Privacy Policy

Locspect — operated by SJNC Inc.

Effective: October 14, 2026
Originally published: April 28, 2021. This version replaces all earlier versions.

SJNC Inc. ("SJNC", "we", "us") operates Locspect, a field operations platform provided to organizations on a subscription basis. This policy explains what personal information we collect through Locspect, why we collect it, who sees it, and what rights you have.

This policy applies to the Locspect mobile application and web application. It forms part of our Terms of Service.

Our role, and your employer's

Locspect is used by organizations to manage their own field operations. If you use Locspect because your employer gave you an account, your employer decides what information is collected about you, how it is used, and how long it is kept. Your employer is responsible for informing you about that and for obtaining any consent required.

SJNC processes that information on your employer's instructions, to operate the platform.

Questions about why your employer collects this information, or requests to see or correct it, should go to your employer first. We will help them respond.

What we collect

From users of the mobile and web applications:

First and last name
Email address
Phone number
Device identifier
Job start and end times
Geographic coordinates recorded when a job is started and when it is ended
Photographs uploaded by supervisors to document site conditions
Work records: sites, work orders, schedules, inspections and their status

Automatically, when the application encounters an error: device IP address, device name, operating system version, application configuration, and the time and date of use. This is used to diagnose faults.

We do not collect payment card numbers, health information, government identification numbers, or continuous background location. Coordinates are recorded at the moment a job is started and the moment it is ended, not tracked between those events.

Why we collect it

To operate the platform and provide the Service to the subscribing organization
To record that work was performed at a given place and time, which is the platform's core purpose
To send notifications about jobs that have been running unusually long
To diagnose faults and maintain security
To meet our legal obligations

We do not sell personal information. We do not use it for advertising. We do not use it to train third-party artificial intelligence models.

Where it is stored

All Locspect data is hosted in Canada, in Google Cloud Platform's Montréal region (northamerica-northeast1). It is not transferred outside Canada in the ordinary course of operating the Service.

Who else sees it

Google Cloud Platform — hosting, database and file storage, Montréal region
Google Firebase — user authentication
Expo — delivery of push notifications to mobile devices
Sentry — application error reporting
Brevo — transactional email

Each receives only what it needs to perform its function. None of them is permitted to use the information for its own purposes.

We may also disclose information where required by law, or to protect our rights or the safety of others.

How long we keep it

Work records are retained for as long as the subscribing organization maintains its account, and for 30 days after termination, after which they may be deleted in the ordinary course.
Error and diagnostic logs are retained for up to 30 days.
Database backups are retained for up to 14 days, with point-in-time recovery for 7 days.

A subscribing organization may request earlier deletion of its data by contacting us.

How we protect it

Data is encrypted in transit and at rest
Access is by individual account with least privilege; two-factor authentication is required on administrative accounts
Uploaded files are private and served only through time-limited signed links
Changes to companies, sites and user access are recorded in an audit trail
The platform is monitored, and failures and anomalies raise alerts

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take these measures seriously and review them.

If a confidentiality incident presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec and affected individuals as required by law, and record it in our incident register.

Cookies and tracking

The Locspect applications do not use cookies to track you. Third-party libraries used in the applications may set cookies as part of their own operation. We do not use advertising cookies and do not track users across other websites or applications.

Your rights

Under Québec's Act respecting the protection of personal information in the private sector, as amended by Law 25, you may:

ask whether we hold personal information about you, and ask to see it
ask us to correct information that is inaccurate, incomplete or ambiguous
ask us to stop disseminating information, or to de-index it, where its dissemination contravenes the law or a court order
receive the computerized personal information you provided to us in a structured, commonly used technological format
withdraw consent where processing is based on consent, subject to legal and contractual limits

If you received your account through an employer, contact your employer first, as described above.

We will respond within 30 days. If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec.

Person responsible for the protection of personal information

Serge Nassar, President, SJNC Inc.
[email protected]

Changes to this policy

We may update this policy. Material changes will be communicated to subscribing organizations at least 30 days before they take effect, and the date at the top of this page will be updated.

Contact

SJNC Inc.
[email protected]