The Transformation Hub Privacy Policy

This policy explains how we handle information on The Transformation Hub at app.vumaservices.ca. The platform is operated by Vuma Services, a business of Infinity Housing Solutions Canada Inc. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Our website, vumaservices.ca, is covered by our separate website privacy policy.

What We Collect

Account information

Your name, email address, company name, and the names and email addresses of team members you invite.

Business information you share

Answers you give during the guided diagnosis, including how your business works, your processes, your team's roles, and numbers such as revenue, targets, sales, leads and costs.

Information the platform creates

Diagnoses, findings, priorities, transformation maps and implementation plans built from what you share.

Usage information

Basic technical information needed to run and secure the platform, such as login times and error logs.

Billing information

Payments are handled by a secure third-party payment provider. We do not store your full card details.

How We Use It

• To run the diagnosis and build your plans.
• To deliver implementation services you choose to buy from us.
• To support you when you contact us.
• To keep the platform secure and working properly.

We do not sell your information. We do not share it with anyone for marketing.

How Ai Is Used

The platform uses OpenAI to analyze your answers and write findings and plans. When you use the guided diagnosis, the relevant information is sent to OpenAI for processing.

Under OpenAI's business terms, information sent through its API is not used to train its AI models. OpenAI may keep it for up to 30 days to monitor for abuse, then deletes it unless the law requires otherwise.

AI can make mistakes. Please review findings and plans before acting on them.

Where Your Information Is Stored

Your account and business information is stored in Canada, using Supabase's Canadian data region.

When the AI processes your answers, that information is handled by OpenAI in the United States. While it is there, it may be subject to US law.

Who Can See Your Information

Inside your company: only people you invite to your company account.

On our side, access is limited to:

• Our founder
• Our client coordinator
• Our implementation developer, who works under a signed confidentiality agreement

We access your information only to support you, deliver services you've asked for, or keep the platform working.

Service providers we use:

• Supabase: data storage (Canada)
• OpenAI: AI processing (United States)

Each provider only receives what it needs to do its job.

Emails from the platform are sent from info@vumaservices.ca.

Information About Other People

You may mention staff, customers or partners while describing your business. Please share only what's needed to explain how the work happens, and don't enter sensitive personal details such as health information or government ID numbers.

How Long We Keep It

• While your account is active, we keep your information so you can use the platform.
• If you close your account or ask us to delete your information, we delete it within 30 days.
• Backup copies are removed shortly after.
• Billing records are kept for seven years, as required for tax purposes.

Security

Your information is encrypted while it travels and while it is stored. Access is limited to the people listed above.

If a breach creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

Your Rights

You can:

• Ask to see the information we hold about you.
• Ask us to correct it.
• Ask us to delete it, except where the law requires us to keep it.
• Close your account at any time.

Age

The platform is for businesses. It is not intended for anyone under 18.

Changes To This Policy

If we make important changes, we will let account holders know by email before they take effect.

Contact

info@vumaservices.ca

If your concern isn't resolved, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.