KORPrivacy policy
Last updated : October 27, 2026
KOR is online takeoff, estimating, scheduling and task software for construction, operated by Karim Hallouch (sole proprietorship, Québec, Canada). This policy explains what information we collect, why, where it is kept and what your rights are.
Person in charge of personal information
Karim Hallouch, reachable at support@korconstruction.app. Send any question or request for access, correction or deletion to this address.
What we collect
- Account: first name, last name, email address, password (hashed, never readable by us), language, and optionally title, phone and photo.
- Company: name, contact details, licence number, logo, region, and team members.
- Content you create: projects, PDF plans, takeoffs, estimates, prices, schedules, tasks, comments, contacts.
- Subscription: plan, dates and payment status. Card numbers are handled by our payment provider (Stripe) and never reach us.
- Technical: sign-in and error logs needed to run and secure the service.
We use no advertising, tracking or analytics cookies. Your browser keeps a local copy of your data for offline work; it is erased when you sign out.
Why
To provide the service (show and sync your projects across devices and colleagues), send necessary emails (confirmation, password, invitations, account and subscription notices), bill, keep the service secure and answer support requests. We do not sell or rent your information, and we do not use it to train artificial intelligence models.
Who has access
Only members of your company see your company's data; this is enforced by the database itself and checked by automated tests. We access your projects only when needed for support you request, or when required by law.
Where information is kept (transfers outside Québec)
We use these providers, chosen for their security:
- Supabase: database, accounts and files, hosted in Canada (Canada Central region).
- Cloudflare: hosting of the website and app (global network).
- Resend: email delivery (United States).
- Stripe: payments and invoices (United States, Ireland).
Some of these services process information outside Québec. Before choosing them, we assessed that they provide adequate protection (encryption, data processing agreements, recognized standards).
How long
Your data is kept as long as your account exists. If your subscription ends, your projects stay available read-only; they are deleted on request, or 24 months after the subscription ends without activity, after an email notice. Backups are erased within 30 days of a deletion. Billing records are kept as long as tax laws require.
Security
Encrypted connections (HTTPS), hashed passwords, access separated by company, private plan files, regular security checks. If a confidentiality incident presents a risk of serious injury, we notify the people concerned and Québec's Commission d'accès à l'information.
Your rights
You can ask to access your information, correct it, delete it, or receive a copy in a common format (projects can also be exported directly in the app). Write to support@korconstruction.app; we answer within 30 days. You may also file a complaint with Québec's Commission d'accès à l'information.
Changes
If this policy changes significantly, we will notify you by email or in the app before the change takes effect.