may link to or that a client company chooses to connect (for example Gmail or QuickBooks), which are governed by their own privacy policies.
3. Information We Collect
Depending on how you interact with Norvexy, we may collect:
- Account information: name, email, password (managed by our authentication provider), and language/display preferences.
- Company information: company name, configured trades, price list, and email signature.
- Contacts: names, emails, and phone numbers of clients or prospects a client company adds into Norvexy.
- Quotes and projects: project descriptions, job site photos, plans uploaded (PDF or image) for AI-assisted generation, quote line items, pricing, and status.
- Emails: the content of emails synced from a Gmail account a client company chooses to connect — subject lines, bodies, attachments, and sender/recipient metadata.
- Payroll information: employee name and email, logged hours, and the PIN used to authenticate on the time-clock page.
- Invoicing information: invoiced amounts, payment status, due dates, and, when a QuickBooks integration is active, the information sent to that service.
- Third-party connection tokens: OAuth access and refresh tokens (Gmail, QuickBooks) that let Norvexy act on your behalf with those services, always stored encrypted.
- Demo requests: name, company, number of employees, email, phone, and message, submitted voluntarily from the public site.
- Technical information: IP address, device and browser type, usage and error logs, and strictly functional cookies (see the Cookies section).
4. How We Use Information
We use the information described above to:
- Provide and operate the platform — creating quotes, syncing emails, calculating payroll, and generating invoices.
- Generate AI-assisted content: the text, photos, and plans you attach to a quote are sent to our language-processing provider (Anthropic) solely to produce the generated description and line items, and are not retained by Norvexy once generation is complete.
- Communicate with you — responding to demo requests, sending service notices, or daily time-clock reminders.
- Maintain platform security, prevent fraud, troubleshoot issues, and improve the product.
- Meet our legal obligations.
We do not sell personal information, and we do not use it for advertising.
5. Legal Basis for Processing
Norvexy operates out of Quebec. Processing of personal information is governed by Quebec's Act respecting the protection of personal information in the private sector ("Law 25") and, for matters falling under federal jurisdiction, by the Personal Information Protection and Electronic Documents Act ("PIPEDA").
We collect and use personal information based on your consent, the necessity of performing our contract with the client company, or a reasonable legitimate interest directly tied to operating the platform — always limited to what's necessary for that purpose.
8. Data Retention
We retain personal information for as long as a client company's account is active, plus a reasonable additional period after closure to meet legal, accounting, or dispute-resolution obligations. After that, information is deleted or anonymized.
Photos and plans uploaded for AI-assisted generation are not retained once generation is complete. Demo requests are kept for as long as needed for sales follow-up.
9. Your Privacy Rights
Under Law 25 and PIPEDA, you have the right to access the personal information we hold about you, request its correction, withdraw your consent where processing depends on it, and request its deletion, subject to our legal obligations. You may also file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
To exercise any of these rights, contact us at the address in the Contact section.
10. Security
We take reasonable measures to protect personal information, including: encryption at rest of third-party connection tokens (Gmail, QuickBooks) and payroll PINs, encrypted connections (HTTPS/TLS), role-based access control within a client company (owner or manager), and required authentication to access data.
No system is perfectly secure. We can't guarantee absolute security, but we take reasonable steps and continue to improve them.
11. International Transfers
Some of our service providers — including cloud hosting and AI-assisted processing — may store or process information outside Quebec or Canada, including in the United States. Where that happens, we expect those providers to offer a level of protection comparable to what Quebec law requires, consistent with Law 25's requirements for transfers outside Quebec.
12. Children's Privacy
Norvexy is built for construction companies and their adult employees. The platform is not intended for children, and we do not knowingly collect personal information from anyone under 18.
13. Incident Response
In the event of a privacy incident presenting a risk of serious harm, we will take reasonable steps to limit the consequences, notify the Commission d'accès à l'information du Québec and the affected individuals as required by Law 25, and document the incident.
14. Changes to This Policy
We may update this policy from time to time, including as the platform evolves. The last-updated date appears at the top of this page. Material changes will be communicated in a reasonable manner.
15. Contact
For any question about this policy or your personal information, write to us at admin@norvexy.com.