Privacy Policy
Effective date: November 3rd, 2026
Panevo Services Limited (“us”, “we”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose and protect personal data in connection with:
- Visitors to our public website at Panevo.com
- Users of our B2B SaaS platforms: ioTORQ EMIS and ioTORQ LEAN (the “Services”)
1 Information We Collect
We may collect the following categories of personal data:- Account information: name, email address, company, role, login credentials.
- Usage data: user activity within our Services (via Posthog), telemetry data from customer systems integrated with ioTORQ EMIS or ioTORQ LEAN.
- Website data: IP address, browser type, device information, and analytics (via Google Analytics cookies).
- Communications: records of your support requests, emails, or inquiries.
2 How We Use Personal Data
Panevo Services Limited uses the collected data for various purposes: We process personal data for the following purposes:- To provide and operate our Services
- To manage customer accounts and billing
- To improve our website, products, and user experience
- To provide technical support and respond to inquiries
- To meet our legal, security, and contractual obligations
3 Legal Basis for Processing (GDPR / Law 25)
Where GDPR or Quebec Law 25 applies, our lawful bases for processing may include:- Performance of a contract (to deliver our Services)
- Legitimate interests (to improve, secure, and operate our Services)
- Consent (for optional analytics cookies and marketing communications)
- Legal obligations (to comply with regulatory or contractual requirements)
4 Cookies and Tracking
We use cookies and similar technologies on panevo.com including:
- Essential cookies (required for website functionality)
- Analytics cookies (Google Analytics)
5 Retention of Data
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law or contract. Once no longer needed, data is securely deleted in accordance with our Information Security Policy.6 International Data Transfers
Our Services are hosted on Microsoft Azure (Canada and U.S.). Corporate productivity and collaboration services (email, document storage, internal communications) are provided by Microsoft 365. We use the following U.S.-based subprocessors: SendGrid (transactional email), PostHog (product analytics), Intercom (in-app support and messaging), and Telesign (SMS delivery), Linear (product development and issue tracking, used by Panevo personnel) and Anthropic (AI assistant used by Panevo personnel to support service delivery, governed by our Responsible AI Use Policy). Google Analytics is used on our company website only. Canada is recognized by the European Commission as providing adequate protection. For transfers to the U.S., we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards, and ensure subprocessors are bound by contractual obligations consistent with GDPR and Law 25.7 Sharing with Third Parties
We share personal data only with:- Service providers acting on our behalf under strict contractual safeguards, including data processing agreements where applicable:
Provider Role Scope Microsoft Azure Cloud infrastructure and hosting Platform Microsoft 365 Email, document storage, productivity Internal operations and service delivery Anthropic AI assistant (Claude) used by staff to support service delivery Internal operations and service delivery SendGrid Transactional email delivery Platform PostHog Product analytics Platform Intercom In-app support and messaging Platform and service delivery Telesign SMS delivery Platform Google Analytics Website analytics Company website only Linear Product Development Internal operations and service delivery - Professional advisors (legal, accounting)
- Authorities or regulators, if required by law
We do not sell or share personal information for advertising purposes.
8 Security of Data
We maintain strict technical and organizational measures, audited under our SOC 2 Type II program, including:- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Access controls with least privilege and multi-factor authentication
- Continuous monitoring, logging, and annual penetration testing
- Incident response procedures aligned with privacy regulations
9 Your Privacy Rights
Depending on your location, you may have the right to:- Access your personal data
- Correct or update inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Receive a copy of your data (portability)
- Withdraw consent (where processing is based on consent)
- File a complaint with a supervisory authority
10 California Privacy Rights (CPRA)
California residents have additional rights:- Right to know categories of data collected and disclosed
- Right to delete personal information
- Right to opt-out of sale or sharing of personal data (Panevo does not sell personal data)
- Right to limit use of sensitive data
- Right to non-discrimination for exercising privacy rights
11 Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The effective date will be updated on this page. For material changes, we will also notify customers by email.12 How to Contact Us
If you have any questions about this Privacy Policy, please contact us:- By email: privacy@panevo.com