Privacy Policy — BXF CoreVault

Effective Date: September 24, 2026
Last Updated: September 24, 2026

BXF Infrastructures Inc. (“BXF,” “we,” “us,” or “our”) respects the privacy of users of the BXF CoreVault mobile application (“CoreVault” or the “App”).

This Privacy Policy explains what information may be collected through CoreVault, how that information is used, stored, and protected, and the choices available to users regarding their information.

CoreVault is primarily intended as a business application for authorized employees, contractors, and other approved users of BXF Infrastructures Inc.

1. Information We Collect

Depending on the features being used, CoreVault may collect and process the following information:

Account Information

CoreVault may collect information required to identify and authenticate authorized users, including:

  • Name

  • Email address

  • Employee or user identification information

  • Job title or role

  • Company or organization

  • Account credentials and authentication information

This information is used to provide and manage access to CoreVault.

Forms and Field Documentation

Users may submit information through forms within CoreVault, including:

  • Daily reports

  • Project and job information

  • Work activities

  • Equipment information

  • Employee or crew information

  • Site observations

  • Safety-related documentation

  • Notes and comments

  • Other information entered by the user

Information submitted through the App may become part of BXF's business and project records.

Photos and Camera Access

CoreVault may allow users to take photographs using their device camera or select photographs from their device.

Photos may be uploaded to document:

  • Construction activities

  • Jobsite conditions

  • Work progress

  • Equipment

  • Materials

  • Deficiencies or issues

  • Safety conditions

  • Other project-related information

CoreVault accesses the camera or photo library only when necessary to provide these features and subject to the permissions provided by the user through their device.

Location Information

Certain CoreVault features may request access to device location information where location is relevant to a project, jobsite, submitted form, photograph, or other business record.

When location access is requested, the purpose of the request will be communicated through the applicable device permission prompt.

Users can manage location permissions through their device settings.

Device and Technical Information

CoreVault and its service providers may automatically collect limited technical information necessary to operate, secure, maintain, and troubleshoot the App, such as:

  • Device type

  • Operating system and version

  • App version

  • Device identifiers where necessary

  • IP address

  • Login activity

  • Error and crash information

  • Diagnostic information

We may use this information for security, troubleshooting, performance monitoring, and improvement of CoreVault.

2. How We Use Information

Information collected through CoreVault may be used to:

  • Authenticate and manage authorized users

  • Provide access to CoreVault features

  • Receive and process employee and field submissions

  • Maintain project and construction records

  • Document work performed on BXF projects

  • Manage daily reports and other operational documentation

  • Store and organize jobsite photographs

  • Support project administration

  • Maintain safety and compliance records

  • Investigate technical problems

  • Maintain the security and integrity of the App

  • Improve CoreVault's functionality and reliability

  • Meet contractual, regulatory, insurance, employment, safety, or legal requirements

  • Protect BXF, its employees, customers, projects, and property

BXF does not use information collected through CoreVault for third-party advertising.

BXF does not sell personal information collected through CoreVault.

3. Information Sharing

Information submitted through CoreVault is intended primarily for legitimate BXF business purposes.

Information may be accessible to authorized individuals including BXF management, supervisors, administrative personnel, project personnel, and other individuals who require the information to perform legitimate business functions.

Where necessary for a project or legal obligation, information may also be provided to parties such as:

  • Project owners or clients

  • Consultants

  • Subcontractors

  • Municipalities or government authorities

  • Regulatory agencies

  • Insurance providers

  • Legal or professional advisers

  • Technology and cloud-service providers supporting CoreVault

BXF may also disclose information where required or permitted by applicable law.

4. Third-Party Service Providers

CoreVault may rely on third-party services for functions such as:

  • Cloud hosting

  • Database storage

  • Authentication

  • File and photo storage

  • Email or notification delivery

  • Application monitoring

  • Crash reporting

  • Security and infrastructure services

These providers may process information only as necessary to provide services to BXF and are expected to maintain appropriate safeguards for information they process.

BXF does not authorize its service providers to sell CoreVault user information or use it for their own advertising purposes.

5. Device Permissions

CoreVault may request permission to access certain device features, including the:

  • Camera

  • Photo library

  • Location services

  • Notifications

Permissions are requested only when required for App functionality.

Users can review or change these permissions through the privacy settings on their device. Disabling a permission may prevent certain CoreVault features that depend on that permission from functioning correctly.

6. Data Security

BXF uses reasonable administrative, technical, and organizational safeguards designed to protect information maintained through CoreVault against unauthorized access, disclosure, alteration, loss, or misuse.

No electronic transmission or storage system can be guaranteed to be completely secure. Accordingly, BXF cannot guarantee absolute security of information transmitted to or stored through the App.

Users are responsible for protecting their login credentials and should not provide their CoreVault credentials to unauthorized individuals.

7. Data Retention

BXF retains information collected through CoreVault for as long as reasonably necessary for the business purpose for which it was collected and as required to satisfy applicable contractual, employment, project, insurance, regulatory, tax, safety, recordkeeping, or legal obligations.

Because CoreVault is used for business and construction documentation, certain information submitted by a user may form part of BXF's official corporate or project records.

As a result, deletion of a user's account does not necessarily require BXF to delete records that it is legally, contractually, or operationally required or permitted to retain.

Information that is no longer required will be deleted, anonymized, or otherwise securely disposed of in accordance with BXF's applicable record-retention practices.

8. Account and Data Deletion

Authorized users may request deletion of their CoreVault account and associated personal information.

Where account creation is available directly through CoreVault, users will be provided with a mechanism to initiate account deletion from within the App.

Upon receiving a valid deletion request, BXF will delete or de-identify personal information associated with the account unless the information must be retained for legitimate business, contractual, regulatory, safety, employment, insurance, legal, or recordkeeping purposes.

For example, a daily construction report or project photograph submitted by an employee may need to remain part of the applicable project's business records even after the employee's CoreVault account is removed.

Users may contact BXF regarding privacy or data-deletion requests using the contact information provided below.

9. Employee and Business Records

CoreVault is primarily a business application.

Information submitted while performing work for BXF may constitute a BXF business, employment, safety, or project record rather than information maintained solely as part of the user's CoreVault account.

BXF may therefore retain appropriate business records after an individual stops using CoreVault or is no longer associated with BXF where retention is reasonably necessary or required.

10. Children's Privacy

CoreVault is intended for authorized business users and is not directed toward children.

BXF does not knowingly use CoreVault to collect personal information from children.

11. Tracking and Advertising

CoreVault is not intended to track users across third-party applications or websites for advertising purposes.

BXF does not use information collected through CoreVault to provide third-party targeted advertising.

If these practices change in the future, this Privacy Policy and any applicable user consent mechanisms will be updated accordingly.

12. User Privacy Choices

Users may manage certain privacy permissions, including camera, photo, location, and notification permissions, through their device settings.

Users may also contact BXF to:

  • Ask questions about information associated with their account

  • Request correction of inaccurate personal information

  • Request deletion of eligible personal information

  • Request deletion of their CoreVault account

  • Withdraw consent where processing is based on consent

  • Ask questions regarding BXF's privacy practices

Certain requests may be subject to applicable legal, contractual, employment, or recordkeeping requirements.

13. Changes to This Privacy Policy

BXF may update this Privacy Policy periodically to reflect changes to CoreVault, our business practices, technology, legal requirements, or privacy requirements.

When changes are made, the updated Privacy Policy will display a revised “Last Updated” date.

Material changes may also be communicated through CoreVault or another appropriate method.

Continued use of CoreVault following an update will be subject to the then-current Privacy Policy, subject to applicable law.

14. Contact Us

Questions, concerns, or requests regarding this Privacy Policy or information processed through CoreVault may be directed to:

BXF Infrastructures Inc.
Re: BXF CoreVault Privacy

Website: https://www.bxfii.com

Users may also contact BXF through the contact information published on the BXF Infrastructures Inc. website.

© 2026 BXF Infrastructures Inc. All rights reserved.