Privacy Policy

OOUA — PRIVACY POLICY

This Privacy Policy explains how your information is collected, used, stored, and protected when you use the Signal Index platform, including the Construction OS ("CONOS") product and related services (the "Platform").

The Platform is operated by Tahseen Huda and David Illes, carrying on business as "Ooua" ("we," "us," or "our"). We intend to incorporate; upon incorporation, this Policy and all obligations under it will transfer to that corporation.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws.

By using the Platform, you consent to the practices described in this Policy.

We collect the following categories of information:

(a) Account Information — your name, email address, and password (passwords are stored in encrypted/hashed form).

(b) Business Information — information about your business that you provide, such as company/operating name, legal name, business address, HST/tax registration number, and similar details.

(c) Platform Content — the data and content you enter or upload while using the Platform, including project details, financial entries, costs, supplies, invoices, notes, and photographs ("Your Content").

(d) Technical and Usage Information — information generated as you use the Platform, such as log data, device and browser information, IP address, and how you interact with features. (Detailed product analytics may be introduced as the Platform develops; this Policy will be updated accordingly.)

We collect information directly from you when you create an account, enter it into the Platform, or communicate with us.

We use your information to:

(a) provide, operate, maintain, and secure the Platform; (b) create and manage your account and authenticate you; (c) respond to your requests and provide support; (d) improve, develop, and optimize the Platform and its features; (e) generate aggregated and de-identified analytics and insights (see Section 3); (f) communicate with you about the Platform, including service-related notices; and (g) comply with legal obligations and protect our legal rights.

We use your personal information only for the purposes described in this Policy or for purposes to which you later consent.

3.1 We may create aggregated, anonymized, and de-identified data derived from information across the Platform — that is, data combined across many users and stripped of details that identify any individual person or business.

3.2 We use this aggregated, de-identified data to power and improve our intelligence products, including the Signal Index scoring and market insight features, and to understand industry trends. Because this data does not identify you, it falls outside the definition of personal information.

3.3 We may share, publish, license, or sell aggregated and de-identified insights and intelligence products. We will not include information that identifies you or your business in any such product.

4.1 We do not sell, rent, or trade your personal information or Your Content to third parties.

4.2 We share personal information only as described in Section 5.

We share personal information only in these limited circumstances:

(a) Service Providers — with trusted third-party vendors who help us operate the Platform (such as cloud hosting, database, file storage, and email delivery providers), who may only use the information to perform services for us and are required to protect it.

(b) Legal Requirements — where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Ooua, our users, or others.

(c) Business Transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

(d) With Your Consent — in any other case, with your direction or consent.

6.1 We use reputable third-party cloud infrastructure providers to host and store data. Your information may be stored or processed in Canada and/or other jurisdictions where our service providers operate. Where data is processed outside your province or country, it may be subject to the laws of those jurisdictions, and we take reasonable steps to ensure appropriate safeguards are in place.

6.2 We use commercially reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is completely secure. The Platform is currently in a beta stage of development, and while we work to protect your data, we cannot guarantee absolute security.

6.3 You are responsible for keeping your login credentials confidential and for activity under your account.

We retain personal information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. Aggregated and de-identified data may be retained indefinitely, as it no longer identifies you.

Subject to applicable law, you have the right to:

(a) access the personal information we hold about you; (b) request correction of inaccurate or incomplete information; (c) withdraw consent to certain uses (which may limit your ability to use the Platform); (d) request deletion of your personal information, subject to legal and operational retention requirements; and (e) ask questions or make a complaint about how we handle your information.

To exercise any of these rights, contact us using the details in Section 11. We will respond within the timeframes required by applicable law. You also have the right to contact the Office of the Privacy Commissioner of Canada.

The Platform is intended for businesses and adults. It is not directed to individuals under the age of majority, and we do not knowingly collect their personal information.

We may update this Policy from time to time. Material changes will be indicated by an updated effective date and version, and, where practicable, by notice through the Platform. Your continued use after changes take effect constitutes acceptance.

For privacy questions, requests, or complaints, contact:

Ooua — Privacy Email: privacy@signalindex.ca

We are the party responsible for the personal information under our control.