Privacy Policy

1. Information We Collect

We collect personal information that you voluntarily provide to us when using our family contract creation service:

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password, account preferences
• Contract Information: Personal details required for family contract creation including:
  • Full names, birthdates, and personal identifiers
  • Financial information (assets, debts, income)
  • Family information (children, dependents, relationships)
  • Property ownership and asset details
  • Employment and professional information
• Payment Information: Billing address and payment method details (processed securely through Stripe)
• Technical Information: IP address, browser type, device information, usage patterns
• Communication Records: Support requests, feedback, and correspondence

2. How We Use Your Information

We use your personal information for the following purposes, in compliance with PIPEDA and Alberta PIPA:

• Service Delivery: Creating, customizing, and generating your family contracts and agreements
• Account Management: Creating and maintaining your user account, authentication, and access control
• Payment Processing: Processing payments for our services through secure third-party processors
• Customer Support: Responding to inquiries, providing technical support, and resolving issues
• Legal Compliance: Meeting legal obligations under Canadian and Alberta privacy laws
• Service Improvement: Analyzing usage patterns to enhance our platform and user experience
• Security: Protecting against fraud, unauthorized access, and security threats
• Communication: Sending important updates about your account, service changes, and legal notices

3. Legal Basis for Processing

Under PIPEDA and Alberta PIPA, we process your personal information based on:

• Consent: You provide explicit consent when creating an account and using our services
• Contract Performance: Processing necessary to fulfill our service agreement with you
• Legal Obligations: Compliance with applicable Canadian and Alberta privacy laws
• Legitimate Interests: Fraud prevention, security, and service improvement where appropriate

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following limited circumstances:

• Service Providers: Trusted third-party vendors who assist in service delivery (payment processing, hosting, analytics)
• Legal Requirements: When required by law, court order, or legal process
• Business Transfers: In the event of a merger, acquisition, or sale of business assets
• Protection of Rights: To protect our rights, property, safety, or that of our users
• With Consent: Any other sharing with your explicit consent

5. Data Security and Protection

We implement comprehensive security measures to protect your personal information:

• Encryption: Data encrypted in transit and at rest using industry-standard protocols
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Infrastructure: Secure hosting with regular security updates and monitoring
• Employee Training: Staff trained on privacy protection and data handling procedures
• Regular Audits: Periodic security assessments and vulnerability testing
• Incident Response: Procedures for detecting, reporting, and responding to data breaches

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. Generally, account information is retained while your account is active and for a reasonable period after account closure. Contract information may be retained for legal and administrative purposes. You may request deletion of your information at any time, subject to legal retention requirements.

7. Your Privacy Rights

Under PIPEDA and Alberta PIPA, you have the following rights regarding your personal information:

• Access: Request access to your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Withdrawal of Consent: Withdraw consent for processing (may limit service availability)
• Data Portability: Request your data in a portable format
• Complaint: File complaints with privacy regulators if you believe your rights have been violated

To exercise these rights, contact us using the information provided below. We will respond to your requests within 45 days as required by Alberta PIPA, or within 30 days as required by PIPEDA.

8. Privacy Breach Notification

In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and relevant privacy authorities without unreasonable delay, in accordance with PIPEDA and Alberta PIPA requirements. We will provide information about the breach, potential harm, and steps taken to address the situation.

9. International Data Transfers

While we primarily store and process data within Canada, some service providers may be located outside Canada. When personal information is transferred internationally, we ensure appropriate safeguards are in place to protect your information in accordance with Canadian privacy standards.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for basic site functionality and security
• Analytics Cookies: Help us understand how you use our service to improve performance
• Preference Cookies: Remember your settings and preferences

You can control cookie settings through your browser preferences.

11. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information promptly.

12. Privacy Officer and Contact Information

We have designated a Privacy Officer responsible for ensuring compliance with privacy laws and handling privacy-related inquiries:

13. Regulatory Authority Contact Information

If you have concerns about our privacy practices that cannot be resolved directly with us, you may contact:

• Federal: Office of the Privacy Commissioner of Canada (PIPEDA complaints)
• Alberta: Office of the Information and Privacy Commissioner of Alberta (PIPA complaints)

14. Changes to This Privacy Policy

We may update this privacy policy periodically to reflect changes in our practices, services, or legal requirements. We will notify you of significant changes by email or through our service. The updated policy will be effective immediately upon posting, and your continued use constitutes acceptance of the changes.

15. Compliance and Accountability

We are committed to ongoing compliance with PIPEDA, Alberta PIPA, and other applicable privacy laws. We regularly review and update our privacy practices, conduct staff training, and maintain documentation to demonstrate our accountability for privacy protection.