Privacy Policy

This Privacy Policy describes how Tenon ("Meadowlark", "we", "us") collects, uses, and protects information when you use our construction project management platform. We are committed to protecting your privacy in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provisions of the EU General Data Protection Regulation (GDPR).

1. Information We Collect

Account Information

• Name, email address, and password (hashed)
• Company name and billing address
• Profile information you choose to provide
• Role and access permissions within your organization

Project Data

• Project details, schedules, documents, drawings, and photos you upload
• Financial data including estimates, invoices, budgets, and purchase orders
• Communications, RFIs, submittals, and daily logs
• Contact information for clients, subcontractors, and vendors you manage

Usage Analytics

• Feature usage patterns (which pages and functions you use)
• Session duration and frequency
• Error logs and diagnostic data
• IP address and device information for security purposes

2. How We Use Your Information

• To provide, maintain, and improve the Meadowlark platform
• To process payments and manage your subscription
• To send service notifications, invoices, and support communications
• To detect and prevent fraud, abuse, and security incidents
• To analyze usage patterns and improve product features (in aggregate, de-identified form)
• To comply with legal obligations

We do not sell your personal information to third parties. We do not use your project data for advertising purposes.

3. Data Retention

We retain your account and project data for as long as your account is active. If you cancel your account:

• You may request a data export within 30 days of cancellation
• Account data is deleted within 90 days of cancellation, unless legally required to retain it
• Billing records are retained for 7 years as required by Canadian tax law
• Backup copies may persist for up to 30 additional days

4. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention obligations)
• Portability: Request export of your data in a machine-readable format (JSON or CSV)
• Objection: Object to processing of your information in certain circumstances
• Withdrawal of Consent: Withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at joe@meadowlarkconstruction.ca. We will respond within 30 days.

5. Third-Party Services

We use the following third-party services to operate the platform:

• Stripe — Payment processing. Stripe handles all credit card data. We never store raw payment credentials. Stripe's privacy policy applies to payment data: stripe.com/privacy
• DigitalOcean — Cloud hosting and infrastructure in Canada/US regions. Your data is stored on DigitalOcean servers.
• Resend — Transactional email delivery (invoices, invitations, password resets)

These providers act as data processors on our behalf and are bound by data processing agreements.

6. Security

We implement industry-standard security measures including:

• All data encrypted in transit using TLS 1.2+
• Passwords hashed using bcrypt
• JWT-based authentication with short-lived tokens
• Regular security audits and vulnerability assessments
• Access logging and intrusion detection

7. Cookies

We use essential cookies only — specifically, authentication tokens stored in localStorage for session management. We do not use tracking cookies or third-party advertising cookies.

8. Children's Privacy

Meadowlark is a business platform not intended for use by individuals under 18 years of age. We do not knowingly collect information from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email at least 14 days before they take effect.

10. Contact

For privacy-related inquiries, requests, or complaints, contact our Privacy Officer:

Joe Meadows
Tenon
Quebec, Canada
joe@meadowlarkconstruction.ca