Privacy Policy

1. Who we are

Tracer Research Security inc. ("Tracer," "we," "us," or "our") is a Canadian company operating the website tracersecurity.ca.

Our Privacy Officer can be reached at: privacy@tracersecurity.ca

2. Scope of this policy

This policy applies to visitors to tracersecurity.ca and to people who submit a waitlist, early access, or contact form through our website.

It does not apply to third-party websites or services that we do not operate.

3. What personal information we collect

4. How we use personal information

We use the personal information we collect to:

• Respond to inquiries and manage early access requests
• Send waitlist, launch, and product update emails where you have consented to receive them
• Operate, secure, debug, and monitor our website
• Measure aggregate website usage after analytics consent
• Comply with our legal obligations

We do not sell personal information. We do not use website analytics for advertising, remarketing, or user-level sales profiling.

5. Legal basis for processing

Depending on the context, we process personal information on the following bases:

• Consent — waitlist and product update communications, and optional analytics cookies or similar technologies
• Legitimate interest — operating, securing, debugging, and improving the website
• Legal obligation — compliance with applicable law

You can withdraw analytics consent at any time using the Privacy preferences link in the footer. You can unsubscribe from waitlist and product update emails by following the unsubscribe instructions in our emails or by contacting privacy@tracersecurity.ca.

6. Service providers and transfers

We use a limited number of service providers to operate the website and manage communications. These currently include Vercel for website hosting, security, logs, and Vercel Web Analytics; Google Analytics 4 for optional website analytics; and Resend for waitlist and email communications.

These providers may process information outside your province or outside Canada, including in the United States or other countries where they or their subprocessors operate. When we use service providers, we rely on contractual, technical, and organizational safeguards appropriate to the nature of the information and the service.

7. When we share information

We do not share personal information with third parties except in the following circumstances:

• Service providers — to operate the website, process waitlist submissions, send emails, provide analytics after consent, and maintain security
• Legal requirements — we may disclose information when required by law, court order, or government authority
• Business transfers — in the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to equivalent privacy protections

We do not share personal information with advertisers or data brokers.

8. Analytics cookies

We load optional analytics tools only after you accept analytics in the website privacy preferences. Our optional analytics tools are Google Analytics 4 and Vercel Web Analytics.

Analytics help us understand aggregate website usage, including pages visited, approximate region, device and browser information, referrer, and session activity. We do not currently use analytics tools for advertising, remarketing, or user-level sales profiling. If you reject analytics, these analytics tools are not loaded and analytics cookies are removed when possible.

9. Data retention

We retain personal information only as long as necessary for the purposes for which it was collected:

• Early access and contact inquiries: 24 months from last contact, or until you request deletion
• Email consent and unsubscribe records: as long as necessary to document consent and honour unsubscribe requests
• Website and security logs: up to 90 days unless a longer period is needed for security, debugging, legal, or compliance reasons
• Analytics records: according to our analytics provider settings; aggregate reports may be retained longer because they do not identify individual visitors

10. Your rights

If you are a Quebec resident, you have the following rights under Law 25:

• Right of access — to request a copy of the personal information we hold about you
• Right of rectification — to correct inaccurate or incomplete information
• Right of erasure or de-identification — to request deletion of your information where we have no legal basis to retain it
• Right of portability — to receive your information in a structured, commonly used format
• Right to object to automated decision-making — to request human review of any decision made exclusively through automated processing

To exercise these rights, contact our Privacy Officer at privacy@tracersecurity.ca. We will respond within 30 days.

11. Security

We implement security measures appropriate to the sensitivity of the information we hold, including:

• Encryption of personal information in transit (TLS) and at rest
• Role-based access controls limiting access to authorized personnel
• Administrative access limited to personnel who need it
• Security monitoring and provider safeguards for website infrastructure

12. Breach notification

In the event of a confidentiality incident involving personal information that presents a risk of serious harm, we will notify affected individuals and the Commission d'accès à l'information du Québec (CAI) as soon as reasonably possible following discovery of the incident. We maintain a register of all security incidents as required by Law 25.

13. Cookies and tracking controls

Our website uses essential cookies and local storage necessary for site preferences and functionality. Your analytics preference is saved in your browser so we can remember your choice. You can change your analytics preference at any time through the Privacy preferences link in the footer.

14. Changes to this policy

We may update this policy from time to time. We will post the updated policy on our website with a revised date. Where required by law, we will provide additional notice of material changes.

15. Contact

For any privacy-related questions or to exercise your rights:

Privacy Officer, Tracer Research Security inc. privacy@tracersecurity.ca tracersecurity.ca