Privacy Policy

MAVREC Elevator Controls Ltd. ("MAVREC", "we", "us") provides elevator voice control, safety detection, displays and building analytics for buildings in Canada. This policy explains what personal information we collect, why, and the choices you have. It is written to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

Account information: name, work email, phone number and role, provided when you create a portal account, request a quote, or are invited to a team. Building information: addresses, floor and elevator configurations, and device identifiers for the hardware installed at your sites. Safety alert contacts: names, phone numbers and emails of the people you designate to receive SAYFE safety alerts. Operational telemetry: device heartbeats, firmware versions, command delivery outcomes, and anonymous ride counts. Billing information is processed by Stripe; we do not store card numbers.

In-cab audio and SAYFE

SAYFE processes audio on-device to detect distress. Audio is analysed in the cab; continuous audio is not streamed or retained. When a safety event is verified, a short clip may be retained solely as an event record where the building operator has enabled recording on camera-equipped units, and is accessible only to the building's authorized team and MAVREC safety operations. Voice floor-calling commands are recognised on-device and are not tied to any individual's identity.

How we use information

To operate the service: delivering safety alerts to your designated recipients, managing your buildings and devices, providing analytics, and billing. To keep the platform safe: authentication, abuse prevention and audit logging. We do not sell personal information. Advertising in the MAVREC network is contextual to the building and time of day - it does not use personal profiles.

Sharing

We share information only with service providers needed to run the platform (cloud hosting in Canada [Supabase, ca-central-1], Stripe for payments, Twilio for SMS/voice alerts), with your organization's own team members according to the roles you assign, and where required by law or to respond to an emergency that threatens life or safety.

Mobile phone numbers and text-messaging (SMS) opt-in consent are used only to deliver MAVREC safety and emergency alerts to the recipients a building designates. This information is never sold, and it is never shared with third parties or affiliates for their own marketing or promotional purposes. Our messaging program and how to opt out are described in our SMS Terms.

Retention and security

We retain account and building records for the life of your subscription and as required for legal and warranty purposes. Safety event records are retained per your building's configuration. Data is encrypted in transit, access is role-restricted, and each on-site device authenticates with its own revocable credential.

Your rights

You may access, correct or ask us to delete your personal information, withdraw consent for optional processing, and complain to the Office of the Privacy Commissioner of Canada. Contact our privacy officer at info@mavrec.ca and we will respond within 30 days.

Changes

We will post any changes to this policy here and, for material changes, notify portal account holders by email before they take effect.