Last Updated: June 2, 2025
1. Scope
This policy governs all personal information collected, used, or disclosed by Arrio.NET (“we,” “us”) in Canada via our website (arrio.net), AI platforms, and business services.
2. Your Consent
By using our services, you consent to:
- Collection of information necessary to deliver AI solutions, improve products, and communicate with you.
- Transfers to trusted third-party service providers (e.g., cloud infrastructure).
3. Information We Collect
a) Business Contact Data
- Names, job titles, emails, phone numbers.
b) Technical & Usage Data - IP addresses, device IDs, cookies, analytics (via tools like Google Analytics).
c) Client Operational Data - Only when provided by you: Business data processed through our AI platforms (e.g., sales figures, workflow patterns). We anonymize this data for model training.
4. How We Use Information
| Purpose | Legal Basis |
|---|---|
| Delivering/maintaining AI solutions | Contractual necessity |
| Technical support & inquiries | Legitimate business interest |
| Improving algorithms | Consent (anonymized data only) |
| Compliance with Canadian laws | Legal obligation |
5. Sharing & Disclosure
We never sell personal data. Disclosures are limited to:
- Subprocessors essential to our services (e.g., AWS Canada, Microsoft Azure).
- Legal requirements (e.g., court orders under Canadian jurisdiction).
- Business transfers (if Arrio.NET is acquired).
6. Cross-Border Transfers
Data may be stored in Canada, the U.S., or other jurisdictions. We ensure protections via:
- PIPEDA-compliant contracts with processors.
- SCCs (Standard Contractual Clauses) where applicable.
7. Your Rights (Under Canadian Law)
You may:
✅ Access/Correct your personal information.
✅ Withdraw consent (excluding legal/contractual requirements).
✅ Request deletion of non-essential data.
✅ Opt out of marketing emails (via unsubscribe link).
Requests must be verified and may take 30 days.
8. Data Security & Retention
- Security: Encryption, access controls, and annual audits.
- Retention: Data is kept only as long as necessary for the purposes stated or to meet legal obligations (typically 7 years post-contract).
9. AI-Specific Disclosures
- Automated Decisions: Our AI tools may generate insights affecting business operations. You may request human review of significant automated decisions.
- Training Data: Client data used for model training is aggregated and de-identified.
10. Breach Notification
We will notify you and the Office of the Privacy Commissioner of Canada (OPC) within 72 hours if a breach poses real risk of harm, per PIPEDA.
11. Contact Us
Email: [email protected]
Complaints may be escalated to the OPC.
12. Updates
Policy changes will be posted here. Material changes require renewed consent.