Skip to main content

Privacy Policy

Last updated: June 7, 2026

Plain-language summary. You own your building, asset, and operational data. We use it to run the platform for you and to support you. We may use anonymized, aggregated, de-identified, or synthetic data to improve our product and for research, but we will not use identifiable client data in public research, case studies, or marketing without your written consent. We disclose the third parties (subprocessors and integrations) that help us run the Service.
Not legal advice. This Policy is a working document for an early-stage platform and has not yet been reviewed by counsel. It should be reviewed by qualified Canadian and Barbadian counsel before being relied on for enterprise contracts, and a separate Data Processing Agreement (DPA) may apply for pilots and enterprise customers.

1. Who We Are

ABA Hughes Inc. ("Project Bindr", "we", "our", or "us") is a Canadian company that operates the Project Bindr platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use the Service. Project Bindr operates under applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, and we work with clients to respect local data-protection requirements, including Barbados data-protection requirements for Barbados-based clients.

2. What We Collect

Depending on how you use the Service, we may collect:

  • name, email address, and phone number;
  • organization, job title, and role;
  • login and account information;
  • support messages and correspondence;
  • uploaded documents and files;
  • building and facility information;
  • equipment and asset records;
  • work orders and maintenance records;
  • photos and notes;
  • metering and telemetry summaries;
  • usage logs and analytics;
  • device, browser, and IP information;
  • integration identifiers (e.g., Tandem model URNs, CircuitMeter device identifiers); and
  • audit logs.

Some of this data is personal information; some is confidential business information even if it is not personal. Building security details, floor plans, equipment locations, access notes, and infrastructure data may be sensitive and are handled with care.

3. How We Use Information

We use information to:

  • provide and operate Project Bindr;
  • create and maintain asset registers;
  • process uploads and imports;
  • enable work order and maintenance workflows;
  • support CircuitMeter, Tandem, BAS, and IoT integrations;
  • provide customer support;
  • secure the platform and prevent abuse;
  • troubleshoot and diagnose issues;
  • improve and develop features;
  • generate onboarding and readiness reports;
  • conduct approved and/or anonymized research and product development (see Section 4); and
  • comply with legal obligations.

4. Research & Development Use

To improve the platform and conduct research, the following boundaries apply:

  • we do not use identifiable client data in public research, publications, or case studies without your permission;
  • approved research may use anonymized, de-identified, synthetic, or aggregated datasets;
  • we may use de-identified operational patterns to improve models, workflows, templates, and product features; and
  • your name, logo, screenshots, and case studies require your written approval.

Further detail is set out in our Research & Development Data Use Notice.

5. AI & Machine Learning

  • AI features may process client data to provide the functionality you request;
  • we do not use identifiable client data to train public, third-party foundation models unless you explicitly authorize it;
  • outputs may be generated by internal, cloud, or hybrid AI systems;
  • human review remains required for operational decisions; and
  • you can ask us how AI and data are handled for your specific deployment.

6. Client Data Rights & Ownership

You retain ownership of the data you upload and your building data. Subject to legal and contractual obligations, you may request access to, correction of, export of, or deletion of your data. Please note:

  • data may persist in backups for a limited period after deletion; and
  • deletion may not remove de-identified, aggregated, or derived non-identifiable analytics that can no longer be linked to you.

7. Data Sharing & Disclosure

We do not sell your personal information. We may share information with:

  • Hosting and cloud infrastructure providers (e.g., Microsoft Azure) that run the Service;
  • Integration providers (e.g., Autodesk Tandem, CircuitMeter) when you authorize the integration;
  • Contractors and subprocessors bound by confidentiality obligations;
  • Research collaborators only under approved, anonymized, de-identified, synthetic, or permissioned conditions;
  • Legal and regulatory authorities when required by law or valid legal process; and
  • A successor in connection with a merger, acquisition, or sale of assets, subject to this Policy.

8. International Transfers & Storage

Depending on hosting, integrations, and your configuration, your data may be processed in Canada and/or other jurisdictions. Where supported by your deployment, Canadian data residency can be configured or preferred. We do not represent that all data is always stored only in Canada; integrations and subprocessors you enable may process data elsewhere. We apply appropriate safeguards for cross-border transfers in line with applicable law.

9. Security

We apply reasonable safeguards appropriate to the sensitivity of the data, including:

  • access controls and role-based permissions;
  • least-privilege access;
  • encryption in transit where applicable;
  • secure cloud hosting practices; and
  • audit logging and monitoring.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Retention

We retain information for as long as needed to provide the Service and for legal obligations, audit, backups, research de-identification, and legitimate business purposes. Retention periods vary by data type and may be specified in a pilot, services, or data processing agreement.

11. Your Rights

Subject to legal and contractual limits, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate or incomplete data;
  • Delete your personal information;
  • Export a machine-readable copy of your data; and
  • Withdraw consent where processing is based on consent.

To exercise these rights, contact us using the details below.

12. Cookies

We use essential cookies required for the Service to function and may use analytics cookies to understand usage. You can manage cookie preferences through your browser settings.

13. Children's Privacy

The Service is not directed to individuals under 16, and we do not knowingly collect personal information from children.

14. Changes to This Policy

We may update this Policy from time to time. We will post the revised Policy with an updated date and, for material changes, take reasonable steps to notify you. Continued use after the effective date constitutes acceptance.

15. Contact

For privacy questions or to exercise your rights, contact our privacy contact: