Privacy Policy

We collect the following categories of information:

Account information. When you create an account, we collect your name, email address, and a securely hashed version of your password. If you join a workspace by invitation, we process the email address used to invite you.

Workspace and billing information. We store your workspace name and subscription status. Payments are processed by our payment provider, Stripe. We do not store your full credit-card number; Stripe handles card data directly and provides us with limited information such as your plan, billing status, and the last digits or card brand needed to manage your subscription.

Content you upload. When you use the Service, you upload construction drawings and related documents (typically PDFs). These files, the pages and text extracted from them, and the findings generated about them are stored so the Service can analyze them and show you results. See Section 3 for how we treat this content.

Usage and device information. Like most online services, we automatically collect technical information when you use the Service, including IP address (for example, recorded in security and audit logs), browser and device type, pages viewed, and actions taken. We use this to operate, secure, and improve the Service.

Communications. If you contact us, request a demo, or use our support channels, we keep a record of that correspondence so we can respond and improve our support.

We use the information we collect to:

provide, operate, and maintain the Service; analyze your uploaded drawings and generate coordination findings, clash detection, and reports; authenticate you and keep your account and workspace secure; process payments and manage your subscription and any add-on scan packages; respond to your requests and provide customer support; understand how the Service is used so we can improve it and develop new features; detect, prevent, and investigate fraud, abuse, and security incidents; and comply with our legal obligations.

We understand that the drawings and documents you upload are confidential and commercially sensitive. We treat them accordingly:

Your uploaded content is used to provide the Service to you and your workspace — to extract sheet and text data, run the coordination and clash analysis, and produce findings and reports. To perform the AI-based review, relevant drawing content is sent to our AI processing provider (see Section 6) solely to generate your results.

We do not sell your drawings or project data, and we do not use the contents of your drawings to advertise to you. Access within Clash Nexus AI is restricted to your workspace and to authorized personnel who need it to operate or support the Service.

Procore and Autodesk data. Data imported from Procore or Autodesk is used only to provide the customer-requested Clash Nexus AI NexScan review, report, RFI, and workspace workflow. Clash Nexus AI does not use Procore or Autodesk data to train, fine-tune, or benchmark AI/ML models, including LLMs.

Under PIPEDA, we collect, use, and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. Where the GDPR applies to you, we rely on the following legal bases: performance of our contract with you (to provide the Service you signed up for); our legitimate interests (to secure, operate, and improve the Service) where those interests are not overridden by your rights; your consent (for example, for certain analytics or marketing, where required); and compliance with legal obligations.

We share information only as described in this policy. Specifically, we may share information:

With service providers and sub-processors that help us run the Service (see Section 6), under contracts that require them to protect your information and use it only for the services they provide to us.

Within your workspace. Information and findings are visible to other authorized members of your workspace.

For legal reasons. If required by law, regulation, legal process, or enforceable governmental request, or to protect the rights, property, or safety of Clash Nexus AI, our users, or others.

In a business transfer. If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction; we will notify you of any change in ownership or use of your personal information.

We do not sell your personal information.

We rely on a small number of trusted third parties to operate the Service. Each processes information only as needed to provide their service to us:

Hosting & infrastructure — our application and databases are hosted with cloud infrastructure providers used to run the website, the backend, and stored data.

Stripe — processes payments and subscription billing. Stripe handles your payment-card data directly under its own privacy policy.

OpenAI — provides the AI models used to review drawing content and generate findings. Relevant content is transmitted for processing to produce your results.

Google Analytics — provides aggregate usage analytics for our website and app (see Section 7).

We may add or change sub-processors as the Service evolves. If we make a material change, we will update this policy. You can ask us for the current list at any time using the contact details below.

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Service, and understand how it is used.

Google Analytics 4. We use Google Analytics to measure traffic and understand which features are used, so we can improve the product. This may involve cookies and the collection of usage and approximate location (IP-derived) data. We have configured our in-app event tracking to avoid including the contents of your drawings — such as file names, sheet titles, or drawing text — in analytics events.

You can control cookies through your browser settings, and you can opt out of Google Analytics using Google's browser opt-out tools. Disabling some cookies may affect how the Service works.

Future analytics. We may in the future adopt additional, privacy-conscious analytics or product-measurement tools (for example, to better understand feature usage and reliability). If we do, we will update this policy and, where required, ask for your consent.

We keep personal information for as long as your account is active and as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take steps to delete or anonymize it. You may request deletion of your account and associated data as described in Section 11; some information may be retained where the law requires (for example, certain financial records).

We use technical and organizational safeguards designed to protect your information, including encryption in transit, hashed storage of passwords, access controls that limit data to your workspace and authorized personnel, and audit logging. No method of transmission or storage is completely secure, so while we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will respond in accordance with applicable law.

We are based in Canada, and our service providers may process and store information in Canada, the United States, or other countries. Where information is transferred across borders, it may be subject to the laws of those countries. Where required, we put appropriate safeguards in place for such transfers. By using the Service, you understand that your information may be processed in countries other than the one in which you reside.

Subject to applicable law, you have rights over your personal information. Under PIPEDA, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate. Where the GDPR or similar laws apply, you may also have the right to request deletion, restrict or object to certain processing, request a portable copy of your information, and withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at hello@clashnex.ai. We will respond within the timeframe required by applicable law. You also have the right to lodge a complaint with a supervisory authority — in Canada, the Office of the Privacy Commissioner of Canada (OPC), and in the EU/UK, your local data protection authority.

The Service is intended for use by businesses and professionals and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" above, and if the changes are material, we will provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

If you have questions, concerns, or requests about this Privacy Policy or your personal information, please contact us:

Thelon Technologies Inc.
Clash Nexus AI is a product of Thelon Technologies Inc.
Oshawa, Ontario, Canada
Email: hello@clashnex.ai

See also our Refund Policy.