Last Updated: April 21, 2026
Controller: PivotToAI, 1067 Marinaside Crescent, Vancouver, BC V6Z 3A4, Canada. Contact: contact@pivottoai.ca.
This Privacy Policy describes how PivotToAI collects, uses, and protects personal information in compliance with the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA).
1. Information We Collect
- Account information: name, email address, password hash, optional company name, and billing address.
- Payment information: processed directly by Stripe, Inc. We receive a tokenized reference, the last four digits, and the card brand. We never see or store full card numbers or CVCs.
- Learning activity: course progress, quiz results, lesson completions, and certificates.
- Event registrations: ticket holder name and email; optional dietary or accessibility notes you choose to share.
- Support correspondence: messages you send to us via contact form, email, or phone, including any attachments.
- Technical data: IP address, browser user-agent, pages visited, referring URL, and device type.
- Cookies: session cookies, login cookies, and WooCommerce cart cookies. Third-party analytics cookies only if explicitly enabled (see section 5).
2. How We Use Your Information
- Provide and operate the Services you purchased.
- Process payments and issue invoices and refunds.
- Send transactional email (order confirmations, renewal notices, security alerts, course updates).
- Improve our training content based on aggregated progress data.
- Respond to support inquiries and dispute escalations.
- Comply with legal obligations, including tax reporting.
- With your separate opt-in consent only, send occasional product updates and announcements. You can withdraw consent at any time.
3. Legal Basis (PIPEDA / PIPA)
We collect, use, and disclose personal information with your consent, which may be express (e.g., ticking a newsletter checkbox) or implied (e.g., submitting an order). You may withdraw consent at any time by emailing contact@pivottoai.ca, subject to legal and contractual restrictions (for example, we must retain invoice records for tax purposes).
4. Who We Share Information With
- Stripe, Inc. — payment processing. Subject to Stripe’s own privacy policy.
- Email delivery providers — transactional email routing.
- Hosting provider — DigitalOcean (Toronto region) hosts the website and database.
- Analytics — first-party analytics only by default. If we enable Google Analytics in the future, we will request explicit consent via a cookie banner first.
- Legal authorities — only where required by valid Canadian legal process.
We do not sell personal information. We do not share it with advertisers.
5. Cookies and Tracking
We use strictly-necessary cookies for login, checkout, and shopping cart functionality. No marketing or cross-site tracking cookies are set without your consent. You can clear cookies in your browser at any time; this may require you to log in again.
6. Data Retention
- Account records: retained while your account is active plus 3 years after last activity, then deleted or anonymised.
- Payment and tax records: retained for 7 years as required by Canadian tax law.
- Support correspondence: retained up to 3 years after resolution.
- Backups: purged on a rolling 90-day schedule.
7. International Transfers
Our primary hosting is in Canada (DigitalOcean Toronto). Stripe processes payment data in the United States and other regions; Stripe is certified under applicable cross-border transfer frameworks. By purchasing from us you acknowledge that your payment data is processed outside Canada by Stripe under its own safeguards.
8. Your Rights
Under PIPEDA and BC PIPA you have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Withdraw consent (subject to legal and contractual limits).
- Request deletion of information we are not legally required to retain.
- File a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.
To exercise any of these rights, email contact@pivottoai.ca. We respond within 30 days.
9. Security
We protect personal information with HTTPS-only connections, hashed passwords, least-privilege database access, automated security updates, web-application firewall rules, and daily off-site backups. No system is perfectly secure; in the unlikely event of a breach affecting your data, we will notify you and the relevant privacy commissioner as required by law.
10. Children
The Services are not directed at children under 16. We do not knowingly collect information from anyone under 16. If you believe we have, email contact@pivottoai.ca and we will delete the record.
11. Changes to This Policy
Material changes will be posted here and, for active members, emailed 14 days before taking effect.
12. Contact the Privacy Officer
PivotToAI — Attn: Privacy Officer
1067 Marinaside Crescent, Vancouver, BC V6Z 3A4, Canada
Email: contact@pivottoai.ca
Phone: +1 (604) 363-1753