Privacy notice

What we collect

When you use the contact form

• Your email address, and your name if you give one.
• The subject you select and the message you write.
• Your IP address, browser user-agent string, and the page that referred you.
• The time of submission.

The IP address, user-agent, and referrer are collected to distinguish genuine enquiries from automated submissions. They are not used to build a profile and are not combined with data from any other source.

When you hold an account

• Your email address and a salted password hash. We never see your password.
• Sign-in timestamps and security stamps used by the authentication system.

What we do not collect

• No advertising or cross-site tracking cookies.
• No third-party analytics that identify you personally.
• No payment details on this site.

Cookies and third parties

The only cookies set by default are the ones required to make the site work: a session cookie, an antiforgery token that protects forms from being submitted from elsewhere, and an authentication cookie if you sign in. No consent banner is shown, as no optional or non-essential cookies are set.

The contact form is protected by Google reCAPTCHA. When it is active, Google receives your IP address and interaction data, and applies its own privacy policy and terms. reCAPTCHA is loaded only on the contact page. It is the only third-party service used on this site.

Retention

Contact submissions are kept for twenty-four months, so that if you write again we can see the earlier conversation rather than asking you to repeat it. Submissions flagged as spam are purged on a rolling ninety-day cycle. Account records are kept until you close the account.

Data is stored on servers in Canada and the United States. We do not sell, rent, or otherwise disclose personal information to third parties for marketing purposes.

Your rights

Under PIPEDA you may ask what personal information we hold about you, ask for it to be corrected, and ask for it to be deleted. Write to privacy@personaprotocol.ai and include enough detail to identify the record — the reference code from a contact form receipt is ideal. We respond within thirty days.

If you are unsatisfied with how we handle a request, you can complain to the Office of the Privacy Commissioner of Canada.