Privacy Policy

We collect information you provide directly to us, including: • Account Information: Name, email address, company name, job title, and password when you create an account. • Usage Data: Information about how you interact with our platform, including AI model usage, session data, features accessed, and performance metrics. • Payment Information: Billing details processed securely through our third-party payment provider. We do not store full credit card numbers. • Communications: Messages, feedback, and support requests you send to us. • AI Interaction Data: Prompts, queries, and outputs generated through our AI services, subject to your data retention settings.

We use the information we collect to: • Provide, maintain, and improve our AI platform and services. • Process transactions and send related information. • Send technical notices, updates, security alerts, and support messages. • Respond to your comments, questions, and customer service requests. • Monitor and analyze trends, usage, and activities to improve user experience. • Detect, investigate, and prevent fraud and other illegal activities. • Personalize and improve your experience with our platform. • Train and improve our AI models (only with anonymized and aggregated data, unless you explicitly opt in).

We implement enterprise-grade security measures to protect your data: • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256). • Zero Trust Security: Every access request is verified regardless of source, with continuous authentication and least-privilege access controls. • SOC 2 Type II Compliance: Our infrastructure and processes are audited annually. • PIPEDA Compliance: We adhere to Canada's Personal Information Protection and Electronic Documents Act for all users. • GDPR Compliance: We adhere to EU data protection regulations where applicable. • Data Isolation: Enterprise customers benefit from dedicated data environments with no cross-tenant data access. • Regular Audits: We conduct regular security assessments and penetration testing.

We do not sell your personal information. We may share data with: • Service Providers: Third-party companies that help us operate our platform (hosting, analytics, payment processing). • AI Model Providers: When processing your requests through third-party AI models, subject to strict data processing agreements. • Legal Requirements: When required by law, legal process, or to protect our rights, safety, or property. • Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice. All third-party providers are bound by data processing agreements that ensure the same level of data protection.

You have the following rights regarding your data: • Access: Request a copy of the personal data we hold about you. • Correction: Request correction of inaccurate or incomplete data. • Deletion: Request deletion of your personal data, subject to legal retention requirements. • Portability: Request your data in a structured, machine-readable format. • Opt-Out: Opt out of marketing communications at any time. • Data Retention Controls: Configure how long AI interaction data is retained in your account settings. • Restrict Processing: Request that we limit how we process your data. To exercise these rights, contact us at privacy@opporture.ca.

We use cookies and similar technologies to: • Maintain your session and authentication state. • Remember your preferences and settings. • Analyze platform usage and performance. • Provide personalized experiences. You can control cookie preferences through your browser settings. Essential cookies required for platform functionality cannot be disabled.

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods: • Account Data: Retained until account deletion, then purged within 30 days. • AI Interaction Data: Configurable by you (default: 90 days), or as required by your enterprise agreement. • Billing Records: Retained for 7 years as required by Canadian financial regulations. • Audit Logs: Retained for 1 year for security purposes.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our platform and, for significant changes, via email notification. Your continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at: • Email: privacy@opporture.ca • Address: OrchestrAIte, Opporture Inc. • Data Protection Officer: dpo@opporture.ca