Privacy Policy

Effective date: July 14, 2026 · Version 1.0

1.Who We Are

Sigmatake operates the Sigmato (Total Takeoff) platform — an AI-powered building material estimation service for Canadian construction professionals. When this Policy refers to “Sigmatake,” “we,” “us,” or “our,” it means Sigmatake as the organization responsible for the personal information described below.

2.What Personal Information We Collect

2.1 Account Information

• Name and job title of the authorized contact
• Company name and business address
• Business email address and phone number
• Username and encrypted password (managed by Supabase Auth)

2.2 Project & Drawing Information

• Architectural drawings you upload (PDF, DWG, DXF formats)
• Project names, locations, and descriptions you provide
• Province or territory of the construction project
• Any personal information incidentally included in title blocks or drawing notes

We advise you to review and redact personal information from drawing title blocks before submission where feasible.

2.3 Brand Profile Information

• Company logo (image file)
• Brand colours and design preferences
• Estimator name for white-label BOM output

2.4 Payment Information

Payment card details are collected and processed directly by Stripe Inc. Sigmatake does not store full credit card numbers. We retain invoices, payment confirmations, and transaction references for tax and accounting compliance.

2.5 Usage & Technical Information

• IP address and browser type (for security monitoring)
• Pages visited and actions taken on the Sigmato platform
• Estimate request logs and delivery confirmations

3.Why We Collect It (Purposes)

We collect and use personal information only for the following purposes:

• Delivering the Services: Analyzing drawings, generating Bill of Materials estimates, and applying white-label branding.
• Account management: Creating and maintaining your client account, authenticating login, and communicating with you about your account.
• Payment processing: Invoicing, collecting fees, and managing instalments per your selected payment plan.
• Legal compliance: Meeting obligations under BC PIPA, Alberta PIPA, PIPEDA, CRA requirements, and the BC Electronic Transactions Act.
• Platform improvement: Using anonymized, non-identifiable statistical data to improve the Sigmato AI estimation engine. No personal information is used for this purpose.
• Security and fraud prevention: Monitoring for unauthorized access, abuse, and suspicious activity.

We do not use your personal information for advertising, sell it to third parties, or share it for any purpose other than those listed above without your prior written consent.

4.Cross-Border Data Transfer (All Provinces)

To deliver the AI analysis component of the Services, Sigmatake transmits your architectural drawings and associated project data to sub-processors located in the United States of America. This is necessary because the AI model we use (Claude by Anthropic PBC) operates on infrastructure based in the United States.

By creating an account and submitting drawings through the Sigmato platform, you expressly consent to the transfer of your information to the United States for processing as described in this Policy and our Service Agreement.

Note: your drawings, account information, and generated estimates are stored at rest in Canada (Supabase's Montreal, QC data centre — see Section 6). Only the drawing images themselves are transmitted to Anthropic's US infrastructure at the moment of AI analysis; they are not stored there afterward.

5.Alberta-Specific Disclosure (Alberta PIPA s.13.1)

Alberta PIPA, SA 2003, c P-6.5, s.13.1 requires organizations to disclose to Alberta residents when their personal information may be processed or accessed outside Canada. The following mandatory disclosures apply:

6.Sub-Processors & Third Parties

Sigmatake engages the following third-party sub-processors to deliver the Services:

We do not permit sub-processors to use your personal information for their own purposes. Anthropic's API terms prohibit use of API inputs for model training.

7.Data Retention

8.Security

• Encryption in transit: All data is encrypted using TLS 1.2 or higher.
• Encryption at rest: Drawings and personal information stored in Supabase are encrypted at rest using AES-256.
• Access controls: Access to client data is restricted to personnel who need it to deliver the Services.
• Password security: Passwords are never stored in plain text (Supabase Auth uses bcrypt).
• Incident response: In the event of a breach creating a real risk of significant harm, we will notify affected individuals and the OIPC BC as required by BC PIPA s.36–37.

9.Your Rights

You have the right to access, correct, request deletion of, and withdraw consent for your personal information. To exercise these rights, submit a written request to altafebrahim@gmail.com. We respond within 30 calendar days. Requests to delete drawings are subject to completion of all payments under your Service Agreement.

Regulators: OIPC BC (oipc.bc.ca) · OIPC Alberta (oipc.ab.ca) · OPC Canada (priv.gc.ca)

10.Children's Privacy

The Sigmato platform is a business-to-business service. We do not knowingly collect personal information from individuals under the age of 18.

11.Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active clients of material changes by email at least 30 days before they take effect.

This policy has not been independently reviewed by legal counsel. Contact us with questions before relying on it for a specific legal determination.