Privacy Policy

01Who we are

Valdra is a Canadian privacy-and-compliance platform operated by Canuckt Synergy Solutions Inc. ("Canuckt", "we", "us"). This policy explains how we handle personal information when you visit valdra.ai or use the Valdra application. We act as the controller for the information we collect about you directly, and as a processor for the data you put into Valdra about your own organization and customers.

02Information we collect

Account information — your name, work email, organization, and role when you create an account.

Billing information — processed by our payment provider (Stripe); we store only the plan, status, and last four digits, never full card numbers.

• Usage data — pages viewed, features used, diagnostic logs, and the IP address and approximate location (city or region) your session connects from, to operate, secure, and improve the service.
• Support communications — anything you send us by email or in-product.
• Customer content — the assessments, documents, vendor records and other data you create in Valdra. This belongs to you; we process it only to provide the service.

03How we use information

• To provide, secure, and operate the Valdra service and your account.
• To process payments and manage your subscription.
• To respond to support requests and send service-related notices.
• To understand how the service is being used, and to contact you about your use of it — for example to offer help with something you have started, or to ask how you are getting on.
• To detect, investigate, and prevent security incidents, abuse, and unauthorized access.
• To improve features, reliability, and performance (using aggregated or de-identified data where possible).
• To meet legal, regulatory, and security obligations.

We do not sell personal information, and we do not use your customer content to train third-party AI models.

04Consent and legal basis

We collect and use personal information with your consent and as permitted under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25. You may withdraw consent at any time, subject to legal or contractual limits, by contacting us.

05Activity data

When you are signed in, Valdra records which pages you open, which features you use, and the IP address and approximate location of your session. We keep this to operate and secure the service, to understand which parts of the product are working, and so we can offer help based on where you have got to.

We do not use it to make automated decisions that have legal or similarly significant effects on you, we do not sell it, and we do not share it with advertisers.

If you would rather we did not use your activity data to contact you, email [email protected] and we will stop. It makes no difference to your access to the service.

06AI and personal information

Valdra’s AI features run through Shielk, our Canadian PII engine, which anonymizes personal information before it is sent to any language model. Raw identifiers (names, SINs, emails, health and financial data) are not exposed to third-party AI providers.

07Data residency

Your data is hosted in Canada (OVHcloud, Beauharnois, Québec). We do not move customer content outside Canada except where you explicitly enable an integration that does so, in which case Valdra helps you assess and document that transfer.

08Sharing and disclosure

• Service providers — vetted vendors (e.g., hosting, payments, email) bound by confidentiality and data-processing terms.
• Legal — where required by law, court order, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

09Retention

We keep personal information only as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. You can export or delete your data, and we delete account data within a reasonable period after account closure.

10Your rights

Under PIPEDA and Law 25 you may request access to, correction of, or deletion of your personal information, withdraw consent, and request data portability. To exercise these rights, contact our Privacy Officer below.

You also have the right to complain to the Office of the Privacy Commissioner of Canada (OPC) or, in Québec, the Commission d’accès à l’information (CAI).

11Security

We protect personal information with encryption in transit and at rest, access controls, audit logging, and continuous monitoring. No system is perfectly secure, but we maintain safeguards appropriate to the sensitivity of the data.

12Cookies and analytics

We use essential cookies to operate the site and privacy-respecting analytics to understand usage. You can control non-essential cookies through your browser or our cookie controls.

13Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new effective date, and where appropriate we will notify you directly.