Privacy Policy

We receive information you provide, information generated when you use the service, and transaction information from our payment provider:

• Account information — your email address and a securely hashed password, account identifiers and status, and the date and version of the terms you accept. We also maintain the session and verification records needed to manage sign-in and account recovery.
• Report inputs — the site details you enter or pin, such as the project name, address, and coordinates, and the parameters, results, and saved records of reports and previews. Project coordinates describe the site you select; they are not necessarily your own location. Avoid including personal information about other people unless you are authorized to provide it.
• Payment information — handled by Lemon Squeezy, our merchant of record. It collects the information needed for checkout. We receive order and payment information, such as payment status, transaction identifiers, amounts, and currency, to connect a purchase with your account and report. We do not store your full payment card details.
• Technical information — basic logs such as your IP address and browser type, used to keep the service secure and working.
• Support and administration — messages you send us, notes needed to handle account or purchase issues, and records of administrative actions, such as suspending or deleting an account.

We use this information to:

• create your account and let you sign in;
• generate, store, and let you revisit your reports;
• process payments and send receipts;
• respond to your messages and support requests; and
• secure the service and prevent abuse;
• maintain records of account changes and resolve disputes; and
• meet applicable legal, tax, and accounting obligations.

We do not sell customer lists or report inputs, use report inputs for advertising, or operate advertising pixels on Nivometra. The external services described below receive information needed to provide their features and may have their own processing purposes, such as fraud prevention. These disclosures should not be understood as a promise that no external service receives information about your visit.

The following services receive or process information when you use the relevant features:

• Lemon Squeezy — checkout, payment, taxes, and receipts as the seller of record. We send account and pending-report identifiers to associate the payment with the correct report.
• Resend — delivery of service emails, including recipient addresses and message content.
• Render — hosting and storage of the service, including account information, reports, and technical records.
• MapTiler — interactive maps and address lookups. Map requests reveal the area being displayed and connection information; address searches and reverse lookups provide the address or coordinates being queried.
• CARTO and Esri — map images displayed in report previews and reports. Your browser requests these images directly, revealing your IP address and the map area requested.
• U.S. Geological Survey (USGS) — elevation lookups. Our server sends the selected site coordinates to its elevation service; this lookup does not require your account email.
• Cloudflare Turnstile — protection against automated abuse. Cloudflare processes technical signals, including IP address and browser information, to detect bots and improve its bot detection service. See the Turnstile Privacy Addendum.

These services may process information outside Québec and Canada, including in the United States, where privacy laws may differ. Their own privacy notices also describe processing they undertake for their own purposes. You may contact us about information we disclose to them.

We may also disclose information where required by law or legal process, or where legally permitted and necessary to investigate abuse, protect rights and safety, or obtain legal or accounting advice.

We keep your account and reports for as long as your account is active so the reports stay available to you, unless they are deleted earlier. Unconfirmed accounts become eligible for automatic deletion after 7 days and are removed during a scheduled cleanup. Temporary report previews and payment records have separate retention periods; a pending or disputed payment may require additional time to resolve.

You can request account deletion by email. Deleting an account removes its saved reports and access credentials from the active account records. It does not immediately erase every related record: an administrative history may retain your email address, account identifier, and the action taken, including the deletion itself. These administrative records currently have no automatic expiry and require separate review when we handle a deletion request.

Support correspondence, technical logs, provider records, and any backup copies are handled separately. Retention depends on the purpose of the record, unresolved support or payment issues, security needs, and applicable legal, tax, or accounting requirements. We assess requests to delete these records subject to applicable law and explain any lawful reason for retaining information when responding to a request. Account deletion does not itself delete records that Lemon Squeezy must retain as the seller of record.

You can email contact@nivometra.com to ask about, obtain a copy of, correct, or request deletion of your personal information. You do not need to create an account to make a request. Tell us what you are requesting and which account or interaction it concerns; do not send a password or full payment card details.

Depending on your state or other applicable law, you may also have rights to receive a portable copy, opt out of certain processing, limit certain uses of sensitive information, withdraw consent where processing relies on it, or appeal a refusal. These rights and their exceptions depend on the law applicable to the information and our business; not every right applies to every request.

We may need to verify your identity or an authorized agent's authority before disclosing or changing account information. We will respond within the applicable legal timeframe and explain any refusal and any available appeal process. You can request a review by replying to our response, and you may contact your state attorney general or other competent privacy regulator. We do not discriminate against you for exercising rights protected by applicable law. Deleting data needed to provide the service may prevent us from maintaining your account or delivering a report.

We protect your information with measures such as encrypted connections and hashed passwords. No method of storage or transmission is perfectly secure, but we work to safeguard your data and to limit access to it.

We use a small number of cookies that are necessary for the service to work — for example, to keep you signed in and protect account actions. We also store map-display preferences in your browser. You can clear cookies and browser storage through your browser settings, but doing so may sign you out or reset preferences.

Nivometra does not use advertising cookies or track your activity across unrelated websites for advertising. External map and security services can receive technical information when loaded, even without advertising cookies. Their processing may involve information from interactions with other sites or services, particularly for security and fraud prevention, as described in their privacy notices.

Our service does not currently change its behavior automatically in response to browser Do Not Track or Global Privacy Control signals. These are different signals and may have different legal effects. You may contact us to exercise applicable privacy rights; this contact option does not replace any obligation to honor a legally required browser signal.

The person in charge of the protection of personal information at Nivometra is the president of Nivometra Softwares inc.. To exercise your rights, ask a question, or make a complaint about how we handle your data, email contact@nivometra.com.

We may update this policy from time to time. If we make a material change, we will update the effective date above and provide notice by email or a prominent notice on the service. If a proposed new use of information requires your consent under applicable law, we will obtain it before proceeding. Publishing a revised policy does not, by itself, authorize a new use of information already collected.

Nivometra is not directed to children under 13. We do not knowingly collect their personal information. If you believe a child under 13 has provided personal information, contact us at contact@nivometra.com so we can investigate and take the steps required by applicable law, including deleting information where required.