Privacy Policy

Connexxia Inc. — Last updated: March 7, 2026

Connexxia Inc. ("Connexxia", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Connexxia platform and services (the "Service").

1. Information We Collect

1.1 Information You Provide

  • Account information: name, email address, organization name
  • Authentication credentials managed through secure OAuth providers
  • Organization settings, branding preferences, and configuration data
  • Content you create, upload, or input into the Service
  • Communications with us, including support requests

1.2 Information from Third-Party Integrations

When you connect third-party services (such as Salesforce, QuickBooks, Google Workspace, Xero, or HubSpot), we access data from those services as authorized by you during the connection process. This may include:

  • Financial data (invoices, bills, payments, transactions)
  • CRM data (contacts, accounts, opportunities)
  • Calendar and email metadata
  • Documents and file metadata

We only access data within the scope of permissions you explicitly grant. You can revoke access at any time through the Connectors settings.

1.3 Automatically Collected Information

  • Device and browser information
  • IP address and approximate location
  • Usage data, including pages visited and features used
  • Log data for security and debugging purposes

2. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve the Service
  • Process and sync data from connected third-party services
  • Generate AI-powered insights, recommendations, and analysis
  • Authenticate your identity and manage your account
  • Communicate with you about the Service, updates, and support
  • Detect and prevent security threats, fraud, and abuse
  • Comply with legal obligations

3. AI Data Processing

Connexxia uses artificial intelligence services (including third-party AI providers) to analyze your data and provide recommendations. When processing your data through AI:

  • Your data is processed in accordance with our agreements with AI providers
  • We do not use your data to train general-purpose AI models
  • AI-generated outputs are associated with your account and not shared with other users
  • You can opt out of AI-powered features through your organization settings

4. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement industry-standard security measures, including:

  • Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
  • OAuth tokens stored in Google Secret Manager with per-tenant isolation
  • Row-level security (RLS) policies ensuring strict data isolation between organizations
  • Regular security audits and monitoring
  • Multi-tenant architecture with configurable isolation modes (shared, dedicated, BYOC)

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service Providers: Third-party vendors that help us operate the Service (cloud hosting, analytics, AI processing), bound by data processing agreements
  • Third-Party Integrations: Services you explicitly connect, limited to the data required for the integration
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within 90 days, unless retention is required by law. You may request earlier deletion by contacting us.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Object to or restrict certain processing activities
  • Lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@connexxia.ai.

8. Canadian Privacy Law (PIPEDA)

As a Canadian company, Connexxia complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). We adhere to the ten fair information principles, including accountability, consent, limiting collection, and safeguarding personal information. You have the right to access and challenge the accuracy of your personal information held by us.

9. Cookies and Tracking

We use essential cookies required for authentication and session management. We may use analytics tools to understand usage patterns and improve the Service. You can control cookie preferences through your browser settings.

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top of this page indicates when this policy was last revised.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Connexxia Inc.
Privacy Officer
Email: privacy@connexxia.ai
Website: connexxia.ai

We use one analytics tool to count visits and clicks — no ads, no resale. Your choice stays on your device. / Un seul outil d'analyse, sans publicité ni revente.