Privacy Policy

Effective Date: October 5, 2025 (for Inspekto.ca)

Introduction

Inspekto.ca ("Inspekto", "we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect from users in Canada and the United States, how we use and safeguard that information, and your rights regarding your data. By using the Inspekto.ca website and services (the "Service"), you agree to the practices described in this Policy. We comply with applicable privacy laws in Canada (such as the Personal Information Protection and Electronic Documents Act, PIPEDA) and relevant U.S. laws (such as the California Consumer Privacy Act, CCPA, where applicable) to protect your information. If you do not agree with this Policy, please do not use our Service.

1. Information We Collect

We only collect personal information necessary to create your account, provide our services (including purchasing usage credits), and improve your experience. This includes:

2. How We Use Your Information

We use the personal information we collect strictly for the following purposes:

• Providing and Improving the Service: We use your information to create and manage your account, authenticate you upon login, and provide the core Inspekto services you request (such as allowing you to purchase and use credits to access our features). This also includes using data to maintain and improve site performance, functionality, and user experience. For instance, understanding how users navigate the site helps us optimize our interface.
• Processing Transactions: If you purchase credits or other paid services, we use your personal and payment information to process those transactions. This includes transmitting the necessary payment details to Stripe to charge your credit card and complete the purchase. We use transaction data to update your account balance and send purchase confirmations or receipts.
• Communicating with You: We may use your email address to send you important account or service updates. For example, we might send confirmations of account creation, notices about major changes to this Privacy Policy or our Terms of Service, or alerts regarding payment and credit status. We may also respond to your inquiries or support requests. We will not send you marketing emails or newsletters unless you have opted in to receive them. If you do opt in, you can unsubscribe at any time.
• Security and Fraud Prevention: Information (like usage logs and IP addresses) may be used to monitor for fraudulent or unauthorized activity, debug and troubleshoot errors, and to protect the integrity of our Service. This helps us keep your account safe and maintain the security of our platform.
• Legal Compliance: We may use or retain your information as needed to comply with applicable laws and regulations. For example, we keep transaction records to meet tax and accounting obligations, and we may use personal information to meet any legal reporting or audit requirements. We also may use data to enforce our Terms of Service or to exercise or defend legal claims if needed.

We will not use your personal information for purposes unrelated to the above without your consent. If we need to use your data for a new purpose, we will update this Policy or request your permission as required.

3. How We Share Your Information

Your privacy is important to us. We do not sell or rent your personal information to third parties for their own marketing or other independent use. We share personal data only in the following circumstances:

Aside from the situations above, we do not share your personal data with any third parties. In particular, we do not provide your information to third-party advertisers or social media companies, nor do we share contact info for third-party marketing. We also do not "sell" personal information as defined under the CCPA (and we have no plans to do so). Any third-party links or integrations on our site (if present) will be clearly identified, and if you choose to click those, any information you provide to third-party sites is subject to their privacy practices, not ours.

4. Data Security

We take data security seriously and implement reasonable security measures to protect your personal information from unauthorized access, loss, misuse, or disclosure. These measures include:

• Encryption: Inspekto.ca is secured via SSL/TLS encryption (HTTPS) when transmitting data. This means any personal information (like your login credentials or payment interactions) is encrypted in transit between your browser and our servers to prevent eavesdropping. Additionally, sensitive data at rest is stored in encrypted form where appropriate. For example, we store your password as a cryptographic hash (not in plaintext) for added security.
• Access Controls: We restrict access to personal data to authorized personnel who need it to operate or improve the Service. User data is stored on secure servers, and administrative access to those servers is limited and protected by strong authentication. Our team members are bound by confidentiality obligations to safeguard your information.
• Third-Party Security: We select reputable service providers and require them to use appropriate security measures. In particular, Stripe, our payment processor, is certified as a PCI DSS Level 1 Service Provider – this is the highest level of payment card industry security certification. This means Stripe follows stringent standards for protecting payment data. We rely on Stripe's secure systems to handle your credit card information.

While we strive to protect your information, please note that no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of data. However, we continuously update our security practices in line with industry standards to mitigate risks. You are also responsible for maintaining the secrecy of your account credentials. Please use a strong, unique password for Inspekto and notify us immediately if you suspect any unauthorized access to your account.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, as outlined in this Policy, and as required or permitted by law. In practice:

• Account Data: If you have an account with Inspekto, we will keep your account information (such as your email) active for as long as your account exists so that we can provide you the Service. If you choose to delete your account or if it becomes inactive for an extended period, we will remove or anonymize personal data associated with your account, except where we need to keep it for legitimate business or legal reasons. For example, even after account deletion, we might retain a record of transactions (without payment details) for financial reporting.
• Transaction Records: We retain payment transaction records and related personal information for a period necessary to comply with accounting, tax, and financial regulations. These legal obligations may require us to keep certain data for a number of years (for instance, Canada Revenue Agency or IRS guidelines). We will securely store such information and restrict access to it.
• Usage Logs: Basic server and usage logs are retained for a limited time for analysis and security (typically this might range from a few months up to a year, unless required longer for security investigations). Aggregated data that does not identify individuals may be kept longer for statistical purposes.

When we no longer have a legitimate need or legal obligation to retain your personal information, we will securely delete it or anonymize it. For example, if you ask us to delete your data and we have no legal requirement to keep it, we will remove it from our systems in a reasonable timeframe. In all cases, we retain and use your information in accordance with our data retention policies and applicable law.

6. Your Rights and Choices

You have important privacy rights regarding your personal information. Inspekto is committed to respecting these rights and providing you control over your data. Depending on whether you reside in Canada or the U.S., and specifically which state, your rights may include:

• Right to Access: You have the right to request a copy of the personal information we hold about you and to obtain information about how we process it. This is sometimes called a "data access request." We will provide you with your data in a readable format. For Canadian users, this right is protected under PIPEDA's access principle. For U.S. users, laws like the CCPA similarly grant California residents the right to know what personal data a business has collected about them.
• Right to Correction (Rectification): If any of your personal information is inaccurate or incomplete, you have the right to request that we correct or update it. You can also log into your account and update certain information directly. We encourage you to keep your information current. Under PIPEDA, individuals can challenge the accuracy of their data and have it amended as appropriate.
• Right to Deletion: You may request that we delete your personal information (sometimes called the "right to be forgotten"). For example, you can ask us to delete your account and remove associated personal data. We will honor such requests to the extent required by law. Note that we may need to retain some information for legal obligations or legitimate internal purposes (we will inform you if so). This right to deletion is provided to Canadian users via the ability to withdraw consent and to U.S. users under laws like the CCPA (with some exceptions). In general, if you want to delete your Inspekto account/data, contact us at the email below.
• Right to Withdraw Consent: Where our processing of your personal information is based on your consent, you have the right to withdraw that consent at any time. For instance, if you consented to receive marketing emails, you can opt out later. Withdrawing consent will not affect the lawfulness of any processing we already performed, but it will mean we stop the specific use of your data going forward. If you withdraw consent for us to process essential data (like your email for an account), we may need to deactivate your account, but we will let you know if that's the case.
• Right to Opt-Out of Sale of Personal Information: As noted, Inspekto does not sell personal data. If this were to change, users (especially California residents) would have the right to opt out of the sale or sharing of their personal information. We include this for transparency regarding CCPA rights. Since we do not sell data, submitting a do-not-sell request will simply be documented and we will continue not selling your info.
• Right to Non-Discrimination: We will never discriminate against you for exercising any of your privacy rights. This means we won't deny you our services, give you a lesser experience, or charge you different prices because you exercised your rights under this section. For example, if you request deletion of your data or opt out of any hypothetical data sale, we will not downgrade your service or refuse to do business with you solely for that reason. (However, note that if deletion of certain data prevents us from providing the service, we will inform you of that outcome as part of fulfilling your request.)

These rights apply to all users of Inspekto to the extent feasible – for instance, even if you are not in California, we will generally honor requests to access or delete your data in line with our commitment to privacy. There may be limitations or exceptions to some rights: for example, we cannot delete information that we are legally required to keep, and we may need to verify your identity before fulfilling a data access or deletion request.

7. International Data Transfers

Inspekto is based in Canada, but we also serve users in the United States. Your information may be transferred to, stored on, and processed on servers located outside of your province, state, or country including in the United States. In particular, our payment processor (Stripe) and possibly some of our infrastructure or backup services may operate from the U.S. or other jurisdictions. This means that your personal data may be subject to the laws of those other jurisdictions (for example, data stored in the United States may be accessed by U.S. law enforcement under U.S. laws). We take steps to ensure that appropriate safeguards are in place for international data transfers as required by applicable law. If you are located in Canada, we will handle your personal information in accordance with PIPEDA and any provincial laws, even when it is transferred to a foreign service provider. We only transfer data to third parties in other countries when necessary to provide our Service (e.g., to process a payment or host our application), and we rely on contractual or other legal mechanisms to protect your data in those cases. By using Inspekto.ca and providing information to us, you consent to the transfer of your personal information across international borders as needed to operate our service. If you have questions about our policies on cross-border data transfers, feel free to contact us.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13 years old. If you are under 13, please do not register an account or provide any information about yourself on our site. Parents or guardians should contact us if they believe we have inadvertently collected personal data from a child so that we can delete such information. For residents of certain jurisdictions, we also respect additional age-related privacy protections (for example, if you are under the age of majority in your region, we may require parental consent for you to use the Service). If we become aware that a child under 13 has provided us with personal information without parental consent, we will take steps to remove that information and terminate the child's account.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we update the Policy, we will revise the "Effective Date" at the top. If the changes are significant, we may also provide a more prominent notice (such as by emailing registered users or placing a notice on our website). We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Service after any changes to this Policy signifies your acceptance of the updated terms.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Our designated privacy officer (or team) will respond to your inquiry and address any issues. We are accountable for our privacy practices and are happy to answer questions or address complaints. In accordance with PIPEDA's accountability principle, we have a designated individual responsible for privacy compliance who can be reached through the contact information above.

Thank you for trusting Inspekto with your personal information. We value your privacy and will continue to work hard to protect it while providing you with our services.