Privacy commitments

Canadian data residency

All customer data (accounts, telemetry, billing, backups) is stored and processed in Canada.

Production in Canada Production workloads, the primary database, and all replicas run inside Canada.
Canadian backups Encrypted snapshots stay inside Canadian regions. There is no cross-border replication of customer data.
No exports without consent Sensor data, account data, and operational data stay within the platform unless you explicitly export them.
Region lock An organization-level policy denies any infrastructure call that would create resources outside Canadian regions.

Our commitments

What we will, and won't, do with your data.

We never sell customer data Not to advertisers, not to data brokers, not to partners. Ever.
Your data is yours You retain ownership of your data. You can export or delete it at any time, subject to your contract.
Aggregated analytics only We use anonymised, aggregated metrics to improve the product. No personal information is shared with analytics providers without consent.
Marketing is opt-in Marketing communications require explicit consent and offer one-click unsubscribe in every message.

Data handling & retention

How long we keep what you give us, and how we get rid of it.

Customer operational data Sensor and application data is retained for the duration of the contract plus 90 days, unless a longer period is contractually required.
Security logs Security and audit logs retained for at least 12 months.
Employee records Retained for the duration of employment plus seven years per Canadian legal requirements.
Financial records Retained per Canadian tax and corporate law (minimum seven years).
Secure disposal Digital media is wiped per NIST 800-88 guidelines. Media that cannot be wiped is physically destroyed. Cloud resources are deleted with their encryption keys destroyed.

Your rights & controls

How to access, correct, export, or delete your data.

Access Request a copy of the personal information we hold by emailing privacy@canaro.ca.
Correction Update inaccurate personal information directly in your dashboard or by request.
Export Operational data is available via the API. Bulk export is available on request, subject to contract terms.
Deletion Account deletion removes your personal data within 30 days of confirmation, except where retained data is legally required.
Cookie controls Cookie preferences are managed in the website footer; only essential cookies are set without consent.

Have a security questionnaire?

We're happy to walk enterprise prospects through our controls, share a security overview, or complete a vendor assessment.

Contact security Talk to sales

Canaro has not yet publicly launched. This Trust Centre reflects our current, reasonable expectations for the platform based on ongoing development and our policies, and its contents are subject to change without notice prior to public release.

Your Cart

Canadian data residency

Our commitments

Data handling & retention

Your rights & controls

Have a security questionnaire?

Contact Us