Privacy Policy

Account Information: When you create an account, we collect your name, email address, and payment information. For enterprise accounts, we may also collect your organization name, business address, and billing contact details.

User Content: We collect the content you submit to our Services, including prompts, documents you upload for analysis, and any other materials you provide for AI processing. This content is processed solely to deliver the Services you request.

Communications: When you contact us for support or provide feedback, we collect the content of those communications.

Usage Data: We collect information about how you interact with our Services, including features used, timestamps, and session duration. This helps us improve the Services and ensure system reliability.

Technical Information: We collect device type, browser type, IP address, and general location (city/region level) derived from your IP address. We do not use precise geolocation tracking.

Cookies and Similar Technologies: We use essential cookies required for the Services to function. We do not use third-party advertising or tracking cookies. See “Your Choices” below for cookie preferences.

• —Encryption in Transit: All data transmitted to and from our Services uses TLS 1.3 encryption
• —Encryption at Rest: User content and personal information are encrypted using AES-256 encryption
• —Access Controls: Role-based access controls limit employee access to personal information on a need-to-know basis
• —Infrastructure Security: Our Canadian data centers maintain SOC 2 Type II compliance and implement physical security controls

• —Regular security assessments and penetration testing
• —Employee privacy and security training
• —Incident response procedures
• —Vendor due diligence for any service providers

We retain your personal information for as long as your account is active or as needed to provide Services. After account termination:

• —Account information: Deleted within 30 days, except as required for legal compliance
• —User content: Deleted within 30 days of your request or account termination
• —Usage logs: Retained in anonymized form for up to 12 months for service improvement
• —Billing records: Retained for 7 years as required by Canadian tax law

We engage a limited number of service providers to help deliver our Services. All service providers are contractually bound to:

• —Process data only on our instructions
• —Maintain confidentiality
• —Implement appropriate security measures
• —Where possible, process data within Canada

We may disclose personal information if required by law, including in response to:

• —Valid Canadian court orders or subpoenas
• —Requests from Canadian law enforcement agencies
• —Regulatory requirements from Canadian authorities

If we are involved in a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice and, where required, obtain consent before any such transfer.

You have the right to:

• —Access your personal information held by us
• —Correct inaccurate or incomplete personal information
• —Withdraw consent for processing (subject to legal or contractual restrictions)
• —Know how your information has been used and disclosed
• —Complain to us or the Office of the Privacy Commissioner of Canada

If you are a Quebec resident, you also have the right to:

• —Data portability: Receive your personal information in a structured, commonly used format
• —De-indexation: Request that we stop disseminating your personal information or de-index any hyperlink attached to your name
• —Know about automated decision-making: Be informed when decisions affecting you are made solely by automated processing

To exercise any of these rights, contact our Privacy Officer:

Privacy Officer — The Altercation Company — Email: hello@augureai.ca

We will respond to all requests within 30 days. We may request verification of your identity before processing requests.