Privacy Policy

Last updated: February 17, 2026

Qyntral (“we”, “our”, or “us”) is committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. This policy explains how we collect, use, disclose, and protect your personal information when you use our AI Readiness Assessment platform.

1. Information We Collect

Information you provide directly:

  • Contact information: name, email address, job title/role
  • Business information: company name, industry, employee count, annual revenue range, province/territory, website URL, legal structure, Canadian ownership status, years in business
  • Assessment responses: answers to questions about your business operations, technology, data practices, team capabilities, strategy, compliance, and grant eligibility
  • Optional context: current software tools, biggest business challenges

Information collected automatically:

  • Referral source and UTM parameters (how you found us)
  • Browser type, device type, and IP address (via standard web server logs)

2. How We Use Your Information

We use your personal information for the following purposes:

  • Assessment scoring: To calculate your AI readiness score across seven dimensions
  • Grant eligibility screening: To identify potential alignment between your business profile and Canadian government funding programs (e.g., IRAP, SR&ED, OIDMTC, BDC Data to AI). This screening indicates potential alignment only and does not constitute a determination of eligibility.
  • AI report generation: Your business information and assessment responses are processed by an AI system (Claude by Anthropic, hosted on AWS Bedrock in a secure environment) to generate your personalized readiness report, including potential grant program matches
  • Payment processing: To facilitate payments through Stripe (we do not store your credit card information)
  • Service communications: To deliver your report and respond to support requests

We will never sell your personal information to third parties. We do not use your data for advertising or marketing purposes unless you explicitly opt in.

3. AI-Generated Content Disclosure

Your AI Readiness Report is generated using artificial intelligence (Claude by Anthropic). Your business information and assessment responses are sent to this AI system to produce personalized recommendations, including potential government grant program matches. The AI does not retain your data after generating the report.

Government funding program references in your report are generated by AI based on the business profile data you provided. These references indicate potential alignment only and do not constitute eligibility determinations. Program details may be outdated or inaccurate. Always verify grant information directly with the administering program authority before applying.

While we strive for accuracy, AI-generated content should be reviewed and validated before making business decisions.

4. Data Storage and Security

  • Location: Your data is stored on Supabase servers located in Canada (ca-central-1), ensuring Canadian data residency
  • Encryption: All data is encrypted in transit (TLS/HTTPS) and at rest
  • Access: Access to personal information is restricted to authorized personnel who require it to provide our services
  • Payment data: Credit card information is processed and stored exclusively by Stripe, a PCI-DSS Level 1 certified payment processor. We never see or store your full card number.

5. Third-Party Services

We share limited data with the following service providers, each bound by their own privacy obligations:

  • Supabase (database hosting, Canada region) — stores your assessment data
  • AWS Bedrock / Anthropic (AI processing) — processes your data to generate reports
  • Stripe (payment processing) — processes your payment information
  • Vercel (web hosting) — serves the application

6. Data Retention

We retain your identifiable assessment data for 12 months from the date of completion. You may request deletion at any time (see “Your Rights” below). Upon deletion, all personal information (name, email, company name, website) is permanently removed. Anonymized, non-identifiable data (industry, company size, province, and assessment scores) may be retained for aggregate analytics and benchmarking purposes.

7. Your Rights Under PIPEDA

You have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Withdraw consent: Withdraw your consent for data processing at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Quebec Residents

If you reside in Quebec, your personal information is also protected under Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). You have additional rights including the right to data portability and the right to be informed of automated decision-making. Contact us for details.

9. Cookies

We use essential cookies required for the application to function (session management, authentication). We do not use tracking cookies or third-party advertising cookies.

Analytics

We use Vercel Analytics, a privacy-focused web analytics service provided by Vercel Inc., to understand how our platform is used. Vercel Analytics collects anonymized usage data such as page views, device type, and browser information. It does not use cookies for tracking and does not collect personally identifiable information. Data is processed in accordance with Vercel's privacy policy.

10. Children's Privacy

Our services are designed for business professionals and are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via the email address associated with your assessment. The “Last updated” date at the top reflects the most recent revision.

12. Contact Us

If you have questions about this privacy policy or our data practices, contact our Privacy Officer:

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.