Privacy Policy

We are responsible for the personal information under our control. Questions or concerns about our privacy practices can be directed to privacy@northy.ca.

We collect the following personal information:

• Email address (via the waitlist signup form) for the purpose of sending product launch notifications.
• IP address (automatically collected during signup) for the purpose of rate limiting and abuse prevention. Retained for 30 days, then deleted.

We use Umami for website analytics, which is cookie-free and does not collect any personally identifiable information. We track page interactions such as calculator usage, tab selections, and sorting preferences to understand feature usage. No personal data is included in these analytics events.

We collect personal information solely for the purposes identified at or before the time of collection:

• Email: to send product launch notifications and updates you requested
• IP address: to prevent abuse through rate limiting

We obtain your consent through a double opt-in process. When you submit your email, we send a confirmation email. Your subscription is only activated after you click the confirmation link, providing meaningful and explicit consent.

We only collect information that is necessary for the identified purposes. We do not collect names, phone numbers, physical addresses, or any other personal data beyond what is listed above.

Your personal information will not be used or disclosed for purposes other than:

• Sending the notifications you subscribed to
• Preventing abuse of our services

IP addresses are automatically deleted after 30 days. Email addresses are retained until you unsubscribe.

We keep your information as accurate as necessary for the purposes for which it is used. You may update your email preferences at any time through the unsubscribe link in our emails.

We protect your information with measures appropriate to the sensitivity of the data:

• Data is stored in Supabase (PostgreSQL) with row-level security enabled
• All connections use TLS encryption in transit
• Database access requires authenticated service keys
• We conduct regular reviews of our security practices

We share personal information with the following service providers:

• Resend (email delivery): receives your email address to deliver notifications on our behalf
• Supabase (database hosting): stores your email and IP address on servers in Canada (Canada Central region)

These providers are bound by their own privacy commitments and only process data as directed by us.

This privacy policy is publicly available at northy.ca/privacy. We will update this policy as our practices change and notify subscribers of material changes via email.

Under PIPEDA, you have the right to:

• Know what personal information we hold about you
• Request correction of inaccurate information
• Withdraw your consent (unsubscribe) at any time
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at privacy@northy.ca.

If you believe we are not complying with this policy or with PIPEDA, you may contact us at privacy@northy.ca. We will investigate all complaints and respond within 30 days. You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.