Privacy Policy
Effective Date: April 2026
Last Updated: October 2026
Augure is a product of The Altercation Company (“we,” “us,” “our”), a company registered in Ontario, Canada. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our AI platform and related services (“Services”). We built Augure on a simple principle: your data belongs in Canada. Your account, your stored content, and your records reside on Canadian infrastructure. A small number of specialized operations (such as web search, and AI inference when no Canadian path is available) are processed by service providers outside Canada. Those requests are sent from Augure's own servers, and we do not attach your account identifiers or your IP address to them. The content you submit is sent as you wrote it, so it may itself contain personal information. Providers that need your contact or payment details to do their job, such as payment processing and email delivery, receive those details; every provider is listed in Section 5.
Our Commitment to Canadian Data Sovereignty
Your data is stored in Canada. Your account records, conversations, documents and other content are stored on Canadian infrastructure. Providers that need some of your account details to do their job, such as payment processing and email delivery, hold a copy of those details; they are listed in Section 5.
AI inference — the engine behind every chat, search, and document analysis — runs on Canadian infrastructure and with vetted partners in the European Union under zero-data-retention agreements, and is never routed to providers in the United States. Every model in the Augure apps runs first in Canada, then on a second Canadian path where one exists. Our European Union partners are used only as a last resort, when no Canadian path can serve a request (see “Where AI inference runs” below). We do not attach your account identifiers or IP address to inference requests. Your prompts and the documents you submit are sent as written, so they may contain personal information.
Some supporting services are provided from outside Canada. Web search queries are sent from Augure's servers without your account identifiers or IP address. Payment processing and email delivery cannot work without your details: our payment processor receives your name, email address and payment information, and our email provider receives your email address and the emails we send you. Analytics and advertising providers receive data only if you consent.
See “Information Sharing and Disclosure” below for our complete sub-processor list.
Where AI inference runs
Each AI request is routed in this order:
| Order | Where the request runs |
|---|---|
| 1. In Canada first | Every model in the Augure apps runs first on Canadian infrastructure: Augure-operated GPU servers in Toronto, Ontario and Calgary, Alberta, Spur Innovation in Waterloo, Ontario, and CARouter in Ontario. |
| 2. A second Canadian path | If the first provider is unavailable or at capacity, the request moves to another of these Canadian providers, where one exists for that model. |
| 3. The European Union, as a last resort | Only when no Canadian path can serve the request is it sent to Scaleway (France) or Mistral AI (European Union), under zero-data-retention agreements. Requests are never sent to providers in the United States. |
Image reading, document text extraction (OCR), voice and search indexing run on Augure's own servers in Calgary. Some models, such as Tofino 3, have no European fallback at all. When a developer API response was served by a fallback provider, the response says so.
Canada-only option. Organizations and developer API accounts can be set to Canada-only. Their AI requests, including background tasks such as conversation titles and memory, are processed only in Canada: when no Canadian path is available, the request returns an error instead of being sent to the European Union. Web search and Deep Research are turned off for these accounts, because web search runs outside Canada. To turn it on, contact hello@augureai.ca.
This approach is designed to help you meet Canadian privacy requirements including:
- —PIPEDA (Personal Information Protection and Electronic Documents Act)
- —Quebec Law 25 (Act to modernize legislative provisions as regards the protection of personal information)
- —CPCSC (Canadian Program for Cyber Security Certification) requirements for defense contractors
Information We Collect
Information You Provide
Account Information: When you create an account, we collect your name, email address, and payment information. For enterprise accounts, we may also collect your organization name, business address, and billing contact details.
User Content: We collect the content you submit to our Services, including prompts, documents you upload for analysis, and any other materials you provide for AI processing. This content is processed solely to deliver the Services you request.
Communications: When you contact us for support or provide feedback, we collect the content of those communications.
Information Collected Automatically
Usage Data: We collect information about how you interact with our Services, including features used, timestamps, and session duration. This helps us improve the Services and ensure system reliability.
Technical Information: We collect device type, browser type, IP address, and general location (city/region level) derived from your IP address. We do not use precise geolocation tracking.
Cookies and Similar Technologies: We use essential cookies required for the Services to function. Analytics and advertising cookies (Google Analytics, Google Ads, Meta, Reddit, LinkedIn) are used only with your consent: these tags load only after you opt in through the cookie banner, and you can withdraw your consent at any time. See “Your Choices” below for cookie preferences.
How We Use Your Information
| Purpose | Legal Basis (PIPEDA) |
|---|---|
| Providing and maintaining the Services | Performance of contract; Consent |
| Processing payments and managing subscriptions | Performance of contract |
| Responding to support requests | Legitimate business interest |
| Improving and developing the Services | Legitimate business interest |
| Ensuring security and preventing fraud | Legal obligation; Legitimate interest |
| Complying with legal obligations | Legal obligation |
| Sending service-related communications | Performance of contract |
We do not:
- —Sell your personal information
- —Use your content to train AI models without explicit consent
- —Share your data with third-party advertisers without your consent — advertising measurement signals are sent only after you grant marketing consent
- —Attach your account identity or IP address to AI inference or web search requests. Providers outside Canada receive your personal details only when the service cannot work without them (payment processing, email delivery, crash reports) or when you have consented to analytics or advertising measurement (see the table in Section 5)
How We Protect Your Information
Technical Safeguards
- —Encryption in Transit: HTTPS connections to our Services are encrypted using TLS
- —Encryption at Rest: User content and personal information are encrypted using AES-256 encryption
- —Access Controls: Role-based access controls limit employee access to personal information on a need-to-know basis
- —Infrastructure Assurance: Provider certifications apply only to the services covered by their reports. Augure does not currently hold a SOC 2 report or ISO/IEC 27001 certification
Organizational Safeguards
- —Internal security reviews and vulnerability scanning
- —Employee privacy and security training
- —Incident response procedures
- —Vendor due diligence for any service providers
Data Retention
We retain your personal information for as long as your account is active or as needed to provide Services. After account termination:
- —Account information: Deleted within 30 days, except as required for legal compliance
- —User content: Deleted within 30 days of your request or account termination
- —Usage logs: Retained in anonymized form for up to 12 months for service improvement
- —Billing records: Retained for 7 years, which meets Canadian tax record-keeping requirements
Information Sharing and Disclosure
Service Providers
We engage a limited number of service providers to help deliver our Services. All service providers are contractually bound to:
- —Process data only on our instructions
- —Maintain confidentiality
- —Implement appropriate security measures
- —Where possible, process data within Canada
| Provider | Purpose | Data Location |
|---|---|---|
| OVHcloud (Beauharnois, Québec) | Infrastructure hosting | Canada |
| Denvr Dataworks (Calgary, Alberta) | GPU infrastructure hosting for Augure-operated AI inference | Canada — dedicated server managed by Augure; inference runs entirely within Canada |
| Supabase | Sign-in and authentication | Canada (AWS Canada Central region) — holds your email address and sign-in details. Supabase is a US company |
| Stripe | Payment processing | Canada and United States — receives your name, email address and payment information |
| Resend | Email delivery (account, billing and product emails) | United States — receives your email address and the content of the emails we send you |
| Functional Software, Inc. (Sentry) | Crash and error reporting for our mobile apps | United States — receives device and app information with crash and error reports |
| Web search: Staan (European Union), Brave Search (United States), and our self-hosted SearXNG instance in Québec, which forwards queries to public search engines | Web search results for chat and research features | The query text only, sent from Augure’s servers without your account identifiers or IP address. Web search is turned off for Canada-only accounts |
| Spur Innovation (Waterloo, Ontario) | Large language model inference — Canadian | Canada — receives prompts and submitted content, without your account identifiers or IP address |
| Toronto GPU Corporation (Toronto, Ontario) | Dedicated GPU server for Augure-operated AI inference (primary for Ossington 5; second Canadian path for Rosedale One) | Canada — single-tenant server operated by Augure with root access; all data, backups and access logs remain in Canada by contract |
| CARouter.ai (Ontario) | Large language model inference — Canadian (several model tiers; primary or second Canadian path) | Canada — receives prompts and submitted content, without your account identifiers or IP address |
| Scaleway (France) | Large language model inference — last-resort failover when no Canadian path is available — EU-sovereign | European Union — receives prompts and submitted content, without your account identifiers or IP address |
| Mistral AI | Large language model inference — last-resort failover when no Canadian path is available — EU | European Union — receives prompts and submitted content, without your account identifiers or IP address |
| Meta Platforms, Inc. | Advertising measurement (conversion tracking) — only with your marketing consent | United States — receives conversion events (email, IP address, browser information and advertising cookie identifiers) only after you grant marketing consent; no events are sent without it |
| Reddit, Inc. | Advertising measurement (conversion tracking) — only with your marketing consent | United States — receives conversion events (email, IP address, browser information and advertising cookie identifiers) only after you grant marketing consent; no events are sent without it |
| Google LLC (Google Analytics, Google Ads) | Website analytics (only with your analytics consent) and advertising measurement (only with your marketing consent) | United States — receives browser information, IP address and cookie identifiers only after you grant the matching consent |
| LinkedIn Corporation (Insight Tag) | Advertising measurement — only with your marketing consent | United States — receives browser information, IP address and cookie identifiers only after you grant marketing consent |
Legal Requirements
We may disclose personal information if required by law, including in response to:
- —Valid Canadian court orders or subpoenas
- —Requests from Canadian law enforcement agencies
- —Regulatory requirements from Canadian authorities
Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice and, where required, obtain consent before any such transfer.
Your Privacy Rights
Rights Under PIPEDA
You have the right to:
- —Access your personal information held by us
- —Correct inaccurate or incomplete personal information
- —Withdraw consent for processing (subject to legal or contractual restrictions)
- —Know how your information has been used and disclosed
- —Complain to us or the Office of the Privacy Commissioner of Canada
Additional Rights Under Quebec Law 25
If you are a Quebec resident, you also have the right to:
- —Data portability: Receive your personal information in a structured, commonly used format
- —De-indexation: Request that we stop disseminating your personal information or de-index any hyperlink attached to your name
- —Know about automated decision-making: Be informed when decisions affecting you are made solely by automated processing
How to Exercise Your Rights
To exercise any of these rights, contact our Privacy Officer:
Privacy Officer — The Altercation Company — Email: hello@augureai.ca
We will respond to all requests within 30 days. We may request verification of your identity before processing requests.
Children's Privacy
Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it promptly.
International Users
Augure is designed for Canadian organizations and individuals. If you access our Services from outside Canada, please be aware that your information will be transferred to, stored, and processed in Canada.
Canada has been recognized by the European Commission as providing adequate protection for personal data. If you are located in the European Economic Area, your data transfer to Canada is lawful under GDPR adequacy provisions.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- —Posting the updated policy on our website with a new "Last Updated" date
- —Sending email notification for significant changes
- —Requiring acknowledgment for changes affecting your rights
Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.
Contact Us
General Inquiries: hello@augureai.ca
Privacy-Specific: hello@augureai.ca
If you are not satisfied with our response to a privacy concern, you may file a complaint with the Office of the Privacy Commissioner of Canada:
Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
1-800-282-1376
www.priv.gc.ca
For Quebec residents, you may also contact the Commission d'accès à l'information du Québec:
Commission d'accès à l'information du Québec
525, boul. René-Lévesque Est, bureau 2.36
Québec G1R 5S9
418 528-7741
www.cai.gouv.qc.ca
Summary
| What We Do | What We Don't Do |
|---|---|
| Store your conversations and documents in Canada | Attach your identity or IP address to AI inference or web search requests |
| Strip account identifiers and IP addresses from AI inference and web search requests | Sell your personal information |
| Encrypt data in transit and at rest | Use content to train AI without consent |
| Delete data upon request | Share data with advertisers without your consent |
| Comply with PIPEDA and Law 25 | Process foreign government requests for stored data without Canadian court approval |
This Privacy Policy is provided in English and French. In the event of any discrepancy, the English version shall prevail.