Privacy Policy
This draft describes how Spectral HX (CBCA incorporation pending; Ontario, Canada) collects, uses and discloses personal information under PIPEDA and, where applicable, provincial privacy law. It is not yet final.
What we collect
- Account and billing details needed to provide the subscription (name, email, Stripe customer/payment references — not full card numbers).
- Licence activation signals: licence key, hashed device identifier, software version, activation time — used to verify licences and prevent fraud.
- Support messages you send us.
- Optional telemetry only if you opt in. Local-first inference keeps prompts on your machine unless you choose a cloud model.
Why we use it
To provide and secure the service, bill and refund through Stripe, enforce licences, answer support, meet legal duties, and improve the product with aggregated, de-identified metrics where possible.
Sharing
Processors such as Stripe (payments), hosting and email providers act on our instructions. We do not sell personal information. We do not use Customer Data to train general-purpose AI models without opt-in consent.
Storage outside Canada
Some processors may store or process data outside Canada; it may then be subject to foreign law. We use contractual and organizational safeguards appropriate to the sensitivity of the data.
CASL
We send commercial electronic messages only with consent (express or implied as CASL allows), with sender identification and a working unsubscribe.
Your rights
You may request access to or correction of your personal information, withdraw consent where applicable (subject to legal or contractual restrictions), and complain to the Office of the Privacy Commissioner of Canada. Contact will be listed here after owner review.
Retention and security
We keep information only as long as needed for the purposes above and legal retention, then delete or anonymize it. We use access controls, encryption in transit, and least-privilege staff access.