Effective date: June 1, 2026 · Last updated: June 10, 2026
The Moulton Group ("we," "us," or "our") operates BuildGen CRM. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in connection with the Service, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.
Account information: When you register, we collect your name, email address, organization name, and password (stored as a salted hash).
Profile & business data: Information you add to the Service such as customer contacts, leads, job details, estimates, quotes, vendor records, and uploaded files (including logos).
Usage data: Log files, IP addresses, browser type, pages visited, and feature usage to help us understand how the Service is used and to diagnose technical issues.
Communications: If you contact us by email, we retain the contents of those communications.
We do not collect payment card data directly — payment processing (if applicable) is handled by a PCI-DSS compliant third-party processor.
We do not use your data for advertising, and we do not sell your data to third parties.
We process personal information on the basis of your consent (given when you create an account), contractual necessity (to provide the Service you have subscribed to), and our legitimate interests (security, fraud prevention, and product improvement), subject always to your interests and rights.
All data you enter into the Service is scoped to your organization. Other organizations using BuildGen CRM cannot access your data, pricing, leads, contacts, or any other information. Our database queries enforce organization-level isolation on every request.
We share personal information only in the following circumstances:
We retain account data for as long as your account is active. If you close your account, we will make your data available for export for 30 days, after which it will be deleted from our production systems within 90 days, except where retention is required by law.
Backup and audit log data may be retained for up to 12 months after deletion from production systems.
We implement industry-standard security measures including HTTPS/TLS encryption in transit, bcrypt password hashing, JWT-based authentication, and rate limiting on authentication endpoints. Access to the production database is restricted to authorized personnel.
No system is completely secure. We encourage you to use a strong, unique password and to notify us immediately of any suspected unauthorized access.
Our hosting and email infrastructure is located in the United States. By using the Service, you acknowledge that your data may be transferred to and processed in the United States, which may have different privacy laws than your province or territory. We take steps to ensure appropriate safeguards are in place for such transfers.
Subject to applicable law, you have the right to:
To exercise these rights, contact us at hello@buildgencrm.ca. We will respond within 30 days.
The Service uses browser localStorage to remember your session state (e.g., active tab, draft data). We do not currently use third-party tracking cookies or advertising pixels.
Our landing site (buildgencrm.ca) does not use analytics cookies.
The Service is intended for commercial use by adults. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. Material changes will be communicated by email or in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
For privacy-related questions, access requests, or complaints, please contact:
The Moulton Group — Privacy Officer
Email: hello@buildgencrm.ca
Ontario, Canada
If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.