Privacy Policy

Effective October 3, 2026

1. Who we are

1.1. This Privacy Policy explains how RENVAR INC., a corporation incorporated in Ontario, Canada ("we", "us", the "Operator") processes personal data when you visit mexum.pro, use app.mexum.pro or other services of the MEXUM platform (the "Service"). The Operator is the controller of personal data processed through the Service.

1.2. Operator details: RENVAR INC., Ontario Corporation Number (OCN) 1001508737, 350 Bay Street, Suite 1300b, Toronto, ON M5H 2S6, Canada.

1.3. By using the Service you acknowledge this Policy. If you do not agree with it, please do not use the Service.

2. Data we process

• Account data: name or username, e-mail address, phone number, organization name (for business users), region, and a password stored only as a hash.
• Documents and results: design documents, estimates, contracts and other materials you upload for review, and the resulting conclusions. They may contain personal data of third parties; you are responsible for having the right to submit them.
• Payment data: information about your order and its status. We do not receive or store full card numbers; they are processed by our payment provider.
• Communications: messages to support, to the virtual assistant in the chat and to our Telegram bot.
• Technical and usage data: a random session identifier, pages visited, referrer, UTM parameters, time on page, device and browser type. Our own visit counter does not store IP addresses.

3. Why we process it and on what basis

• to create and manage your account and deliver the Service — performance of a contract;
• to receive documents, run the review and deliver the conclusion — performance of a contract;
• to take payments and keep accounting records — contract and legal obligation;
• to answer requests and provide support — contract and legitimate interests;
• to understand usage, secure and improve the Service — legitimate interests and, where required, consent;
• to comply with law — legal obligation.

4. Who we share data with

4.1. We use service providers who process data on our behalf under confidentiality and data-protection commitments:

• cloud hosting and databases (Railway);
• artificial-intelligence providers that analyze the text of submitted documents (Anthropic and comparable providers) — only the content needed to perform the review is sent;
• payment processing (Stripe);
• e-mail delivery (Resend) and Telegram for notifications and the bot;
• analytics and tag services (Google Tag Manager, Google Analytics).

4.2. We do not sell personal information and we do not share it for cross-context behavioral advertising. We may disclose data to authorities where the law requires it.

5. International transfers

Our providers may be located outside your country, including in the United States. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses. By using the Service you acknowledge such transfers as needed to deliver it.

6. Retention

We keep personal data while your account is active and afterward for as long as needed to meet legal, accounting and dispute-resolution obligations, then delete or anonymize it. Uploaded documents and results stay in your account until you delete them or close the account, unless the law requires otherwise.

7. Security

We apply technical and organizational measures: encrypted connections (HTTPS), hashed passwords, role-based access, backups, rate limiting and error monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live (for example Canada, the EEA, the UK, Switzerland, California and other U.S. states, Brazil and others), you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent at any time, and lodge a complaint with your data-protection authority (in Canada, the Office of the Privacy Commissioner of Canada or the competent provincial authority). We do not discriminate against you for exercising these rights.

To exercise a right, contact us through the envelope icon in the footer of this site (the Operator's e-mail address). We will respond within the time required by applicable law (generally within 30 days).

9. Canadian privacy law and e-mail

As a Canadian company we handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Law 25 where it applies. We send commercial electronic messages only in accordance with Canada's Anti-Spam Legislation (CASL); service and account notices are sent as needed to deliver the Service.

10. Children

The Service is intended for businesses and adults. We do not knowingly collect personal data from anyone under 18.

11. Cookies

See our Cookie Policy.

12. Changes

We may update this Policy. The current version is always available at https://mexum.pro/privacy; the effective date is shown at the top.