Privacy Policy

Tiercord Solutions Inc. (Tiercord, we or us) operates the Service. This Privacy Policy applies to tiercord.ca, its applications, support channels and related services (the Service). Tiercord is business software intended for construction-industry organizations and their authorized personnel, not for personal or family use. The corporate information website has a separate website privacy notice.

Tiercord is responsible for personal information used to operate accounts, billing, security, support and direct communications. For project, contract, counterparty, document and other information entered by a customer organization, that organization normally decides why and how the information is handled. Tiercord processes that Customer Data on its instructions to provide the Service. If your information was entered by a Tiercord customer, contact that organization first; we will assist it with an appropriate request. These roles do not remove Tiercord's own responsibilities under applicable privacy law.

Depending on how the Service is used, we collect or process:

• Account and organization data: name, work email, authentication and account-security records, identifiers and basic profile information from a selected Google, Microsoft or Intuit sign-in, organization name, membership, role and preferences.
• Construction and business records: projects, contracts, counterparties, contacts, invoices, payments, holdbacks, notices, declarations, adjudication materials, deadlines, documents and related correspondence.
• Connected-service data: connection identifiers, account metadata, granted permissions, encrypted access credentials, synchronization records and information a user chooses to import, export or send.
• Billing data: plan, subscription, transaction and invoice metadata. Payment-card details are collected and handled by our payment processor, not stored in Tiercord's application database.
• Security and use data: sign-in and account events, audit records, feature activity, delivery evidence, device and browser information, IP address, timestamps, diagnostics and error logs.
• Support and communications: messages, attachments, feedback and other information supplied when contacting Tiercord.
• Event subscriptions: email address, selected event filters, confirmation and unsubscribe records, and consent evidence such as time, browser information and a protected representation of the requesting IP address.

We receive information directly from users and workspace administrators; automatically from use of the Service; from other authorized members of the same workspace; and from services a user deliberately connects, such as Google, Gmail, Microsoft, QuickBooks Online, Xero, Procore, Jobber or an organization's identity provider. A customer may also enter information about employees, contractors, suppliers, owners or other project participants. Customers are responsible for having authority to provide that information to Tiercord.

Company search and autofill may consult Canadian Business Registries and public company websites using a business name or website domain. Postal-area lookup sends the first three characters of a Canadian postal code to a postal-area lookup service. These services receive the query needed for the lookup. Suggested company details must be reviewed for accuracy.

Street-address suggestions primarily search a hosted copy of Statistics Canada's public National Address Register. When that source has no match, supplementary searches may send the entered address and province to the BC Address Geocoder or an address service using OpenStreetMap data. Address suggestions do not establish who occupies a property or guarantee postal delivery. You can enter and correct an address manually.

We use personal information only for reasonable, disclosed purposes, including to:

• create and administer accounts, workspaces, memberships and permissions;
• provide project workflows, calculate deadlines, create documents, preserve audit records and deliver authorized emails and reminders;
• connect and synchronize services that a user or administrator enables;
• process subscriptions, maintain business records and provide support;
• deliver event alerts after an email subscription is confirmed and respect communication preferences;
• authenticate users, protect the Service, investigate misuse, diagnose errors and recover from incidents;
• comply with law, enforce agreements and establish or defend legal claims; and
• understand and improve the Service using aggregated or de-identified information where practical.

We do not sell personal information. We do not use personal information for third-party behavioural advertising.

Google login. If you choose Sign in with Google, Google provides the identifier and basic profile information needed to authenticate you, such as your name and email address. Google login is separate from connecting Gmail for delivery.

Gmail sending. If an authorized user connects a Gmail account, Tiercord requests only openid, email and the Gmail gmail.send permission. This lets Tiercord confirm the connected address and send messages the user or an authorized workspace administrator chooses or configures through Tiercord. It does not give Tiercord permission to read, list or download the mailbox, messages, drafts, contacts, labels or settings.

Optional workflow reply checks. A company administrator can separately authorize Gmail metadata access or Microsoft basic mail access for a connected company mailbox. Tiercord uses message identifiers, conversation references, addresses, sending and receiving times, and folder or label metadata to check replies associated with recorded invoice correspondence. This feature does not request message bodies or attachments and does not use mailbox data to train AI models. Credentials for these checks are encrypted separately from sending credentials. Monitoring can be disconnected in Company workflows without removing the sending connection; retained correspondence review and delivery evidence remain part of the company record.

Tiercord stores the connected address and Google subject identifier, granted permission, connection status and metadata, and encrypted OAuth credentials needed to send. Delivery records may include the sender, recipients, subject, delivery status, provider message identifier, timestamps and the Tiercord record that caused the send. These records form part of the customer's audit trail.

Google user data is used only to provide or improve the user-facing feature that caused the access. It is not sold, used for advertising or credit decisions, or used to train generalized artificial-intelligence models. It is shared only with infrastructure providers needed to operate the feature with the user's consent, for security or legal reasons, or in a merger, acquisition or asset sale with the user's explicit prior consent. Human access is permitted only with the user's affirmative agreement to view specific data, when necessary for security or law, or for internal operations on data that has been aggregated and anonymized. Tiercord's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

A connected Gmail account can be disconnected in Tiercord. The user can also revoke Tiercord under Google Account permissions. Disconnection stops new sends through that connection, but Tiercord may retain past delivery and audit evidence where reasonably needed for customer records, security or legal obligations.

Tiercord uses a commercial AI service provider for requested briefs, workspace intelligence, workflow setup and review, and assisted document reading. A requested analysis or workflow setup may send the user's instructions and relevant authorized records, such as project and counterparty details, invoice amounts, dates, statuses, deadlines and correspondence settings. These requests can contain personal information. Workflow setup uses AI; running an activated workflow follows its configured rules and does not ask an AI model to decide each action. Outputs, drafts, verification results and usage information may be saved in Tiercord. Only provide information appropriate for the task and review the output.

Automatic fallback during a document upload. Assisted reading is enabled by default, subject to workspace controls and service limits. If ordinary reading cannot adequately interpret an uploaded invoice or notice, Tiercord may send that document to our AI service provider as part of the upload, without a separate prompt for each file. This is limited by file size and page count and excludes Tiercord-generated documents. Suggested values are identified as AI-assisted and require review before confirming the business record. The uploaded file and extraction results may already be stored before that confirmation. A workspace administrator can contact us to disable this fallback for the workspace before uploading; manual entry remains available.

AI service handling. Tiercord uses commercial API settings and has not opted into optional data sharing for model training. Under those settings, inputs and outputs are not used for model training by default. Standard request retention is up to 30 days; model-safety reviews, abuse investigations and legal requirements can involve longer retention. Tiercord does not have a zero-retention arrangement. Contact our Privacy Officer for current provider details and the applicable handling policies. Tiercord's own saved records follow the retention section below. The separate assistant connection described next uses the customer's chosen provider account and settings.

Connecting Tiercord to an assistant. After a workspace administrator enables this feature, an eligible member can authorize a read-only connection to an assistant such as Claude, ChatGPT or Microsoft Copilot. The member chooses the access and projects to share within their current Tiercord permissions. The assistant can then request the authorized records, including projects, contracts, counterparties, invoices, payments, holdbacks, notices and computed deadlines, without a new consent screen for each request. Tiercord checks current access when the connection is used. The member can withdraw their own connection, an administrator can withdraw workspace connections, and loss of required access can also stop it. The connection cannot change, send or issue records, and some free-text fields are withheld entirely.

Tiercord records each authorized read attempt before reading and records the prepared response before returning workspace information. If either record cannot be confirmed, that information is not returned. These audit records describe the request and prepared output; they do not prove that a provider or person received it. Information returned through the connection goes to the provider account or agent used for that connection, which may be an individual or organizational account. If an agent uses shared connected credentials, other people using that agent may receive information within the authorized scope. The provider's handling and any further sharing depend on its terms, the applicable account agreement and settings. This Policy continues to describe Tiercord's own handling of the information.

We disclose information only as reasonably needed for the purposes above, including to:

• database, authentication and file-storage service providers;
• application hosting, network delivery and security providers;
• public-site analytics providers, as described under Cookies, local storage and analytics;
• Google for optional Google login, Gmail delivery and separately authorized workflow reply metadata;
• Microsoft for optional Microsoft sign-in, Outlook delivery and separately authorized workflow reply metadata;
• payment processors for subscription billing and payment processing;
• AI service providers for the features and automatic document-reading fallback described above;
• Intuit for optional Intuit sign-in and QuickBooks Online integration, and Xero, Procore and Jobber when an authorized administrator connects those integrations;
• business-registry, public-website and postal-area lookup services described above;
• error-monitoring service providers if optional external monitoring is enabled; and
• professional advisers, insurers, auditors, law-enforcement bodies or other authorities when reasonably necessary or legally required.

Contact our Privacy Officer for the current providers involved in processing your information, their functions, processing locations and applicable safeguards.

Information may also be disclosed in a financing, reorganization, sale or transfer of all or part of the business, subject to confidentiality and applicable law. Messages sent from a connected Gmail account are delivered directly through Google's Gmail API.

Customer Data is also available to authorized workspace members according to their permissions, and is disclosed to recipients or external services when a customer directs a send, export, synchronization or assistant connection. Workspace administrators may control access and retain business records even after a member leaves.

Public document verification. A person with a working verification link or QR code can view the document's filename, type, identifier, generation date, software version, file hash and generation-verification status without signing in. This verifier does not provide the document file itself. A filename can contain personal or commercially sensitive information. Verification links are not individually expiring download links and can continue to work while the underlying record remains available. Share them only with appropriate recipients.

Tiercord's core application servers are configured to run in Montréal, Canada. Core workspace records and files are stored in Canada Central. These are the configured locations for application execution and core data storage. Separate services, including AI, payment processing, connected integrations, support, analytics and network delivery or security, may process the information they receive outside Canada, including in the United States. Information processed outside your province or Canada may be subject to the laws and lawful access processes of that location. We use contractual, technical and organizational safeguards appropriate to the service and information involved.

Where consent is required, it may be express or implied depending on the sensitivity of the information and the reasonable expectations surrounding the transaction. Optional integrations require an authorized connection. Requested AI features send information when used; the document-reading fallback described above is enabled by default and may run during an upload unless disabled for the workspace. You may withdraw consent on reasonable notice, subject to applicable law. Withdrawal may prevent Tiercord from providing the affected feature or Service. Collection, use or disclosure may also occur without consent where applicable law permits or requires it.

We retain information only as long as reasonably needed for the purposes described here, customer instructions, dispute and audit requirements, security, backups and applicable legal obligations. The period depends on the type and sensitivity of the information, the customer's configuration, the active account relationship and legal limitation periods.

An individual account deactivation schedules permanent deletion after a 90-day reactivation period. It can also affect workspaces solely owned by that account. Records belonging to a continuing workspace with other owners do not disappear simply because one member leaves. A separate organization-deletion request removes active workspace records through a deletion workflow; processing and retries take time. Export needed records first. Cancelling a subscription is separate from requesting deletion.

Deletion does not instantly remove independent backups, copies exported to a device, messages already delivered, or data held by a connected provider. Backup rotation, security and diagnostic records, limited deletion evidence, billing records and legal holds can have different retention periods. We do not promise a single deletion deadline for every copy. Retained information remains subject to appropriate safeguards and must be deleted or de-identified when there is no longer a lawful business or legal reason to keep it. Contact the Privacy Officer about a specific record or deletion request.

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encrypted network transport, access controls, tenant isolation, audit logging, backups and application-layer encryption for selected sensitive fields and integration credentials. No system is perfectly secure, and Tiercord cannot guarantee that an incident will never occur.

Customers are responsible for protecting credentials, using appropriate workspace roles, promptly removing access that is no longer authorized, and notifying Tiercord of suspected compromise. Report security or privacy concerns to the Privacy Officer using the contact below.

Using the guided pricing experience is optional and does not require contact details. When you choose a profession and use the journey, Tiercord automatically records structured answers about your work and tools, the estimated billed-work band, suggested plan and price context, progress, completion and onward-action clicks. There is no separate permission prompt in the journey. We use these responses to understand product needs, professional audiences and where the experience can improve.

The exact billed-work amount stays in your browser; we receive only its pricing band. Records include timestamps, a random journey identifier and a broad acquisition category, such as a search engine or one of our persona pages. We do not link responses to your account, request names, email addresses, client information or matter details, or retain arbitrary campaign text, full referrer URLs or raw IP addresses in the research record. These records are held in our application database and are not sent as custom events to website analytics or advertising services. Hosting and network providers separately process the technical requests described elsewhere in this Policy.

Your progress, including the entered estimate, is remembered in the current browser tab for up to 24 hours when browser storage is available. Research records expire after 90 days and are removed by a scheduled hourly cleanup. Access is restricted to authorised Tiercord administrators. Browser privacy signals and an existing analytics decline disable research collection. The control below stops collection for the current tab and requests removal of responses for which that tab still holds a removal token. If removal fails, you can retry. An empty marker prevents delayed requests from restoring removed responses and expires on the same schedule. Closing the page or clearing browser storage does not itself delete earlier research records; once the tab’s removal tokens are gone, those unlinked records cannot be located through your account and expire on the stated schedule.

Tiercord uses cookies and browser storage needed for authentication, security, active workspace and portal preferences, interface settings, tutorials and optional on-device backup features. These technologies keep sessions working and remember user choices. At the effective date of this Policy, Tiercord does not use third-party behavioural-advertising cookies. Blocking essential storage may prevent sign-in or other parts of the Service from functioning.

We use cookie-free website analytics to understand public-site traffic, including page categories, referring websites, approximate location, browser and device type. Our pageview filter excludes account, workspace, administration and document-verification routes, removes URL query strings and fragments, and groups public content paths without their individual slugs. We do not send form contents or Customer Data as custom analytics events. This service uses a short-lived visitor hash rather than a persistent cross-site advertising identifier. Hosting and network providers separately process technical requests to deliver and protect the Service.

With your permission, we also use Google Analytics 4 to measure visits to public pages. Google receives page categories, referring website information, browser and device information, and network information such as your IP address. Analytics cookies recognize visits on this website for up to 180 days. We exclude account, workspace, administration and document-verification pages, form entries, URL query strings and fragments. Advertising storage, Google signals and advertising personalization are disabled. Google may process information outside Canada. You can decline or withdraw permission through the analytics preferences on this page; this stops Google Analytics and removes its cookies on this website. Your choice is stored for 180 days, separately on each Tiercord website. We remember that the request has been shown so it does not appear again unless you clear this website’s browser storage. Browser privacy signals also disable Google Analytics. How Google processes information from sites that use its services.

Change analytics preferences

We may send account, security, billing, support, deadline, backup and other operational messages needed to provide the Service. Where required, promotional messages are sent with consent and include an unsubscribe method. Opting out of marketing does not stop essential operational communications. Customer-generated emails and reminders are sent at the direction of the customer organization, which is responsible for its recipients, content and legal authority to send them. Tiercord remains responsible for obligations the law places on it. Event alerts require confirmation through the subscription email and can be stopped using their unsubscribe link.

Subject to applicable exceptions, you may request access to personal information under Tiercord's control, ask how it has been used and disclosed, and request correction. We may need to verify identity and may ask for details needed to locate the record. If another customer organization controls the information, we will direct the request to that organization or assist it in responding.

Send a request or complaint to the Privacy Officer at [email protected]. We will investigate and respond within the period required by applicable law. You may also contact the Office of the Information and Privacy Commissioner for British Columbia or, where applicable, the Office of the Privacy Commissioner of Canada.

We may update this Policy as the Service, providers or law changes. We will post the new version here and change the effective date. If a change is material, we will provide additional notice where reasonably appropriate or legally required. A policy update does not by itself authorize a materially new purpose for previously collected information; we will obtain any consent required by applicable law.

Privacy Officer, Tiercord Solutions Inc.
Email: [email protected]

General support: [email protected]