Privacy Policy
Effective Date: July 1, 2025 · Setosys Technologies Inc. · British Columbia, Canada
This Privacy Policy describes how Setosys Technologies Inc. ("Setosys", "we", "us", or "our") collects, uses, and protects personal information when you visit setosys.com (the "Website"). We are committed to protecting your privacy in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, the European Union General Data Protection Regulation (GDPR).
1. Who We Are
Setosys Technologies Inc. is a platform engineering company headquartered in British Columbia, Canada. We build AI-powered systems and custom software for enterprise clients. Our servers are hosted on DigitalOcean infrastructure located in Toronto, Canada.
Data Controller Contact: privacy@setosys.com
2. Information We Collect
2.1 Information You Provide
When you interact with our Website, we may collect:
- Contact and inquiry information: your name, email address, and the content of messages submitted through our chat widget
- Engagement data: when you share your email through the chat widget, we receive a notification of that engagement and retain the email address for follow-up purposes
- Project information: details about your organization, technical environment, or business challenge that you voluntarily share when scoping an engagement
2.2 Information Collected Automatically
When you visit the Website, we automatically collect:
- Usage data via Google Analytics: pages visited, time on site, referring URLs, browser type, device type, and approximate geographic location
- IP addresses and session identifiers for security and analytics purposes
- Cookies and similar tracking technologies as described in Section 5
3. How We Use Your Information
We use the personal information we collect for the following purposes:
- To respond to your inquiries and follow up on potential engagements
- To understand how visitors use our Website and improve its content and performance
- To communicate information about our services that may be relevant to your needs
- To comply with legal obligations and protect our legitimate business interests
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
4. Legal Basis for Processing (GDPR)
For visitors located in the European Economic Area, our legal bases for processing personal information are:
- Legitimate interests: responding to business inquiries, improving our Website, and analytics
- Consent: for non-essential cookies and analytics tracking, where required
- Contractual necessity: processing information necessary to enter into or perform a client engagement
5. Cookies and Tracking
Our Website uses cookies and similar technologies:
- Google Analytics cookies to understand Website traffic and usage patterns. Google Analytics data is processed by Google LLC and may be transferred to the United States
- Session cookies required for the chat widget to function correctly
You may opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on. Most browsers also allow you to control cookies through browser settings.
6. Data Sharing and Third Parties
We share personal information only in the following circumstances:
- Service providers: we use Google Analytics (Google LLC) for website analytics, subject to Standard Contractual Clauses for international transfers
- AI chat infrastructure: our chat widget is powered by third-party AI services. Conversations may be processed by AI model providers subject to their data processing terms
- Legal requirements: we may disclose information if required by law, regulation, or valid legal process
- Business transfers: in the event of a merger or acquisition, personal information may be transferred to the successor entity
7. International Data Transfers
Our primary data is stored on servers in Toronto, Canada. Canada is recognized by the European Commission as providing adequate data protection. When we use third-party services such as Google Analytics, data may be transferred to and processed in the United States under Standard Contractual Clauses.
8. Data Retention
- Inquiry and chat data: retained for up to 24 months following last contact, or longer if an active client relationship exists
- Analytics data: Google Analytics data is retained for 26 months
- Email addresses collected through engagement notifications: retained until you request deletion or unsubscribe
9. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal information we hold about you
- Correction: request correction of inaccurate or incomplete information
- Deletion: request deletion of your personal information
- Objection: object to processing based on legitimate interests
- Portability: request your data in a machine-readable format (GDPR)
- Withdrawal of consent: where consent is the legal basis for processing
To exercise any of these rights, contact us at privacy@setosys.com. We will respond within 30 days. Canadian residents may also file a complaint with the Office of the Privacy Commissioner of Canada.
10. Security
We implement appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and regular security reviews. No transmission over the internet is completely secure.
11. Children's Privacy
Our Website is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at privacy@setosys.com and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. Material changes will be communicated by posting a notice on the Website. Your continued use of the Website after changes are posted constitutes acceptance of the updated Policy.
13. Contact Us
For privacy-related questions, requests, or complaints: