Last updated · July 21, 2026
This Privacy Policy explains how Batisflow (“we”, “us”, or “our”) collects, uses, discloses, retains, and protects personal information when you visit batisflow.com, book a demo, create a builder account, or use our client progress pages.
We operate primarily for home builders in Québec and elsewhere in Canada. We comply with Québec’s Act respecting the protection of personal information in the private sector (as modernized by Law 25) and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
This policy is written in plain language. It is not legal advice. If anything here conflicts with a signed contract, the contract controls for that relationship.
1. Privacy officer
The person in charge of the protection of personal information is Georgy Khoder, Founder · Privacy Officer.
To exercise your rights, ask a question, or file a privacy complaint, contact: privacy@batisflow.com (or contact@batisflow.com).
We respond to access, correction, and other privacy requests within a reasonable time and no later than the timelines required by applicable law.
2. Who this policy covers
- Prospective customers who submit a demo or contact form
- Builder account holders and their authorized team members
- Homeowners and other visitors who open a client progress page shared by a builder
- Administrators and support staff who operate the platform
Builders are responsible for the personal information they upload about their clients (for example names in project titles, site photos, or choice requests). We process that information as a service provider for the builder’s legitimate business purposes.
3. Personal information we collect
We collect only what we need to operate Batisflow, communicate with you, and bill for the service.
- Identity and contact: name, company name, email, phone, mailing or business address, city, RBQ licence number (if provided), website
- Account security: password hashes (we never store plain-text passwords), magic-link and password-reset tokens, session cookies
- Billing: Stripe customer and subscription identifiers, plan, billing interval, and subscription status — card numbers are handled by Stripe and are not stored on our servers
- Project content: project names, addresses, cities, progress phases, notes, photos, choice options, action items, branding (logo, accent colour, contact photo)
- Marketing leads: name, company, email, phone, region, homes per year, message, preferred language
- Technical data: IP address and basic request logs from our hosting provider, browser type, and cookies required for authentication, demos, and security
- Optional AI autofill: project details you submit so our AI provider can draft a project structure (you choose when to use this feature)
4. How we collect it
- Directly from you (forms, onboarding, settings, project editor, billing)
- From your use of the service (status updates, uploads, account activity)
- From payment processors (Stripe subscription and invoice events)
- From administrators when they invite or prepare an account for you
5. Why we use personal information
We use personal information for the purposes described when we collect it, including:
- Providing, securing, and improving the Batisflow platform
- Creating and maintaining builder accounts and client progress pages
- Processing subscriptions, invoices, trials, upgrades, and cancellations
- Sending transactional email (invites, magic links, password resets, billing notices)
- Responding to demos, support requests, and privacy requests
- Preventing fraud, abuse, and unauthorized access
- Meeting legal, tax, and regulatory obligations
- Optional AI-assisted project drafting when you explicitly request it
We do not sell personal information. We do not use personal information for unrelated third-party advertising.
6. Consent and legal bases
Where required, we obtain consent that is clear, free, and informed. Consent for a new purpose is requested separately from terms of service when needed.
For sensitive information (for example certain financial identifiers linked to billing), we obtain express consent or rely on another lawful basis permitted by Law 25 / PIPEDA, such as performing the contract you requested.
You may withdraw consent for optional processing (such as marketing follow-up after a demo) by emailing us. Withdrawal does not affect processing that is necessary to provide the service you still use, or that the law requires us to keep.
8. Transfers outside Québec
Some providers (notably Vercel, Stripe, Resend, and Anthropic) may process data in the United States or other jurisdictions outside Québec.
Before communicating personal information outside Québec, we assess the sensitivity of the information, the purposes of the transfer, and the protection offered by the destination, and we take contractual and organizational measures that are reasonable in the circumstances.
By using Batisflow, you acknowledge that service operation may involve such transfers. Contact our privacy officer if you need more detail about a specific vendor.
9. Retention and destruction
We keep personal information only as long as needed for the purposes above, then destroy or anonymize it securely, unless a longer period is required by law or for legitimate dispute resolution.
- Active builder accounts: retained while the account is open and for a reasonable wind-down period after closure
- Billing records: retained as required for tax and accounting
- Marketing leads: retained while useful for follow-up, then deleted or archived on request
- Auth tokens (magic link / password reset): short-lived and expire automatically
- Demo sandboxes: deleted when the demo expires or is cleaned up
- Uploaded photos and branding assets: retained with the related project until deleted by the builder or the account is closed
10. Security measures
We implement security measures reasonable given the sensitivity of the information, including:
- Encrypted transport (HTTPS)
- Hashed passwords and time-limited authentication tokens
- HttpOnly session and demo cookies where applicable
- Access controls for builder dashboards and private previews
- Role separation between public marketing, builder app, and admin tools
- Vendor access limited to what is needed to provide the service
No method of transmission or storage is perfectly secure. Please use a strong unique password and tell us promptly if you suspect unauthorized access.
12. Your rights (Québec Law 25 / PIPEDA)
Subject to legal limits, you may request to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete information
- Withdraw consent for optional uses
- Ask for information about automated decision-making that produces legal or similarly significant effects (Batisflow does not use personal information for exclusive automated decision-making of that kind today)
- Request portability of computerized personal information you provided, in a structured commonly used format, when applicable under Law 25
- Lodge a complaint with our privacy officer and, if unresolved, with the Commission d’accès à l’information du Québec (CAI) or the Office of the Privacy Commissioner of Canada
Send requests to privacy@batisflow.com. We may need to verify your identity before responding.
13. Minors
Batisflow is directed at businesses (home builders) and adult clients. We do not knowingly collect personal information from children under 14 without appropriate parental or guardian consent as required by Québec law. Contact us if you believe we have collected such information in error.
14. Confidentiality incidents
We maintain a register of confidentiality incidents. If an incident presents a risk of serious injury, we will notify the Commission d’accès à l’information du Québec and affected individuals as required by law, and take reasonable steps to reduce the risk of harm.
15. Builder responsibilities
If you are a builder using Batisflow, you remain responsible for:
- Collecting client information lawfully and for legitimate purposes
- Telling your clients that progress pages and photos may appear on a Batisflow-hosted page
- Controlling who receives project or preview links
- Deleting or correcting client content when required
16. Changes to this policy
We may update this Privacy Policy to reflect product, vendor, or legal changes. The “Last updated” date at the top will change when we do. Material changes will be highlighted on this page or communicated by email when appropriate.
17. Contact
Batisflow — batisflow.com
Privacy officer: Georgy Khoder, Founder · Privacy Officer
Privacy: privacy@batisflow.com
General: contact@batisflow.com