// Legal

Privacy Policy

Last updated: July 24, 2026

Upflexity Technologies Inc. ("Upflexity," "we," "us," or "our") respects the privacy of individuals and organizations using our websites, applications, software, and related services. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information, and is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal private-sector privacy law applicable in Ontario, Canada, where Upflexity is based.

Upflexity currently offers the Services to users located in Canada. This Policy does not address obligations under non-Canadian privacy laws; those provisions will be added if and when the Services are offered outside Canada.

1. Scope

This Privacy Policy applies to personal information handled by Upflexity in connection with its websites, applications, AI-assisted construction and manufacturing tools, customer support, accounts, and related services. Where Upflexity processes information on behalf of an enterprise customer under a separate agreement, additional contractual privacy and data-processing terms may apply.

2. Information We Collect

Account Information: name, email address, organization, job title, account credentials, and contact information.

Transaction Information: subscription information, billing information, transaction records, and payment-related information. Payment card information is processed directly by third-party payment processors and is not stored by Upflexity.

Technical Information: IP address, browser type, device information, operating system, login information, application activity, error logs, security logs, and usage information.

Uploaded Content: construction drawings, plans, specifications, images, project documents, data files, and other materials uploaded for processing. Uploaded content may incidentally contain personal or confidential information.

3. How We Use Information

We use personal information to create and administer accounts, provide requested Services, process uploaded files, generate requested analysis and output, authenticate users, maintain security, troubleshoot technical problems, provide customer support, process transactions, communicate about accounts and Services, prevent fraud or misuse, comply with legal obligations, and improve the reliability and operation of our Services. We limit our collection, use, and disclosure of personal information to appropriate and identified purposes.

4. Uploaded Drawings and Project Files

Uploaded drawings, project files, and similar user content are processed solely to perform the operation requested by the user unless a separate written agreement expressly provides otherwise.

Upflexity does not use uploaded customer drawings or project files to train general AI or machine-learning models unless the customer separately and expressly agrees to such use.

Under the standard service, the user uploads a file; the file is processed; the requested analysis or output is generated; and the uploaded file and any temporary processing copies are deleted within 30 days of completion of the requested processing. Temporary copies may exist for a limited period, not to exceed 30 days, where technically necessary for processing, security, backup rotation, failure recovery, or legal compliance.

5. AI Processing Disclosures

Upflexity uses Anthropic as a third-party AI processing provider to generate analysis and output from uploaded content. Anthropic processes data submitted through Upflexity's Services solely to perform the requested processing and does not use it to train its general-purpose models. Output generated by AI processing is provided as a tool to assist the user's own review and decision-making. Upflexity does not guarantee human review of every AI-generated output prior to delivery to the user. Upflexity does not use AI processing to make automated decisions that produce legal effects or similarly significant effects concerning an individual without the ability for human review.

6. Data Minimization

Users should upload only information reasonably necessary for the requested processing and should avoid including unnecessary personal information in construction drawings or other uploaded materials.

7. Consent

Where required, Upflexity obtains consent for the collection, use, or disclosure of personal information. The form of consent may depend upon the sensitivity of the information and circumstances of collection. Consent may be withdrawn where legally permitted, subject to contractual or legal restrictions and reasonable notice.

8. Disclosure to Service Providers

Upflexity may use third-party providers to support functions such as cloud hosting, data processing, artificial intelligence processing (Anthropic), authentication, email (SendGrid), analytics, security, customer support, and payment processing (Stripe). These providers may process information on Upflexity's behalf. Upflexity seeks to limit provider access to information reasonably required to perform the relevant service and uses contractual or other appropriate measures where required.

9. International Processing

Some service providers, including AI processing providers, may process or store information outside Ontario or outside Canada. When information is processed in another jurisdiction, it may be subject to the laws and lawful access requirements of that jurisdiction. Where appropriate, Upflexity uses contractual, organizational, and technical safeguards to protect information handled by service providers.

10. Retention

Upflexity retains personal information only for as long as reasonably necessary for identified business or legal purposes. Uploaded construction drawings and project files processed under the standard service are deleted within 30 days of completion of the requested processing. Account, transaction, security, and business records are retained for up to 7 years following account closure, or longer where reasonably necessary to satisfy legal, accounting, security, or contractual requirements. When information is no longer required, we take reasonable steps to delete, destroy, or anonymize it.

11. Security

Upflexity uses administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of information under its control, including access controls, authentication controls, encryption, network security, restricted administrative access, logging and monitoring, software updates, backup procedures, and confidentiality requirements. No method of electronic storage or transmission can be guaranteed to be completely secure.

12. Privacy and Security Incidents

If Upflexity becomes aware of a security incident involving personal information, we will assess the incident and take reasonable steps to contain, investigate, and remediate it as soon as feasible. Where the incident creates a real risk of significant harm to an individual, Upflexity will notify affected individuals and the Office of the Privacy Commissioner of Canada as required under PIPEDA, without unreasonable delay.

13. Cookies and Similar Technologies

The website or application may use cookies and similar technologies where necessary for authentication, session management, security, preferences, and application functionality. We do not use tracking or advertising cookies. Where legally required, users will be provided appropriate choices concerning non-essential technologies.

14. Individual Privacy Rights

Subject to applicable law, individuals may request access to personal information Upflexity holds about them; request correction of inaccurate or incomplete personal information; withdraw consent to certain uses, subject to legal or contractual restrictions and reasonable notice; and raise questions or complaints concerning Upflexity's privacy practices. Upflexity will respond to such requests within 30 days of receipt, or provide notice of an extension where permitted by law.

15. Enterprise Customers

Where an organization provides access to Upflexity for its employees, contractors, or representatives, that organization may control certain account or project information and may have its own privacy obligations toward those individuals. Where Upflexity acts as a service provider processing information on behalf of an enterprise customer, the applicable enterprise agreement may further define the parties' privacy responsibilities.

16. Children's Privacy

The Services are intended for professional, commercial, educational, or individual use relating to construction, manufacturing, estimation, and related activities. They are not directed toward children. Upflexity does not knowingly collect personal information from children except where permitted by law and appropriate consent has been obtained.

17. Accuracy of Personal Information

Upflexity takes reasonable steps to maintain personal information that is sufficiently accurate, complete, and current for the purposes for which it is used. Users are responsible for maintaining accurate account information.

18. Privacy Accountability

Upflexity is responsible for personal information under its control and maintains policies and practices intended to support compliance with PIPEDA and other applicable privacy requirements. Questions, requests, or complaints regarding this Privacy Policy or Upflexity's handling of personal information may be directed to: hello@upflexity.com

19. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, business practices, service providers, or applicable legal requirements. The latest version will identify its effective or last-updated date. Where required by applicable law, we will provide additional notice or obtain consent before materially different privacy practices take effect.

20. Contact Us

For privacy questions, access or correction requests, complaints, or other privacy matters:

Upflexity Technologies Inc.
Ontario, Canada
Email: hello@upflexity.com