Apply Now

Privacy Policy for Cavanagh Connect

Last Updated: May 21, 2025

 

Scope

This Privacy Policy applies exclusively to the Cavanagh Connect mobile application and its backend services hosted in Palantir Foundry.

 

Palantir Foundry is a data integration and analytics platform that enables organizations to automate decision-making in complex environments.

 

1. Introduction

Cavanagh Connect (“we,” “us,” or “our”) is a secure mobile application for Thomas Cavanagh Construction employees.

 

This Privacy Policy explains:

 

  • What personal information we collect
  • How we use it
  • How long we retain it
  • Your rights regarding your information

2. Data We Collect

User Account & Profile

We collect:

 

  • Corporate email address
  • Full name
  • Job title
  • Department
  • Profile photo

This information is obtained through Microsoft Single Sign-On (SSO) and stored securely within Palantir Foundry.

 

Authentication Logs

We collect:

 

  • Login timestamps
  • IP address

Location Data

GPS coordinates (latitude and longitude) are collected when you:

 

  • Submit a timecard
  • Punch in
  • Punch out

Application Data

We collect information you create within the app, including:

 

  • Notes
  • Comments

Future versions of the app may also allow users to upload:

 

  • Documents
  • Photos
  • Files

Cavanagh Connect does not currently use analytics, crash reporting, or third-party software development kits (SDKs).

 

3. How We Use Your Data

Your information is used for the following purposes:

 

Account Management

  • Authenticate users through Microsoft SSO
  • Display your employee profile

In-App Functionality

  • Store and retrieve notes and comments
  • Record location information
  • Support future document and file uploads

Security & Auditing

  • Ensure only authorized users can access or modify information
  • Maintain audit records of user activity

4. In-App Privacy Policy

This Privacy Policy will be accessible from the Settings menu within Cavanagh Connect in a future release.

 

5. Data Sharing

We do not sell or rent your personal information.

Information is shared only when required:

 

Service Providers

Trusted service providers operating under strict confidentiality agreements.

 

Legal Compliance

Where required by law or to respond to legal requests, subpoenas, or security investigations.

 

6. Data Retention

Foundry Datasets

  • Only the three most recent transaction records are retained.
  • Transactions older than 30 days are automatically deleted.

Foundry Ontology Data

  • No automatic deletion.
  • Records may only be removed by authorized users.

Account & Profile Data

  • Retained while your account is active.
  • Deleted 12 months after account deactivation.

Authentication Logs

  • Retained for six months.
  • Automatically deleted afterward.

Location Data

  • Retained for six months.
  • Automatically deleted afterward.

Notes & Comments

  • Retained for 12 months after deletion or account deactivation.
  • Permanently deleted afterward.

Uploaded Documents (if enabled)

  • Retained for 12 months after deletion or account deactivation.
  • Permanently deleted afterward.

Crash Reports & Diagnostics (if enabled)

  • Retained for 90 days.
  • Automatically deleted afterward.

If you request deletion of your account or personal information, we will complete the removal within 30 days, unless we are legally required to retain certain information.

 

7. Security Measures

We use industry-standard security practices to protect your information.

 

Encryption in Transit

All communications with Palantir Foundry use TLS 1.2 or higher.

 

Encryption at Rest

Each file stored within Foundry is encrypted using a unique AES-256-CTR symmetric Data Encryption Key (DEK).

 

Access Controls

Role-based permissions restrict access to authorized personnel only.

 

Multi-Factor Authentication (MFA)

Authentication is enforced through your Microsoft Single Sign-On configuration.

 

8. Children’s Privacy

Cavanagh Connect is intended exclusively for Thomas Cavanagh Construction employees.

Users must be of legal employment age. We do not knowingly collect personal information from individuals below the legal working age.

 

9. Jurisdiction & Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the applicable federal laws of Canada.

 

10. Your Rights & Contact Information

You may request:

 

  • Access to your personal information
  • Correction of inaccurate information
  • Deletion of your personal information (where permitted)

Contact

[email protected]

 

11. Audit Logging

Cavanagh Connect maintains secure audit logs that record important user and system activities within Palantir Foundry, including who performed an action, when it occurred, and where applicable.

 

Audit logs:

 

  • Are updated hourly
  • Are accessible only to authorized personnel
  • Retain only the three most recent records
  • Automatically delete records older than 30 days

12. Device-Local Storage

Cavanagh Connect stores certain information locally on your device.

 

Authentication Tokens

Authentication tokens are securely stored using:

 

  • Apple Keychain (iOS)
  • Secure Storage (Android)

Tokens are deleted when you log out or uninstall the application.

 

Offline Notes & Comments

Notes and comments may be stored temporarily to support offline use.

 

Once synchronized—or if your account is deleted—the locally stored information is removed.

 

13. Policy Updates

We may update this Privacy Policy from time to time.

 

If material changes are made, we will:

 

  • Notify users through an in-app banner
  • Update the Last Updated date at the top of this page

Company