Privacy Policy

1. Who We Are

IDCReady is operated by 1392081 Alberta Ltd (“we,” “us,” or “our”), a company incorporated in Alberta, Canada. This Privacy Policy explains how we collect, use, and protect personal information when you use the IDCReady platform (“Service”).

We are committed to compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA).

2. Information We Collect

Account information: When you register, we collect your name, email address, and organization name (if applicable). This information is managed by Clerk, our authentication provider.

Uploaded drawings: Files you upload for compliance checking are stored temporarily in our secure cloud storage to process your request. Drawings are stored in Supabase (cloud database and file storage) and are associated with your account.

Usage and job data: We retain records of each compliance check you run, including the drawing name, jurisdiction selected, check status, and the generated report. This allows you to access your history and supports billing.

Billing information: Payment transactions are processed by Stripe. We do not store your credit card number or banking details. We retain records of credit purchases and credit balances.

Technical data: We may collect standard server logs including IP addresses, browser type, and timestamps for security and debugging purposes.

3. How We Use Your Information

We use your information to:

• Authenticate your identity and manage your account;
• Process uploaded drawings through our AI compliance engine and return results to you;
• Maintain your check history and credit balance;
• Process payments and issue receipts;
• Respond to support requests and communications;
• Monitor for security incidents and prevent abuse;
• Improve the reliability and performance of the Service.

We do not use your uploaded drawings or compliance reports to train, fine-tune, or benchmark any AI model.

4. Third-Party Service Providers

We share your information only with the third-party providers necessary to operate the Service:

• Clerk — user authentication and account management. Your name and email are stored by Clerk. Clerk Privacy Policy.
• Supabase — database and file storage. Drawings and job records for Canadian jurisdictions (Alberta, BC) are stored in Canada (Central). Drawings and job records for US jurisdictions (Alaska, Texas, Louisiana) are stored in the United States (Oregon). Credit and billing records are stored in Canada regardless of jurisdiction.
• Stripe — payment processing. Stripe handles all payment card data and is PCI-DSS compliant. Stripe Privacy Policy.
• Modal — serverless compute infrastructure used to run the AI compliance analysis. Drawings are transmitted to Modal for processing and are not retained by Modal beyond the duration of the job.
• Anthropic — the AI model (Claude) used to analyze drawings is provided by Anthropic. Drawings are submitted to Anthropic’s API for inference. Anthropic’s API usage policy prohibits training on API inputs. Anthropic Privacy Policy.
• Vercel — web hosting and deployment infrastructure.

We do not sell your personal information to third parties.

5. Data Retention

We retain your account information for as long as your account is active. Uploaded drawings are retained in storage to allow you to access past reports. You may request deletion of your drawings or your entire account at any time by contacting us at sales@smbscaleup.com.

Billing records are retained for seven (7) years as required by Canadian tax law.

6. Your Rights

Under PIPEDA and PIPA, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Request deletion of your personal information, subject to legal retention obligations;
• Withdraw consent to our processing, which may result in termination of your account.

To exercise any of these rights, contact us at sales@smbscaleup.com. We will respond within 30 days.

7. Security

We implement industry-standard security measures including encrypted storage, HTTPS-only access, role-based access controls, and authentication through Clerk. No method of transmission or storage is 100% secure. If we become aware of a security breach affecting your personal information, we will notify you as required by applicable law.

8. Confidentiality of Uploaded Drawings

We understand that engineering drawings may contain commercially sensitive or confidential information. We treat all uploaded content as confidential, limit access to authorized personnel and systems required to operate the Service, and do not share drawings with any party other than the sub-processors listed in Section 4.

If your organization has specific confidentiality requirements (e.g., requiring a Non-Disclosure Agreement), please contact us before uploading any drawings.

9. Cookies

The Service uses cookies and similar technologies for authentication session management (via Clerk) and to maintain your login state. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service. The effective date at the top of this page reflects when the current version took effect.

11. Contact

Privacy inquiries may be directed to:
sales@smbscaleup.com
1392081 Alberta Ltd
Calgary, Alberta, Canada