Privacy Policy

1. Introduction

Straxia AI ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website straxia.ai, contact us, subscribe to updates, or engage with our services.

This policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25 / Bill 64), the General Data Protection Regulation (GDPR), and other applicable international privacy legislation.

2. Responsible Person

In accordance with Quebec Law 25, we have designated a person responsible for the protection of personal information within our organization. For questions, concerns, or to exercise your rights, you may contact:

3. Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide when you express interest in our services, subscribe to our newsletter, fill out a contact form, or otherwise communicate with us. This may include:

• Full name
• Email address
• Phone number
• Company name, job title, and industry
• Business information relevant to our AI solutions
• Communication records and correspondence

Information Collected Automatically

When you visit our website, we may automatically collect certain technical information, including:

• IP address
• Browser type and version
• Operating system and device information
• Pages visited, time spent on pages, and referral sources
• Cookies and similar tracking technologies (see Section 10)

4. Legal Basis and Purposes for Processing

We process your personal information only when we have a lawful basis to do so. Under PIPEDA, Quebec Law 25, and the GDPR, this includes:

• Consent: Where you have given explicit, informed consent (e.g., subscribing to our newsletter or submitting a contact form)
• Contractual necessity: To provide, operate, and maintain our AI solutions and services as agreed
• Legitimate interest: To improve our website, products, and user experience, where such interest does not override your fundamental rights
• Legal obligation: To comply with applicable laws, regulations, and legal processes

Specific Purposes

• Responding to inquiries about Straxia and separately agreed services
• Responding to inquiries and providing customer support
• Recording an optional subscription request, separately from contact requests; no newsletter is currently sent by this website
• Reviewing website operations to improve the experience
• Detecting, preventing, and addressing security threats or technical issues
• Fulfilling legal and regulatory obligations

5. Consent

In accordance with PIPEDA and Quebec Law 25, we obtain your informed consent before collecting, using, or disclosing your personal information, except where the law permits or requires otherwise.

• Consent is obtained at the time of collection and for the specific purpose stated
• You may withdraw your consent at any time by contacting our Privacy Officer or using the unsubscribe mechanism in our communications
• Withdrawal of consent may limit our ability to provide certain services
• We do not use personal information for new purposes without obtaining additional consent, unless required or permitted by law

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: With vendors who provide website hosting and other services on our behalf, subject to applicable obligations to protect your data
• Legal Requirements: When required by law, regulation, court order, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notification to affected individuals
• With Your Consent: When you have given explicit permission

Cross-Border Transfers

If your personal information is transferred outside of Quebec, Canada, or the European Economic Area, we ensure that appropriate safeguards are in place to provide a comparable level of protection. In compliance with Quebec Law 25 and the GDPR, we conduct privacy impact assessments before any cross-border transfer and ensure that receiving jurisdictions provide adequate protection or that appropriate contractual clauses are in place.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, loss, or destruction. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Employee training on data protection

In the event of a confidentiality incident involving personal information that presents a risk of serious injury, we will notify the Commission d'accès à l'information du Québec (CAI), the Office of the Privacy Commissioner of Canada, and affected individuals in accordance with applicable breach notification requirements under Quebec Law 25, PIPEDA, and the GDPR.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specific retention periods include:

• Newsletter subscriptions: Until you unsubscribe or withdraw consent
• Contact inquiries: For the duration of our business relationship plus any legally required retention period
• Website analytics: Anonymized after 26 months

When your data is no longer needed, we will securely delete or anonymize it using industry-standard methods. You may request the destruction of your personal information at any time, subject to legal retention requirements.

9. Your Rights

Under PIPEDA, Quebec Law 25, and the GDPR, you have the following rights regarding your personal information:

Under Canadian and Quebec Law

• Access: Request access to the personal information we hold about you
• Correction: Request rectification of inaccurate or incomplete information
• Deletion: Request the de-indexing or destruction of your personal information (droit à l'effacement)
• Withdraw Consent: Withdraw your consent to the processing of your information at any time
• Portability: Receive your personal information in a structured, commonly used technological format (as of September 2024 under Law 25)
• Complaint: File a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada

Under the GDPR (European Residents)

• Right of Access: Obtain confirmation of whether your data is being processed and access to that data
• Right to Rectification: Have inaccurate personal data corrected
• Right to Erasure: Have your personal data deleted under certain circumstances
• Right to Restriction: Restrict the processing of your personal data
• Right to Object: Object to processing based on legitimate interest or direct marketing
• Right to Data Portability: Receive your data in a machine-readable format
• Complaint: Lodge a complaint with a supervisory authority in the EU/EEA

To exercise any of these rights, please contact our Privacy Officer at [email protected]. We will respond to your request within 30 days, as required by law. We may request verification of your identity before processing your request.

10. Cookies and Tracking Technologies

The current marketing site does not load an analytics or marketing tracking container. A local preference remembers your chosen language. If non-essential tracking is introduced later, it should be disclosed and subject to applicable consent requirements before activation.

Types of Cookies We Use

• Strictly Necessary: Required for the website to function (no consent needed)
• Analytics and marketing: Not activated on this marketing site at present

You can manage browser storage through your browser settings. Non-essential analytics and marketing tracking should not be activated without any consent required by applicable law.

11. Automated Decision-Making

Our AI solutions may involve automated processing of data to generate strategic recommendations, financial models, action plans, and governance insights. These outputs are designed to assist human decision-making, not replace it. We do not make decisions that produce legal effects or similarly significant effects based solely on automated processing without human oversight.

12. Privacy Impact Assessments

In compliance with Quebec Law 25, we conduct privacy impact assessments (PIAs) before implementing new information systems, electronic service delivery projects, or any initiative involving the collection, use, or disclosure of personal information. These assessments evaluate privacy risks and ensure appropriate mitigation measures are in place.

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit before providing personal information.

14. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a minor without appropriate consent, we will take steps to delete that information promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidance. Material changes will be communicated through a prominent notice on our website and, where required, by direct notification. The "Last updated" date at the top of this page indicates the most recent revision.

16. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact:

You also have the right to file a complaint with the relevant supervisory authority:

• Quebec: Commission d'accès à l'information du Québec (CAI) — www.cai.gouv.qc.ca
• Canada: Office of the Privacy Commissioner of Canada (OPC) — www.priv.gc.ca
• European Union: Your local data protection authority