Privacy Policy

1. Introduction & Platform Overview

Welcome to Fixia Business Connect ("we," "our," "us," or the "Platform"), operated by Fixia Business Connect. Fixia Business Connect is a multi-tenant Software-as-a-Service (SaaS) business management platform that enables subscribing businesses ("Tenants") to manage their own customers, staff, appointments, invoices, and operations.

This Privacy Policy applies to:

• Tenant Accounts: Businesses and their authorized users (owners, managers, staff) who subscribe to and use the Fixia Business Connect platform.
• Platform-Level Data: Information we collect directly from Tenants to operate and maintain the platform.

This Privacy Policy does NOT cover the personal data of any individual customers or staff members that Tenants enter into their own Fixia Business Connect account. That data is owned and controlled exclusively by the Tenant, not by Fixia Business Connect.

2. Two Types of Data — A Critical Distinction

3. How We Use Platform Data

We use the information we collect from Tenants solely to:

• Create and manage Tenant accounts and subscriptions
• Process subscription payments and send billing confirmations via Stripe
• Send administrative notices (platform updates, policy changes, downtime alerts)
• Provide customer support and respond to Tenant inquiries
• Monitor platform performance, detect abuse, and prevent fraud
• Comply with legal and regulatory obligations
• Send optional promotional communications about Fixia Business Connect (Tenants may opt out at any time)

We do not access, analyze, or use Tenant business data (customer records, staff records, invoices, etc.) for any purpose other than providing technical infrastructure and storage for the Tenant's own use.

4. Tenant Responsibilities & Acknowledgment

By subscribing to and using Fixia Business Connect, each Tenant explicitly acknowledges and agrees that:

• They are the sole data controller for all customer and staff data entered into their Fixia Business Connect account.
• They have obtained all necessary consents, authorizations, and legal basis required to collect and store personal data about their customers, staff, and any third parties.
• They have a published and accessible privacy policy for their own business that covers how they handle their customers' and staff members' data.
• Fixia Business Connect bears no liability for any Tenant's failure to comply with applicable privacy laws or to obtain proper consent from their data subjects.
• They will promptly respond to any data access, correction, or deletion requests made by their customers or staff regarding data stored in Fixia Business Connect.
• In the event of a data incident, Tenants are responsible for notifying their own customers and staff as required by law.

5. Third-Party Service Providers

We use the following trusted third-party services to operate the platform. Each has its own privacy policy and security standards:

• Stripe — Payment processing for Tenant subscriptions. Card data is handled entirely by Stripe and is never stored on our servers.
• Resend — Transactional email delivery (e.g., invoices, appointment reminders sent on behalf of Tenants).
• Twilio — SMS notification delivery for Tenants who enable SMS add-ons.
• Google — OAuth sign-in service. We receive only name, email, and profile photo as permitted by your Google account settings.
• Cloud Hosting Provider — Secure infrastructure for data storage with encryption at rest and in transit.

We do not sell Tenant or end-user data to any third party, and our service providers are contractually prohibited from using your data for their own purposes.

6. Data Isolation & Multi-Tenant Architecture

Fixia Business Connect is built on a strict multi-tenant architecture. Each Tenant's data is logically isolated — no Tenant can access, view, or interact with another Tenant's data. Platform administrators have technical access to all tenant accounts solely for the purposes of support, security monitoring, and platform maintenance, and are bound by strict confidentiality obligations.

7. Special Categories of Data (Daycare & Children's Data)

Fixia Business Connect includes a Daycare management module that may be used by childcare Tenants to store information about enrolled children. Fixia Business Connect does not knowingly collect personal data about children directly. All children's data entered into the Daycare module is entered by and belongs to the Tenant (the childcare provider). The Tenant is solely responsible for ensuring that data about minors is collected with appropriate parental consent and in compliance with all applicable laws (including COPPA, PIPEDA, and provincial child privacy regulations).

8. SMS Communications

Tenants who enable the SMS Add-on may send text messages to their customers and staff through the platform (via Twilio). The Tenant is solely responsible for ensuring that all SMS recipients have provided explicit consent to receive messages and that communications comply with applicable regulations (CASL, TCPA, etc.). Fixia Business Connect does not send marketing SMS messages to end users on its own behalf.

9. AI & Automated Features

Some features of Fixia Business Connect use AI-assisted tools to help Tenants generate content (e.g., email campaigns, reports). When Tenants use these features, relevant input data may be processed by AI models provided by trusted third parties. Fixia Business Connect uses only reputable AI providers and does not train AI models on Tenant business data. Tenants should avoid submitting sensitive personal data (e.g., SINs, health records, payment card numbers) into AI-assisted input fields.

10. Data Security

We implement industry-standard technical and organizational security measures, including TLS/SSL encryption in transit, encrypted storage at rest, access controls, and role-based permissions. Despite our best efforts, no method of electronic storage or internet transmission is 100% secure. In the event of a security incident affecting platform-level data, we will notify affected Tenants in accordance with applicable breach notification laws. Tenants are responsible for notifying their own customers and staff as required.

11. Cookies & Tracking Technologies

We use essential cookies to maintain session authentication and platform functionality. We may also use analytics cookies to understand platform usage patterns at an aggregate level. You may configure your browser to reject cookies; however, some platform features may not function correctly without them. We do not use cookies to track end users of Tenant businesses.

12. Data Retention

Platform-level Tenant account data is retained for the duration of the subscription and for up to 90 days after account termination, after which it is permanently deleted or anonymized. Tenants should export any business data they wish to retain before cancelling their subscription. Fixia Business Connect is not responsible for data loss following account termination.

13. Tenant Privacy Rights (Platform-Level Data Only)

As a Tenant, you have the following rights regarding your own platform account data:

• Access: Request a copy of the account and billing data we hold about your business.
• Correction: Update or correct your business account information at any time via Settings.
• Deletion: Request deletion of your account and associated platform data.
• Portability: Export your business data using the platform's built-in export tools before account closure.
• Opt-Out: Opt out of marketing emails via the unsubscribe link. Transactional and administrative messages cannot be opted out of while your account is active.

Note: Requests from customers or staff of Tenants (e.g., requests to delete their personal data) must be directed to the Tenant, not to Fixia Business Connect, as Fixia Business Connect is not the data controller for that data.

14. International Data Transfers

Fixia Business Connect servers and infrastructure may be located in Canada, the United States, or other jurisdictions. By subscribing to Fixia Business Connect, Tenants acknowledge that their platform account data may be stored and processed in these jurisdictions. We implement appropriate safeguards for cross-border data transfers in accordance with applicable privacy laws.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the platform, legal requirements, or our practices. We will notify active Tenants of material changes via email or in-platform notification at least 14 days before the changes take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy. Tenants should review this policy periodically and update their own privacy disclosures accordingly.

16. Governing Law & Limitation of Liability

This Privacy Policy is governed by the laws of the Province of Ontario, Canada. Fixia Business Connect's liability for any privacy-related claim is limited to the subscription fees paid by the Tenant in the 3 months preceding the claim. Fixia Business Connect is not liable for any data breach, regulatory fine, or privacy claim arising from a Tenant's failure to comply with their obligations under this policy or applicable law.

17. Contact Us

For privacy-related questions about the Fixia Business Connect platform, contact us at:

Customers and staff of Tenants: If you have questions about how a business using Fixia Business Connect handles your personal data, please contact that business directly. Fixia Business Connect does not control or have access to the personal data managed by individual Tenant businesses.