Privacy Policy

1. Who we are

MapleLog is a software-as-a-service platform operated by MapleLog ("we", "us", "our"). We help Canadian small businesses track AI tool usage and maintain compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA). Our website is maplelog.co.

2. Information we collect

We collect the following types of information:

• Account information: Your email address and password when you create an account.
• Business information: Your business name, province, industry, and employee count.
• Compliance data: Information about AI tools your business uses, data mapping entries, and PIPEDA checklist responses you enter into MapleLog.
• Payment information: Billing details are processed by Stripe and are not stored on our servers.
• Usage data: We may collect anonymous usage data to improve the platform.

3. How we use your information

We use the information we collect to:

• Provide and operate the MapleLog platform
• Generate compliance reports on your behalf
• Process payments through Stripe
• Send transactional emails such as password resets
• Improve and develop new features
• Respond to support requests

4. Data storage and security

Your data is stored on Supabase infrastructure located in the Canada (Central) region. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is encrypted in transit and at rest.

5. Data sharing

We do not sell your personal information. We share data only with the following third-party service providers necessary to operate our platform:

• Supabase: Database and authentication infrastructure
• Stripe: Payment processing
• Vercel: Application hosting

6. Your rights under PIPEDA

As a Canadian resident, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent for the use of your personal information
• Request deletion of your account and associated data

To exercise any of these rights, contact us at privacy@maplelog.co.

7. Data retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

8. Cookies

MapleLog uses essential cookies to maintain your authenticated session. We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or by posting a notice on our platform. Your continued use of MapleLog after changes constitutes acceptance of the updated policy.

10. Contact us

If you have questions about this privacy policy or our data practices, please contact us at privacy@maplelog.co or by visiting maplelog.co.