01
Information We Collect
We collect information you provide directly when you use our services, contact us through our website, or engage with our platforms. This may include your name, business email, company, project details, and information required to deliver the service you request.
We automatically collect technical information when you visit our website, including IP address, browser type, operating system, referring URLs, and interaction data. This is collected through standard server logs and analytics tools.
We do not collect sensitive personal data such as biometric data, health information, or government identification numbers unless explicitly required for a specific service engagement and consented to separately.
02
How We Use Your Information
To respond to your inquiries and provide the software engineering, AI, security, advisory, or product services you request.
To deliver service communications, project materials, and product notifications through the channels you select.
To communicate with you about active engagements and relevant Chisu service information.
To improve our website, services, and user experience through aggregated analytics.
To comply with legal obligations and protect our legitimate business interests.
We never sell, rent, or trade your personal information to third parties for marketing purposes.
03
Data Storage, Retention & Security
All personal data is encrypted at rest using AES-256-GCM and in transit using TLS 1.3. Our infrastructure follows zero-trust architecture principles.
Data is stored on secure, access-controlled cloud infrastructure with multi-region redundancy. Access to personal data is restricted to authorized personnel on a need-to-know basis.
Billing records and signed agreements (Master Services Agreement, Advisory Subscription Terms) are retained for the duration required by applicable Canadian tax and corporate law (currently seven years).
04
Subprocessors & Third-Party Services
We operate our own application hosting and use trusted third-party services: Cloudflare (DNS, security, and traffic routing), Mailgun (transactional email), Stripe (payments and subscription billing), and Chyra (chyra.chisu.io — our own document workspace, operated by Chisu Technologies).
All subprocessors are contractually obligated to protect your data and may only process it as instructed by us. A current list of subprocessors is available on request at [email protected].
05
Your Rights
Under Canadian privacy law (PIPEDA), the EU General Data Protection Regulation (GDPR), and applicable provincial law, you have the right to access, correct, or delete your personal data at any time. You may also request a copy of the data we hold about you in a portable format.
You can opt out of non-essential communications at any time by contacting us at [email protected].
If you believe your data rights have been violated, you have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada or your local data protection authority.
06
Cookies
Our website uses essential cookies required for basic functionality. We may also use analytics cookies to understand how visitors interact with our site.
You can control cookie preferences through the cookie banner shown on first visit, or through your browser settings. Disabling essential cookies may affect website functionality.
07
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of our services after changes constitutes acceptance of the updated policy.
08
Contact
For questions about this Privacy Policy, your personal data, or to exercise your rights, contact us at [email protected].