Privacy Policy

Last updated October 12, 2026

This policy explains how 1001549351 Ontario Inc. ("Onus", "we", "us") collects, uses, shares and protects personal information through the Onus website (www.onusclaims.com) and the Onus app (together, the "Service"). Onus is offered to businesses in Canada. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for customers in Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25).

1. Who this policy covers

• Customer users: staff of restoration companies who use the Onus app, such as project managers and administrators.
• People named in claims: property owners, tenants, adjusters and other contacts whose details our customers enter into Onus or forward to Onus by email.
• Website visitors: anyone who visits www.onusclaims.com or sends us a message through our contact form.

2. Our role

For information about people named in claims, our customer (the restoration company) decides what is collected and why, and is responsible for having the right to share it with us. Onus handles that information on the customer's behalf, only to provide the Service. Questions about a specific claim are best sent to the restoration company handling it. We will help our customers respond to any request we receive.

For our own customer users and website visitors, Onus is responsible for the information we collect.

3. What we collect

• Account information: name, work email, phone number, company, role, and sign-in details. If you sign in with Google or Microsoft, we receive your name and email address from them. We never see your Google or Microsoft password.
• Claim information: claim and policy numbers, insurance carrier, names, property addresses, phone numbers and email addresses of people involved in a claim, inspection notes, photos, reports, documents, deadlines and signatures collected for authorizations.
• Emails and files forwarded to Onus: claim assignment emails and spreadsheets from claim systems that our customers send to Onus so claims can be set up automatically.
• Calendar information: if you choose to connect a calendar, we read the times of your events to show your day in Onus.
• Device and usage information: IP address, browser and device type, pages used and error reports.
• Contact form messages: your name, email, company and message.

4. How we use it

• To provide the Service: set up claims, track deadlines, send reminders and alerts, and produce reports.
• To sign you in and keep accounts secure.
• To send messages you or your company asked for, such as deadline alerts by text message or email.
• To support customers, answer questions and fix problems.
• To understand how the Service is used so we can improve it.
• To meet legal obligations.

We do not sell personal information, and we do not use it for advertising.

5. Writing help (artificial intelligence)

Some features help users improve the wording of claim notes and reports. When a user uses these features, the text they choose is sent to our AI provider (OpenAI) to produce a suggestion. The provider processes it under business terms that do not allow it to use that information to train its models. Users review every suggestion before it is used.

6. Consent

We rely on the consent you give when you use the Service or contact us, and on the consent our customers obtain from the people named in their claims. You may withdraw consent at any time by contacting us, subject to legal or contract limits. Withdrawing consent may mean we can no longer provide some or all of the Service.

7. Where your information is stored

Onus stores information in the United States. Our database and servers are located in the United States, and some of our service providers may process information in other countries. While it is outside Canada, information is subject to the laws of those countries and may be accessed by their courts, law enforcement and national security authorities. We use contracts and security measures to protect information wherever it is processed.

8. Service providers we use

We share information only with companies that help us run the Service, and only as needed for their work:

• Supabase: database, file storage and sign-in (United States).
• Vercel: hosting for the website and app (United States).
• Cloudflare: domain, security and spam protection for our contact form.
• Postmark: sending and receiving email.
• Twilio: sending text message alerts.
• BoldSign: electronic signatures for authorizations (Canada).
• OpenAI: writing help, as described in section 5.
• Google and Microsoft: sign-in, and calendar connections if you choose to use them.

We may also disclose information if required by law, or as part of a sale or reorganization of our business, in which case the new owner must protect it as described in this policy.

9. How long we keep it

We keep information only as long as needed for the purposes above, or as required by law. Customer Data is kept while the customer's account is active. When an account closes, the customer can ask for a copy, and we then delete or anonymize the information, except where the law requires us to keep it.

10. How we protect it

We use safeguards suited to the sensitivity of the information, including encryption in transit, access limited to people who need it, separation of each customer company's information, and multi-factor sign-in for Onus staff. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected people and the Privacy Commissioner as the law requires.

11. Cookies

The website does not use advertising or tracking cookies. Our spam protection on the contact form may set a cookie needed for it to work. The Onus app uses cookies only to keep you signed in and to remember display settings.

12. Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or ask how it has been used and shared. In Quebec, you may also ask us to stop sharing it or to remove it where the law allows. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

13. Contact our Privacy Officer

Our Privacy Officer is responsible for how Onus handles personal information. To make a request or ask a question, use our contact form and mention "Privacy" in your message.

14. Changes to this policy

We will update this page when our practices change and show the date of the last update at the top. If a change is significant, we will tell customers before it takes effect.