PRIVACY POLICY

Last updated: March 6, 2026

1. ABOUT THIS POLICY

Axiom3 Inc. ("Axiom3", "we" or "our") takes the protection of your privacy very seriously. This privacy policy (the "Policy") provides you with information about how we collect, use and disclose (collectively, "process", "processed", "processing") your Personal Information when you use our Axiom3 platform accessible at https://app.axiome3.ca (the "Platform") and the website https://www.axiome3.com (the "Website"). However, this Policy does not apply to third-party content and platforms accessible through our Platform or our Website, including through third-party links or features. These third parties may process your Personal Information in accordance with their respective privacy policies. We are not responsible for such processing and we encourage you to carefully review the policies of these third parties. In addition, Axiom3 clients for whom you may act as an authorized user, where applicable, (our "Clients") may collect your Personal Information through the Platform, subject to having previously obtained your consent.

2. PERSONAL INFORMATION

For the purposes of this Policy, "Personal Information" means any information relating to a natural person that allows, directly or indirectly, that person to be identified. However, Personal Information does not include professional contact information, such as your name, title or professional contact details. Personal Information also excludes information that has been irreversibly anonymized or aggregated in accordance with the criteria established by applicable laws and regulations.

When you use the Platform and/or the Website, we may collect the following Personal Information:

Your contact details such as your name, first name, email address, billing address and phone number to identify you and correspond with you;
Your Platform login and usage information such as the date of your registration on the Platform, your username, your password, your IP address, information about your browser or the device used;
Inspection data that you enter into the Platform, including photos, technical details and results concerning buildings;
Technical information relating to your use of our services, such as pages viewed, session duration, your clicks and your interactions with our services;
Data relating to cookies and identifiers, as described in the "Cookies and Other Similar Tools" section;
Any other Personal Information that you have provided to us or for which you have consented to the communication.

3. HOW DO WE COLLECT YOUR PERSONAL INFORMATION?

Directly from you

Generally, we obtain the Personal Information we need directly from you, for example when you fill out Platform registration forms, when you communicate with us, or when you use the Platform or the Website.

The legal basis for processing your Personal Information is generally consent, unless applicable law provides for another admissible legal basis (for example, to comply with our legal obligations, when necessary to establish, exercise or defend a legal action or judicial proceeding).

As an authorized user of our Client using the Platform, subject to your prior consent to a consent form provided by said Client, we may collect your Personal Information directly from the Client, who may submit Personal Information about you.

You have the right, if you wish, to refuse the processing of your Personal Information. You may also, at any time, and subject to reasonable notice and any applicable legal or contractual restrictions, withdraw your consent (where applicable) to the processing of your Personal Information in our possession by contacting us. However, you should be aware that if you choose not to provide your Personal Information, this may prevent you, for example, from using the Platform, as this information is essential to access it. You may contact us as indicated in the "Contact Us" section to submit any request in this regard.

4. WHY DO WE COLLECT AND USE YOUR PERSONAL INFORMATION?

We only collect Personal Information necessary to achieve the following purposes:

Provide access to the Platform, its features and its products;
Process transactions and manage billing;
Provide support to users of the Platform or the Website;
Respond to your questions, requests, comments or complaints;
Develop new features and products for users;
Personalize your experience on the Platform;
Prevent and detect fraud, abuse or suspicious activities;
Conduct statistical analyses and market research;
Personalize the content made available to you on the Platform;
To protect our legal rights and comply with our legal and regulatory obligations;
Any other use for which you have given your consent, including newsletter communications.

We do not use automated decision-making processes, including profiling, for decisions that produce legal effects concerning you. We only use anonymous and aggregated data for the purpose of improving our products. Your Personal Information will not be used for purposes related to artificial intelligence development or research.

Axiom3 does not rent or sell any of your Personal Information to third parties and will not share it with third parties without your consent, unless required by law or for the purposes set out above. Axiom3 will only share your Personal Information as follows:

With our employees. In the course of their work, our employees may need to access your Personal Information, for example when you contact us for assistance. Their access is limited to what is necessary for the performance of their duties.
With our Clients. In the course of your employment or business relationship with our Client, where applicable, we may share your Personal Information with our Client. In such a case, our Client undertakes to obtain your consent beforehand and not to use your Personal Information for purposes other than those for which you have consented.
With our strategic partners. Axiom3 may share your Personal Information with its partners, service providers and suppliers, including Supabase Inc., Microsoft Corporation, Plus Five Five Inc. (Resend) and Google LLC, to the extent that such disclosure is necessary for the purposes listed above. When Axiom3 shares your Personal Information with third parties, it implements reasonable contractual and technical protections, including data processing agreements, so that these third parties maintain the confidentiality of all Personal Information they process (to the extent required by applicable laws). Please note that these third parties may be located in countries other than yours, in which case Axiom3 takes appropriate measures, as described below in the "Where Do We Transfer Your Personal Information" section.
When required by law. Axiom3 may share your Personal Information if required by law or if it believes in good faith that such action is necessary to: (a) comply with the law; (b) comply with an order from a competent judicial authority in any jurisdiction; (c) comply with legal process served on Axiom3; (d) protect and defend the rights or property of Axiom3; (e) enforce or verify your compliance with any part of the agreements you have entered into with Axiom3, where applicable; (f) prevent fraud or any other illegal activity perpetrated through the Platform; or (g) act in urgent circumstances to protect the personal safety of users of the Platform or the general public.
Business transfers. We may share your Personal Information without your authorization when our business activities require it (in the case of a merger, acquisition, bankruptcy or sale of assets, for example). In such situations, we may also share all or part of your Personal Information with the relevant third party (or its advisors) as part of a due diligence process.

6. WHERE DO WE TRANSFER YOUR PERSONAL INFORMATION?

The Personal Information we collect is stored in secure systems that may be hosted on servers located outside your jurisdiction of residence in Canada, including in the United States. We may also use the services of agents and service providers who may be located outside of Canada. However, we strive to protect the Personal Information under our control, including Personal Information entrusted to an agent or service provider, whether located in Canada or in other jurisdictions or countries. In particular, we strive to limit their access to Personal Information to what is necessary to perform the functions assigned to them. These providers must also maintain internationally recognized certifications for the protection of Personal Information, such as ISO 27001 certification or any other equivalent certification. Please note that we also put in place contractual agreements, such as data processing agreements, with these agents and service providers to ensure the confidentiality and security of your Personal Information and that we conduct privacy assessments prior to these transfers in accordance with applicable legal requirements. This may include the implementation of robust and effective security measures. If you have any further questions about this, you may contact us.

7. HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

With necessary and appropriate security measures

We strive to apply the necessary and appropriate security measures and policies, based on the sensitivity of the information, to ensure the confidentiality of Personal Information in our possession or under our custody. In doing so, we follow generally accepted industry standards. Personal Information under our control is therefore only accessible to persons who have the right to access it, who are bound by confidentiality agreements, and who only access it when necessary for the performance of their duties. Appropriate physical, technical and administrative security and protective measures have been implemented and are maintained to minimize the risk of incidents. These measures include, for example, restricted access to premises and Personal Information, encryption of data in transit and at rest (TLS/SSL); access and permission management; activity logging; security incident response protocols; maintenance of internationally recognized certifications for the protection of Personal Information; notification in the event of a privacy incident, in accordance with applicable laws. The security mechanisms of the Platform are subject to regular audits, including penetration testing. Axiom3 is committed to promptly correcting any identified vulnerability. However, it should be noted that no method of transmission over the Internet, nor any means of electronic storage, is completely secure or error-free. We therefore cannot guarantee that your Personal Information is fully protected, for example against interference or misappropriation. You acknowledge that the security of online transactions and the security of communications sent electronically or by mail cannot be guaranteed. You provide us with information via the Internet or by mail at your own risk. We encourage you to exercise caution when using the Internet.

Payment information

The financial information you provide at the time of payment is that required by our payment solutions partner, Stripe. This information is processed separately by an encrypted payment module, in accordance with the security and encryption standards in effect in the payments industry (for example, the PCI SSL standard). No payment card information is collected or retained by Axiom3.

Children's privacy

The Platform is only accessible to persons who have reached the age of majority in their jurisdiction of residence. Axiom3 does not knowingly process the Personal Information of minors. If you believe that Personal Information has been collected from minors, you may contact Axiom3 as indicated in the "Contact Us" section.

If you believe that your Personal Information has been compromised, we invite you to contact our privacy officer in accordance with the "Contact Us" section.

Security incident management

In the event of actual or suspected unauthorized access to confidential information or Platform systems, Axiom3 will implement a formal process to contain, analyze, correct and document the incident, in compliance with applicable laws. When Axiom3 determines that unauthorized access has occurred, it immediately undertakes to inform you or our Client if you are affected by the unauthorized access or likely to suffer harm as a result. Following the discovery of any unauthorized access, Axiom3 undertakes to immediately take measures to: (i) terminate the unauthorized access; (ii) manage and mitigate the repercussions of the unauthorized access; and (iii) develop a strategy to prevent any unauthorized access in similar circumstances.

8. RETENTION AND DESTRUCTION

Your Personal Information will only be retained for the period necessary to achieve the purposes for which it was collected, or in accordance with the legitimate interests of Axiom3, or to comply with applicable legal, tax or regulatory requirements. At the end of this period, we will endeavor to destroy or anonymize this information.

To determine the appropriate retention period for your Personal Information, we consider the amount, nature and sensitivity of the Personal Information concerned, the potential risk of harm resulting from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, as well as any applicable legal, tax or regulatory requirements.

9. WHAT ARE YOUR RIGHTS?

Depending on applicable legislation, you may have certain rights regarding your Personal Information, such as the right to portability of your Personal Information, the right to access or rectify your Personal Information, and the right to withdraw your consent (where applicable). To exercise any of these rights (to the extent they are available), please contact us by writing to the address indicated in the "Contact Us" section. We will endeavor to process your requests within thirty (30) days.

In addition, you may file a complaint with Axiom3's privacy officer if you are not satisfied with the way we process your Personal Information or with our compliance with this Policy. The law also authorizes you to file a complaint with a privacy commissioner or any other competent supervisory authority for the protection of Personal Information.

10. COOKIES AND OTHER SIMILAR TOOLS

A cookie is a small text file that is stored in a dedicated location on your computer, mobile device, tablet or any other device when you use your browser to visit an online service. Other tracking technologies, such as web beacons and tracking pixels, may be used for similar purposes. In this Policy, all such tracking technologies are collectively referred to as "cookies". All Personal Information collected through the use of cookies by or on behalf of Axiom3 is treated with the same level of confidentiality as any other Personal Information held by Axiom3.

Strictly necessary cookies

These cookies are necessary for the operation of the Platform and/or the Website and cannot be disabled in our systems. Strictly necessary cookies must be present for the Platform and/or the Website to provide basic functions; they may include login, authentication, adding items to a shopping cart or electronic billing. They also allow a user to navigate from one page to another without losing the previous actions of the same session.

Non-essential cookies

If you have consented to their use, Axiom3 may also use non-essential cookies in connection with the Platform and the Website.

Cookies we use

Axiom3 may use different types of cookies. As indicated below, some cookies are strictly necessary for the proper functioning of the Platform and/or the Website, while others are used with your prior consent for functional or performance purposes, obtained through a consent banner:

Functionality cookies (also called "preference cookies"). These cookies are not essential to the provision of our services. They allow us to personalize and improve the user experience. For example, if you have consented to their use, these cookies will record your communication and language preferences.
Analytical cookies. We may use analytical cookies, including those from Google Analytics and Vercel Analytics, to better understand traffic patterns on the Platform and the Website, to help us measure and improve the effectiveness of the Platform and the Website. All information collected by these cookies is aggregated and anonymous. To opt out of being tracked by analytical cookies, please visit this module: https://tools.google.com/dlpage/gaoptout?hl=en. You may also decline the use of analytical cookies by following the instructions below.

How to manage cookies

With the exception of strictly necessary cookies, we will only place cookies on your devices with your consent, and these cookies will be retained for a maximum period of thirteen (13) months from the time they are placed on your devices. At the end of this period, your consent will be required again.

Cookies can be managed and/or disabled through your browser settings.

However, if you refuse cookies, you may not be able to use all the features of the Platform and/or the Website. If you would like more information on how to manage and/or disable non-essential cookies, please visit https://allaboutcookies.org/.

11. CONTACT US

You may contact us to exercise your rights or if you have any questions about our practices, procedures and policies regarding the protection of Personal Information. You may also contact us if you need help exercising or understanding your choices regarding the protection of your Personal Information. We will inform individuals who make inquiries or file complaints of the existence of relevant procedures. Axiom3 will review all complaints. If a complaint is found to be justified, we will take appropriate measures, including, if necessary, modifying our policies and practices. Please do not hesitate to contact us with any questions, inquiries, comments or complaints regarding your Personal Information.

The person responsible for ensuring compliance with and implementation of this Policy, including the handling of rights and complaints, is our privacy officer, whose contact details are as follows:

Privacy Officer Axiom3 inc. 105-1590, Rue Ampère Boucherville (Québec), J4B7L4 Canada support@axiome3.com

For any questions regarding matters relating to your contractual relationship with your employer (our Client), including with respect to consent obtained from you, we invite you to communicate directly with them.

12. CHANGES TO THIS PRIVACY POLICY

We reserve the right to modify this Policy at any time. We therefore encourage you to review it regularly. Changes to this Policy will be posted on our Platform and on our Website as an updated policy and will take effect upon posting. If we make material changes to this Policy, we will notify you by posting a notice on our Platform, our Website or by email. However, in all other cases, the posting of a new version of the Policy on our Platform and on our Website or your continued use of the Platform or the Website will be sufficient to inform you of the changes made to the Policy and to obtain your consent thereto.