InspektoBack to Home

Privacy Policy

Effective Date: February 1, 2026

Last Updated: August 17, 2026

Introduction

Inspekto AI Inc. ("Inspekto," "we," "us," or "our") is an Alberta corporation (Corporation Number: 2027839030) committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services (collectively, the "Service"), as well as the choices available to you. Our privacy practices are designed with applicable Canadian and U.S. privacy requirements in mind. If you do not agree with this Policy, please do not use our Service.

1. Information We Collect

We collect only the personal information necessary to provide our Service, process transactions, and improve your experience. The information we collect includes:

1.1 Account Information

When you create an account, we collect your email address and password. Your password is stored securely using industry-standard hashing and encryption. We may also collect additional profile information you choose to provide, such as your name or company name.

1.2 Payment Information

When you purchase a subscription or incur metered usage charges, payment processing is handled by our third-party payment processor, Stripe. Stripe collects your payment card information, billing address, and related transaction data. We do not directly receive, process, or store your complete payment card details. We retain basic transaction records (transaction ID, amount, date, and status) and plan-usage records to administer your subscription, calculate metered usage, and provide receipts.

1.3 Usage Data

We automatically collect certain technical information when you use our Service, including your IP address, browser type and version, device type, operating system, pages visited, features used, date and time of access, and referring website URLs. This data helps us maintain, secure, and improve our Service.

1.4 Authentication and Storage Data

We use Supabase for user authentication and data storage. Supabase processes your account credentials and stores your account data in accordance with their security standards. Your data is encrypted both in transit and at rest.

1.5 Cookies and Tracking Technologies

We use cookies and similar technologies, including local storage, to maintain your session, remember your preferences, and understand how our website is used. Essential cookies and storage support core functionality such as authentication, security, and remembering your cookie choice. They operate independently of your analytics choice and cannot be disabled through our on-site control.

If you select "Accept," we enable Google Analytics 4 and the LinkedIn Insight Tag. Google Analytics 4 helps us measure page views, interactions, traffic sources, approximate location, and browser or device information, and may set first-party analytics cookies such as _ga. The LinkedIn Insight Tag helps us understand website visits, measure LinkedIn campaign performance, and obtain audience insights; LinkedIn may use cookies or similar identifiers for these purposes and to support advertising features such as matched audiences. These tools may also receive information such as your IP address, page URL, referrer, and browser or device details.

Google Analytics 4 and the LinkedIn Insight Tag remain disabled if you select "Decline." After making a choice, you can use the "Cookie settings" control on our website at any time to review or change it. Your updated choice applies to future collection through these tools. You can also delete existing cookies through your browser settings, although blocking essential cookies may affect Service functionality. For more information, see how Google uses information from sites that use its services and the LinkedIn Privacy Policy.

1.6 Mobile App Permissions and Data

Our mobile application requests the following device permissions to provide its core features. Each permission is used only for the stated purpose and only when you actively use the related feature.

  • Camera (android.permission.CAMERA) — Used to capture photos and videos that you choose to attach to inspection reports. Captured media is stored locally on your device and uploaded to your account only when you submit a report.
  • Microphone (android.permission.RECORD_AUDIO) — Used to record audio notes that you choose to attach to inspection reports. Audio is stored locally on your device and uploaded to your account only when you submit a report.
  • Location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION) — Used for two purposes, when you grant the permission: to tag inspection media and reports with the geographic coordinates where they were captured, and to share your device's most recent location with your organization while the app is in use, so organization administrators can see where team members were last active. Only the most recent position per device is kept — each update overwrites the previous one, and we do not keep a movement history. Location is reported only while the app is in the foreground; we do not track your location in the background.
  • Photos and Media — Used to allow you to select existing images or files from your device to attach to reports.
  • Internet — Required to authenticate, sync your reports, and communicate with our servers.

Photos, audio, video, and files attached to your reports are stored on your device and, when you submit a report, transmitted over an encrypted connection to our backend (hosted by Supabase) and associated with your account. They are not used for advertising, sold, or shared with third parties beyond the service providers listed in Section 3.

1.7 Inspection Content and AI Processing

The core of the Service is the inspection content you upload or create — photos, audio, video, documents, form entries, and the reports generated from them — together with any messages you send to the Service's AI assistant. This content is stored in your organization's account and processed to provide the Service's features, including automated analysis, audio transcription, and report generation performed by the third-party AI model providers listed in Section 3.1. We submit content to these providers through their business APIs, under terms that restrict them to processing it in order to provide their services to us. Inspection content may include personal information about third parties (for example, individuals appearing in photos or audio); as described in our Terms of Service, you are responsible for having the necessary consents before uploading it.

2. How We Use Your Information

We use your personal information for the following purposes:

  • Service Provision: To create and manage your account, authenticate your identity, provide access to features, and deliver the services you request.
  • Transaction Processing: To process payments, manage your subscription and usage allowances, generate receipts, and maintain transaction records for accounting purposes.
  • Service Improvement: To analyze usage patterns, troubleshoot technical issues, optimize performance, and develop new features.
  • Communication: To send you essential service notifications, account updates, security alerts, and respond to your inquiries. We will only send marketing communications if you have opted in, and you may unsubscribe at any time.
  • Security and Fraud Prevention: To detect and prevent unauthorized access, fraudulent activity, security threats, and to enforce our Terms of Service.
  • Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests, including tax and financial reporting obligations.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We share your information only in the following limited circumstances:

3.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including:

  • Stripe: Payment processing and transaction management
  • Supabase: User authentication, database hosting, and file storage
  • AI Model Providers (Google, OpenAI): Automated analysis of inspection media, audio transcription, and AI assistant features, accessed through their business APIs
  • Resend: Delivery of transactional and notification emails, including invitation and report-sharing emails you ask us to send
  • Hosting Providers (such as Railway and Vercel): Application hosting and infrastructure services
  • Google Analytics 4: Website usage measurement and reporting when you allow analytics
  • LinkedIn Insight Tag: Website analytics, LinkedIn campaign measurement, and audience insights when you allow analytics

These providers process information for the purposes described above under their applicable agreements and privacy terms. Some may process information in other jurisdictions, as described in Section 7.

3.2 Legal Requirements

We may disclose your information when required by law or in response to valid legal processes, such as court orders, subpoenas, or government requests. We may also disclose information to protect our rights, prevent fraud, enforce our Terms of Service, or protect the safety of our users or the public.

3.3 Business Transfers

If Inspekto AI Inc. is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your information.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

  • Encryption: All data transmitted between your browser and our servers is encrypted using SSL/TLS (HTTPS). Passwords are hashed using cryptographic algorithms and never stored in plain text.
  • Access Controls: Access to personal information is restricted to authorized personnel who require it to perform their duties. All team members are bound by confidentiality obligations.
  • Secure Infrastructure: We use Supabase for secure data storage with encryption at rest, and Stripe (PCI DSS Level 1 certified) for payment processing.
  • Regular Monitoring: We continuously monitor our systems for security vulnerabilities and unauthorized access attempts.

While we take reasonable steps to protect your information, no internet transmission or electronic storage method is completely secure. You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately if you suspect unauthorized access to your account.

5. Data Retention

We retain your personal information only as long as necessary for the purposes described in this Policy or as required by law:

  • Account Data: Retained while your account is active. Upon account deletion, we will delete or anonymize your personal information, except where retention is required for legal or legitimate business purposes.
  • Transaction Records: Retained for the period required by applicable tax, accounting, and financial regulations (typically 7 years in Canada).
  • Usage Logs: Retained for up to 12 months for security monitoring and service improvement purposes, unless longer retention is required for security investigations.

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

6. Your Privacy Rights

You have the following rights regarding your personal information:

  • Right to Access: You may request a copy of the personal information we hold about you and information about how we process it.
  • Right to Correction: You may request that we correct inaccurate or incomplete information. You can also update certain information directly through your account settings.
  • Right to Deletion: You may request that we delete your personal information, subject to certain legal exceptions (such as records we are required to retain for tax or legal purposes).
  • Right to Withdraw Consent: Where we rely on your consent to process your information, you may withdraw that consent at any time. For website analytics, use the "Cookie settings" control; your updated choice applies to future collection through Google Analytics 4 and the LinkedIn Insight Tag.
  • Right to Data Portability: You may request a copy of your data in a structured, commonly used format.
  • Right to Object: You may object to certain types of data processing, including direct marketing.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Exercising Your Rights

To exercise any of these rights, please contact us at diogo.guaitolini@inspekto.ca. We will verify your identity before processing your request and respond within the timeframes required by applicable law (typically 30 days under PIPEDA, 45 days under CCPA). There is no fee for making a request unless it is excessive or manifestly unfounded. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your state Attorney General's office, as applicable.

7. Cross-Border Data Transfers

Inspekto AI Inc. is based in Alberta, Canada, and serves users in Canada and the United States. Your personal information may be transferred to, stored, and processed in jurisdictions outside your province or state, including the United States. Data stored in these jurisdictions may be subject to local laws and accessible by law enforcement and government authorities in those jurisdictions. We implement appropriate safeguards for international transfers, including contractual protections with our service providers. By using our Service, you consent to these transfers.

8. Children's Privacy

Our Service is not directed to individuals under 13 years of age, and we do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information and terminate the account.

9. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technologies, or legal requirements. We will post the updated Policy with a new "Effective Date" and notify you of material changes through email or a prominent notice on our website. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy. We encourage you to review this Policy periodically.

10. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Inspekto AI Inc.

Corporation Number: 2027839030

Address: Apt 508, 1110 11th Street SW, Calgary, AB, Canada

Email: diogo.guaitolini@inspekto.ca

We are committed to addressing your privacy concerns and will respond to your inquiry promptly. In accordance with PIPEDA, we have designated personnel responsible for privacy compliance who can be reached through the contact information above.