Legal

Privacy Policy

Legal entity: Toccata Systems Inc.
Effective: November 22, 2025
Last updated: September 22, 2026

1Introduction

Toccata Systems Inc. ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our services, website, and products.

Our registered office is located in Saskatchewan, Canada, and we maintain operational headquarters in Saskatoon, SK.

Important: By using our services, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our services.

2Information We Collect

2.1Personal Information You Provide

We collect information that you voluntarily provide to us when you:

Create an Account: Name, email address, phone number, password (encrypted)
Make a Purchase: Billing and shipping addresses, payment information (processed by our payment processor Stripe)
Contact Us: Any information you provide in customer support inquiries
Subscribe to Communications: Email address and communication preferences

2.2Device Data

When you use a Canaro monitoring device, we automatically collect:

Temperature readings
Humidity levels
Air quality measurements (VOC levels)
Power status and outage information
Device health and connectivity status
Device serial number and firmware version
Cellular network information
Add-on sensor data (if applicable)

2.3Automatically Collected Information

We automatically collect certain information when you visit our website:

Usage Data: Pages visited, time spent, click patterns (via Umami Analytics and Mouseflow)
Device Information: Browser type, operating system, device identifiers
Location Information: General location based on IP address (country/city level only)
Cookies and Similar Technologies: See our Cookie Policy for details

2.4Information from Third Parties

We may receive information from:

Payment processors (transaction confirmations)
Analytics providers
Marketing partners (if you interact with our advertisements)

3Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide our monitoring services and fulfill our agreement with you
Legitimate Interests: Improving our services, preventing fraud, network security
Consent: Marketing communications, analytics cookies (where required)
Legal Obligations: Compliance with tax, accounting, and legal requirements

4How We Use Your Information

4.1Service Provision

Operating and maintaining your Canaro monitoring service
Processing and fulfilling orders
Sending critical service alerts and notifications
Providing customer support
Managing your account and subscriptions

4.2Communication

Sending transactional emails (order confirmations, alerts, service updates)
Responding to inquiries and support requests
Sending marketing communications (with your consent, where required)
Notifying you of important changes to our services or policies

4.3Improvement and Analytics

Analyzing usage patterns to improve our services
Conducting research and development
Testing new features and functionality
Understanding user preferences and behavior

4.4Legal and Security

Preventing fraud and unauthorized access
Complying with legal obligations
Enforcing our Terms and Conditions
Protecting our rights, property, and safety

5Data Sharing and Disclosure

5.1Third-Party Service Providers

We share limited data with trusted third parties who assist us in operating our business:

Stripe: Payment processing (subject to Stripe's Privacy Policy)
Umami Analytics: Anonymous website analytics
Mouseflow: Anonymous website behavior analysis
Email Service Providers: Transactional and marketing emails
Cloud Hosting Providers: Data storage and server infrastructure
Customer Support Tools: Managing support tickets and inquiries

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2Legal Requirements

We may disclose your information when required by law or in response to:

Valid legal process (subpoenas, court orders)
Government or regulatory requests
Protection of our legal rights
Prevention of fraud or illegal activity
Protection of safety of our users or the public

5.3Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information is transferred.

5.4With Your Consent

We may share your information for other purposes with your explicit consent.

Important: We do NOT sell, rent, or trade your personal information to third parties for their marketing purposes. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.

6International Data Transfers

We primarily serve customers in the United States and Canada. All data is processed and stored on servers located in Canada. If you are accessing our services from outside these countries, please be aware that your information may be transferred to, stored, and processed in Canada.

For users in the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place for any international transfers, including:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions by the European Commission
Other lawful transfer mechanisms under applicable data protection laws

7Data Security

We implement appropriate technical and organizational measures to protect your personal information:

Encryption: All device data is encrypted during transmission using industry-standard protocols (TLS 1.2+)
Password Protection: Passwords are hashed and encrypted using bcrypt
Access Controls: Strict internal access controls limit who can access your data
Secure Infrastructure: Regular security audits and monitoring
Employee Training: All employees receive data protection training

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

8Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific Retention Periods:

Account Information: For the duration of your active account
Device Data: For the duration of your active service, and up to 90 days after a device's service plan ends (see Terms & Conditions, Section 6.3)
Transaction Records: 7 years for tax and accounting purposes
Marketing Data: Until you unsubscribe or request deletion
Support Communications: 3 years after case closure

After account closure, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or accounting purposes.

9Your Privacy Rights

9.1General Rights (All Users)

You have the right to:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your personal data (subject to legal obligations)
Data Portability: Receive your data in a structured, machine-readable format
Opt-Out: Unsubscribe from marketing communications
Account Closure: Close your account at any time

9.2European Union / EEA Rights (GDPR)

If you are located in the EU/EEA, you have additional rights:

Right to Restrict Processing: Limit how we use your data
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
Right to Lodge a Complaint: File a complaint with your local data protection authority

9.3California Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

Know: Request disclosure of personal information we collect, use, and share
Delete: Request deletion of your personal information
Opt-Out of Sale: We do not sell personal information
Non-Discrimination: We will not discriminate against you for exercising your rights
Correct: Request correction of inaccurate personal information
Limit Use: Limit use and disclosure of sensitive personal information

9.4Canadian Rights (PIPEDA)

As a Canadian company, we comply with PIPEDA. You have the right to:

Access your personal information
Challenge the accuracy and completeness of your information
File a complaint with the Privacy Commissioner of Canada

9.5How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: support@canaro.ca
Subject Line: "Privacy Rights Request"

We will respond to your request within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

10Children's Privacy

Our services are not intended for children under 13 years of age (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

11Text Message Communications

By providing your mobile phone number, you consent to receive transactional text messages (SMS) from Canaro, including:

Critical device alerts (temperature, power outage, etc.)
Service notifications
Account security messages

Message and data rates may apply. You can opt out of non-critical messages at any time by replying STOP. However, you cannot opt out of critical alert messages while maintaining an active subscription, as these are essential to the service.

Text messaging originator opt-in data and consent will not be shared with any third parties for marketing or promotional purposes.

12Marketing Communications

We may send you marketing emails about our products, services, and promotions. You can opt out at any time by:

Clicking the "unsubscribe" link in any marketing email
Adjusting your email preferences in your account settings
Contacting us at support@canaro.ca

Please note that even if you opt out of marketing communications, we will still send you transactional emails related to your account and service.

13Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website. For detailed information, please see our Cookie Policy.

14Do Not Track Signals

Some browsers have a "Do Not Track" feature. Because there is no common understanding of how to interpret Do Not Track signals, our website does not currently respond to browser Do Not Track signals.

15Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. Notification will be made without undue delay and, where feasible, within 72 hours of becoming aware of the breach.

16Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review the privacy policies of any third-party sites you visit.

17Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Posting the updated policy on our website with a new "Last Updated" date
Sending an email notification to your registered email address
Displaying a prominent notice on our website or in our service

Your continued use of our services after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

18Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Toccata Systems Inc.
Email: support@canaro.ca
Attention: Privacy Officer
Address: 350 103rd St E #101, Saskatoon, SK S7N 1Z1, Canada

For EU/EEA data protection inquiries, you may also contact your local data protection authority.

19Accessibility

We are committed to ensuring this Privacy Policy is accessible to all users. If you need this policy in an alternative format, please contact us at support@canaro.ca.

Terms & Conditions

Legal entity: Toccata Systems Inc.
Effective: November 22, 2025
Last updated: September 22, 2026

IMPORTANT: PLEASE READ THESE TERMS CAREFULLY BEFORE USING OUR SERVICES. BY CREATING AN ACCOUNT, PURCHASING OUR PRODUCTS, OR USING OUR SERVICES, YOU AGREE TO BE BOUND BY THESE TERMS. IF YOU DO NOT AGREE, DO NOT USE OUR SERVICES.

1Agreement to Terms

These Terms and Conditions ("Terms") constitute a legally binding agreement between you ("User," "you," or "your") and Toccata Systems Inc. ("Toccata," "Company," "we," "us," or "our") governing your access to and use of our website, products, and services.

By accessing our website, creating an account, purchasing our products, or using our monitoring services, you represent that:

You are at least 18 years of age
You have the legal capacity to enter into a binding contract
You will comply with all terms and conditions set forth herein
All information you provide is accurate and truthful

2Company Information

Legal Entity: Toccata Systems Inc.
Operating Name: Toccata
Brand / Product Line: Canaro
Jurisdiction of Incorporation: Saskatchewan, Canada
Operational Headquarters: 350 103rd St E #101, Saskatoon, SK S7N 1Z1, Canada

Toccata is a fully Canadian-owned company. Our operations are conducted in Saskatoon, Saskatchewan, Canada.

3Services Description

Canaro is a remote monitoring service: connected devices report conditions at your property, and our platform stores those readings, shows them to you, and alerts you when they need attention.

The devices, features, sensors, connectivity options and plans available to you are those described on our website and in your plan at the time you purchase or renew. We may add, change or retire features, devices and plans over time; where a change materially reduces a service you have already paid for, we will notify you in advance.

4Account Terms

4.1Account Creation and Security

You must provide accurate, complete, and current information during registration
You are responsible for maintaining the confidentiality of your account credentials
You are responsible for all activities that occur under your account
You must immediately notify us of any unauthorized access or security breach
We reserve the right to refuse service or terminate accounts at our discretion

4.2Account Sharing

You may share account access with trusted individuals (e.g., family members, property managers). However, you remain responsible for all actions taken under your account. We recommend using strong passwords and limiting access to trusted persons only.

4.3Account Termination

You may close your account at any time by contacting support@canaro.ca. Upon account closure:

Your devices will cease reporting data
You will no longer receive alerts
Your data will be retained for 30 days, then deleted
No refunds will be provided for unused subscription time (except as specified in Section 7)

We may terminate or suspend your account immediately, without notice, for:

Violation of these Terms
Fraudulent activity
Non-payment
Abuse of our services or staff
Any conduct we deem harmful to our business or other users

5Service Area and Coverage

5.1Geographic Coverage

Canaro devices operate where the networks supported by your device and plan provide coverage. Current coverage and supported networks are described on our website and may change as our network partners change their coverage.

5.2Coverage Limitations

Service requires adequate cellular signal from supported carriers. You acknowledge that cellular signal strength may fluctuate due to factors beyond our control.

Important: We are unable to provide refunds or cancel remaining subscription terms for coverage issues that arise after the initial 30-day period due to changing environmental conditions (e.g., seasonal foliage) or carrier network changes.

6Payment Terms

6.1Pricing

Prices for devices, plans and add-ons are those shown on our website or at checkout at the time of your purchase, in Canadian Dollars (CAD) unless stated otherwise
Prices may change. A change never applies to a term you have already paid for; it applies from your next renewal, as described in Section 6.2
Enterprise pricing is quoted separately and governed by the quote or agreement you accept

6.2Automatic Renewal

Subscriptions renew automatically at the end of each term (monthly, annual, or 3-year) at the then-current price of your plan, or of a plan change you scheduled, charged to the payment method on file.

For annual and 3-year terms we send renewal reminders 30 and 14 days before renewal, stating the date and amount.
You can pause renewal at any time from your dashboard. Service continues to the end of the paid term and then stops; stored data is handled per Section 6.3.
If a renewal payment fails, we retry for up to 7 days and notify you. If it cannot be collected, service ends and Section 6.3 applies.
A device paused from your dashboard is never renewed while paused. Unpausing after its term has ended renews it at that moment.

6.3End of Service and Data Retention

When a device's service plan ends (expiry without renewal, cancellation, or non-payment), the device stops storing new readings and its paid network connections are suspended.

If your account has other active paid services, the device's stored history is retained under your account's normal retention terms.
Otherwise, we retain the device's stored history for 90 days from the end of service. We will notify you by email before any deletion and provide a way to export your data.
Renewing service at any time before deletion preserves your data and resumes service.
Aggregate billing and usage records are retained as required for accounting purposes.

Pausing a device through your dashboard is not an end of service and does not affect stored data.

7Refund and Return Policy

7.130-Day Money-Back Guarantee

We offer a 30-day money-back guarantee from the date of purchase, subject to the following conditions:

Eligibility: Available to all first-time purchasers
Full Refund Includes: Device fee + subscription fee
Device Condition: Device must be returned in resaleable condition
Return Shipping: Customer is responsible for return shipping costs unless waived at our discretion

8Device Warranty

8.1Limited Warranty

Canaro devices are covered by a limited 12-month warranty from the date of purchase. For as long as the associated subscription remains active without interruption, the warranty period extends automatically, up to a maximum of 3 years from the date of purchase. The warranty covers:

Manufacturing defects
Hardware malfunctions under normal use
Defective components
Firmware issues preventing normal operation

8.2Warranty Exclusions

The warranty does NOT cover:

Damage from misuse, abuse, or improper installation
Use outside the environments or operating conditions stated in the product documentation
Battery damage, swelling or failure resulting from any of the conditions described in Section 9.3
Unauthorized modifications or repairs
Water damage or liquid ingress
Physical damage, drops, or impact

9Device Usage and Specifications

9.1Intended Use

Use Canaro devices only for environmental monitoring, and only in the environments and within the operating conditions (such as temperature, humidity and power) stated in the device's product documentation.

9.2SIM Card Restrictions

The SIM card embedded in your Canaro device is the property of Toccata Systems Inc. You agree NOT to remove the SIM card or use it in any other device.

9.3Lithium-Ion Batteries

Canaro devices may contain lithium-ion batteries. A lithium-ion battery can swell, leak, overheat or catch fire if it is damaged, modified, or used, charged or stored outside the conditions it was designed for. You are responsible for:

Using, charging and storing devices only as described in the product documentation, and powering them only with the supplied adapter or one we approve
Keeping devices away from sources of heat, direct flame and moisture, and within the operating and storage temperatures stated in the product documentation
Not dropping, crushing, puncturing, opening or modifying a device, and not replacing or repairing its battery yourself
Inspecting devices at least every six months for signs of battery damage, including swelling, a bulging or cracked case, leaking, unusual heat or an unusual smell
Stopping use of a device immediately, disconnecting it from power, and contacting us at support@canaro.ca if you notice any of those signs; a damaged battery must not be shipped until we have told you how to return it safely
Disposing of devices and batteries through a battery or electronics recycling program, not household waste

To the maximum extent permitted by applicable law, we are not liable for any loss, damage, injury or fire arising from a battery that has been damaged, misused, modified, repaired by anyone other than us, used, charged or stored outside the conditions stated in the product documentation, or kept in use after showing the signs of damage described above. Nothing in this section excludes or limits any liability that cannot be excluded or limited under applicable law.

10Limitation of Liability

IMPORTANT - PLEASE READ CAREFULLY

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR:

Service interruptions or outages due to cellular network issues
Property damage, including frozen pipes, mold, fire, or flooding
Consequential, indirect, incidental, special, or punitive damages
Loss of profits, revenue, data, or use

Monitoring Devices - Not Insurance

IMPORTANT: Canaro devices are monitoring and alerting tools only. They are NOT a substitute for property insurance or a guarantee against property damage.

Maximum Liability Cap

IN NO EVENT SHALL OUR TOTAL LIABILITY TO YOU EXCEED THE AMOUNT YOU PAID FOR THE DEVICE AND ONE YEAR OF SUBSCRIPTION FEES, OR $500 CAD, WHICHEVER IS LESS.

11Dispute Resolution and Arbitration

IMPORTANT - ARBITRATION AGREEMENT AND CLASS ACTION WAIVER

Binding Arbitration

Any dispute arising out of or relating to these Terms or our services will be resolved through binding arbitration under the Arbitration Rules of the ADR Institute of Canada, conducted in Saskatchewan, Canada.

Class Action Waiver

YOU AND CANARO AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY, AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, REPRESENTATIVE, OR COLLECTIVE PROCEEDING.

12Governing Law and Jurisdiction

These Terms are governed by and construed in accordance with the laws of Saskatchewan, Canada, without regard to conflict of law principles.

13Contact Information

For questions, concerns, or notices regarding these Terms, please contact us:

Toccata Systems Inc.
Email: support@canaro.ca
Subject Line: "Terms of Service Inquiry"
Address: 350 103rd St E #101, Saskatoon, SK S7N 1Z1, Canada

14Acknowledgment

BY CLICKING "I AGREE," CREATING AN ACCOUNT, MAKING A PURCHASE, OR USING OUR SERVICES, YOU ACKNOWLEDGE THAT:

You have read and understood these Terms
You agree to be bound by these Terms
You are of legal age to enter into a binding contract
You have the authority to accept these Terms

Cookie Policy

Legal entity: Toccata Systems Inc.
Effective: November 22, 2025
Last updated: November 22, 2025

1What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work more efficiently and provide information to website owners.

2How We Use Cookies

We use cookies and similar tracking technologies on our website for the following purposes:

2.1Essential Cookies

These cookies are necessary for our website to function properly:

Session Management: Keep you logged in as you navigate
Security: Detect and prevent security threats
Authentication: Verify your identity

Legal Basis: These cookies are necessary for contract performance and cannot be disabled.

2.2Analytics Cookies

We use analytics to understand how visitors interact with our website:

Umami Analytics: Privacy-focused analytics on landing pages only (anonymous data)
Mouseflow: Behavior analysis on landing pages (anonymous heatmaps and recordings)

Data Collected: Page views, click patterns, time on site, device type (all anonymized)

Legal Basis: Legitimate interest in improving our website

2.3Advertising Cookies

We use cookies to deliver and measure advertising:

Facebook Pixel: Track conversions and deliver targeted ads
Google Ads: Measure ad performance and conversions
Microsoft Clarity: Session recordings and analytics

Legal Basis: Consent (where required by law)

2.4Performance Cookies

These cookies help us understand and improve website performance:

Load times and page performance metrics
Error detection and troubleshooting
Server optimization

3Third-Party Cookies

Our website may include cookies from third parties:

Stripe: Payment processing (session cookies only)
Social Media Platforms: Social sharing features
Content Delivery Networks: Faster content delivery

These third parties have their own privacy and cookie policies. We do not control their cookies.

4Cookie Duration

Session Cookies: Deleted when you close your browser
Persistent Cookies: Remain on your device for a set period (typically 1-24 months) or until manually deleted

5Managing Cookies

5.1Browser Controls

Most browsers allow you to control cookies through their settings:

Block all cookies
Block third-party cookies only
Delete cookies after each session
Accept all cookies (default)

5.2Opt-Out Options

You can opt out of specific tracking:

Google Ads: adssettings.google.com
Facebook Ads: facebook.com/settings?tab=ads
General Opt-Out: optout.aboutads.info

5.3Impact of Blocking Cookies

If you block or delete cookies:

Some website features may not function properly
You may need to re-enter information more frequently
Personalization features may not work
Essential cookies cannot be disabled without affecting site functionality

6Other Tracking Technologies

In addition to cookies, we may use:

Web Beacons: Small graphic images to track page views and email opens
Local Storage: HTML5 local storage for session management
Device Fingerprinting: Collecting device characteristics for security purposes

7Updates to This Policy

We may update this Cookie Policy to reflect changes in technology, law, or our practices. We will notify you of material changes by updating the "Last Updated" date and, where required, seeking your consent.

8Contact Us

For questions about our use of cookies, contact us at:

Email: support@canaro.ca
Subject: Cookie Policy Inquiry

Your Cart