Privacy Policy
Last updated: 2026-05-06
What we collect
Account info (name, email, billing). Usage data (pages viewed, features used). Documents you upload (encrypted at rest, never used for training).
How we use it
To provide the Service, bill you, support you, send transactional emails, and improve the product. We don't sell your data.
Where it lives
Primary data in AWS Canada (ca-central-1). Backups encrypted with KMS-managed keys. Stripe processes payment data. We use Clerk for authentication.
Your rights
Under GDPR / PIPEDA / CPRA: you can export your data, request deletion, or restrict processing. Email privacy@edts.ca.
Retention
Documents retained while your account is active, plus 90 days after cancellation. Audit logs retained 7 years for compliance.
Cookies
We use essential cookies for auth and a privacy-respecting analytics cookie. You can disable non-essential cookies in our cookie banner.
This is a placeholder. Have your lawyer review and finalize before launch.