Privacy Policy

01Who we are

Valdra is a Canadian privacy-and-compliance platform operated by Canuckt Synergy Solutions Inc. ("Canuckt", "we", "us"). This policy explains how we handle personal information when you visit valdra.ai or use the Valdra application. We act as the controller for the information we collect about you directly, and as a processor for the data you put into Valdra about your own organization and customers.

02Information we collect

Account information — your name, work email, organization, and role when you create an account.

Billing information — processed by our payment provider (Stripe); we store only the plan, status, and last four digits, never full card numbers.

• Usage data — pages viewed, features used, and diagnostic logs, to operate and improve the service.
• Support communications — anything you send us by email or in-product.
• Customer content — the assessments, documents, vendor records and other data you create in Valdra. This belongs to you; we process it only to provide the service.

03How we use information

• To provide, secure, and operate the Valdra service and your account.
• To process payments and manage your subscription.
• To respond to support requests and send service-related notices.
• To improve features, reliability, and performance (using aggregated or de-identified data where possible).
• To meet legal, regulatory, and security obligations.

We do not sell personal information, and we do not use your customer content to train third-party AI models.

04Consent and legal basis

We collect and use personal information with your consent and as permitted under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Law 25. You may withdraw consent at any time, subject to legal or contractual limits, by contacting us.

05AI and personal information

Valdra’s AI features run through Shielk, our Canadian PII engine, which anonymizes personal information before it is sent to any language model. Raw identifiers (names, SINs, emails, health and financial data) are not exposed to third-party AI providers.

06Data residency

Your data is hosted in Canada (OVHcloud, Beauharnois, Québec). We do not move customer content outside Canada except where you explicitly enable an integration that does so, in which case Valdra helps you assess and document that transfer.

07Sharing and disclosure

• Service providers — vetted vendors (e.g., hosting, payments, email) bound by confidentiality and data-processing terms.
• Legal — where required by law, court order, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you.

08Retention

We keep personal information only as long as needed to provide the service, meet legal obligations, resolve disputes, and enforce agreements. You can export or delete your data, and we delete account data within a reasonable period after account closure.

09Your rights

Under PIPEDA and Law 25 you may request access to, correction of, or deletion of your personal information, withdraw consent, and request data portability. To exercise these rights, contact our Privacy Officer below.

You also have the right to complain to the Office of the Privacy Commissioner of Canada (OPC) or, in Québec, the Commission d’accès à l’information (CAI).

10Security

We protect personal information with encryption in transit and at rest, access controls, audit logging, and continuous monitoring. No system is perfectly secure, but we maintain safeguards appropriate to the sensitivity of the data.

11Cookies and analytics

We use essential cookies to operate the site and privacy-respecting analytics to understand usage. You can control non-essential cookies through your browser or our cookie controls.

12Changes to this policy

We may update this policy from time to time. Material changes will be posted here with a new effective date, and where appropriate we will notify you directly.