Privacy Policy

Sova Technologies Inc. (“Sova,” “we,” “our,” or “us”) operates sovaos.ca and the Sova platform (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this policy. If you do not agree, please discontinue use of the Services.

1. What We Collect

We collect personal information that is necessary to provide and improve our Services. This includes:

• Account information: Name, business email address, job title, company name, and phone number provided during registration or onboarding.
• Billing information: Payment card details (processed and tokenized by our PCI-DSS compliant payment processor; we do not store raw card numbers), billing address, and transaction history.
• Platform usage data: Feature interactions, campaign data, report configurations, and other information you input while using the platform.
• Technical data: IP address, browser type, device identifiers, operating system, referring URLs, and session data collected automatically via cookies and server logs.
• Communications: Content of support requests, feedback submissions, and correspondence with our team.

We do not knowingly collect personal information from individuals under the age of 18. Our Services are intended solely for business use by authorized representatives of franchise organizations.

2. How We Use Your Information

We use the personal information we collect for the following purposes, with your knowledge and consent where required by law:

• Provisioning, maintaining, and improving the Sova platform and its features.
• Processing payments and managing subscription accounts.
• Sending transactional communications, including account confirmations, billing receipts, and service notifications. These are necessary for the performance of our contract and cannot be opted out of while your account is active.
• Sending marketing and promotional communications, where you have provided express or implied consent in accordance with the Canada Anti-Spam Legislation (CASL). You may withdraw consent at any time.
• Conducting product analytics and research to understand usage patterns and improve the user experience.
• Responding to support requests, inquiries, and feedback.
• Complying with legal obligations, enforcing our Terms of Service, and protecting the rights and safety of Sova and its users.

We do not sell your personal information to third parties. We do not use your data for behavioural advertising purposes beyond the scope described in this policy.

3. Disclosure to Third Parties

We may share personal information with the following categories of third parties, solely as necessary to operate our Services:

• Service providers: Cloud hosting, payment processing, email delivery, analytics, and customer support tools that process data on our behalf under confidentiality agreements and data processing agreements.
• Professional advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.
• Law enforcement or regulators: Where we are required to do so by applicable law, court order, or governmental authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

Some of our service providers may be located outside Canada, including in the United States. Where personal information is transferred internationally, we take steps to ensure it receives comparable protection, including through contractual safeguards.

4. Data Storage & Security

Sova stores the primary instance of your data on servers located in Canada. We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, disclosure, alteration, and destruction, including:

• TLS encryption for all data in transit.
• Encryption at rest for stored data and backups.
• Role-based access controls limiting employee access to personal data.
• Regular security assessments and vulnerability reviews.

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security and encourage you to use strong, unique passwords and enable multi-factor authentication on your account.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, to provide the Services, and to comply with legal obligations. Upon account termination, we will delete or anonymize personal information within 90 days, unless a longer retention period is required by law.

5. Your Privacy Rights

Under PIPEDA, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Withdrawal of consent: Withdraw consent to certain uses of your personal information, subject to legal and contractual restrictions.
• Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights under PIPEDA have been violated.

To exercise any of these rights, please submit a written request to our Privacy Officer at the contact details below. We will respond within 30 days. In some cases, we may need to verify your identity before processing your request.

6. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice within the platform at least 14 days before taking effect. Continued use of the Services following notice of changes constitutes acceptance of the updated policy.

7. Contact Our Privacy Officer

For questions, access requests, or concerns about this policy or our privacy practices, please contact:

Privacy Officer, Sova Technologies Inc.
Email: [email protected]
Mail: Privacy Officer, Sova Technologies Inc., Toronto, Ontario, Canada

You also have the right to contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.