Privacy Policy

Last Updated: October 2025

VitaIQ | Law | Monitor ("VitaLaw Monitor," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our FINTRAC compliance monitoring service ("Service").

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable Canadian privacy laws.

1. Information We Collect

1.1 Information You Provide:

Account Information: Name, email address, company name, business address, phone number
Payment Information: Credit card details, billing address (processed securely by our payment processor)
Industry Preferences: Industry sector selection for targeted enforcement monitoring
Communications: Messages, support requests, and feedback you send us

1.2 Information We Collect Automatically:

Usage Data: IP address, browser type, device information, pages visited, time spent on pages
Cookies and Tracking: Session cookies, preference cookies, analytics cookies (see Section 7)
Log Data: Server logs, error reports, performance metrics

1.3 Information We Collect From Third Parties:

FINTRAC Data: We collect publicly available FINTRAC penalty data, enforcement actions, guidance documents, and regulatory updates from official Canadian government sources
Public Records: We may collect publicly available enforcement information from Canada Gazette and other official regulatory publications

2. How We Use Your Information

We use your personal information for the following purposes:

Provide the Service: To monitor FINTRAC enforcement actions, analyze regulatory trends, generate industry intelligence reports, and send email alerts
Account Management: To create and manage your account, process payments, and provide customer support
Communication: To send service-related emails (alerts, updates, billing notifications) and respond to your inquiries
Improvement: To analyze usage patterns, improve our Service, and develop new features
Security: To detect and prevent fraud, abuse, and security incidents
Legal Compliance: To comply with legal obligations and enforce our Terms of Service
Marketing: With your consent, to send promotional emails about new features or services (you can opt out anytime)

3. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers: We share data with trusted third-party service providers who help us operate the Service:

Hosting: Railway (PostgreSQL database hosting)
Email: SendGrid (email delivery)
Payment Processing: Paddle or Stripe (payment processing - they have their own privacy policies)
AI Analysis: Google (Gemini AI API, PageSpeed Insights, Safe Browsing API)
Automation: n8n (workflow automation platform, self-hosted)

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

3.2 Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

Comply with legal obligations
Protect our rights, property, or safety
Prevent fraud or illegal activity
Respond to law enforcement requests

3.3 Business Transfers: If VitaIQ is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

3.4 Aggregated Data: We may share anonymized, aggregated data that does not identify you personally (e.g., "80% of our users improved their compliance scores").

4. Data Retention

We retain your personal information for as long as necessary to provide the Service and comply with legal obligations:

Active Accounts: We retain your data while your account is active
Canceled Accounts: We retain data for 90 days after cancellation to allow for reactivation, then delete it unless legally required to retain it longer
Compliance Scans: Historical compliance scan data is retained for 2 years for audit purposes
Financial Records: Billing and payment records are retained for 7 years as required by Canadian tax law

You can request deletion of your data at any time by contacting us (see Section 10).

5. Data Security

We implement industry-standard security measures to protect your personal information:

Encryption: Data is encrypted in transit (TLS/SSL) and at rest (AES-256)
Access Controls: Strict access controls limit who can access your data
Secure Infrastructure: Our servers and databases are hosted in secure, SOC 2 compliant facilities
Regular Audits: We conduct regular security audits and vulnerability assessments
Employee Training: Our team is trained on data protection and privacy best practices

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Privacy Rights (PIPEDA)

Under Canadian privacy law (PIPEDA), you have the following rights regarding your personal information:

Right to Access: Request a copy of the personal information we hold about you
Right to Correction: Request correction of inaccurate or incomplete information
Right to Deletion: Request deletion of your personal information (subject to legal retention requirements)
Right to Withdraw Consent: Withdraw consent for marketing communications or optional data processing
Right to Object: Object to certain types of data processing
Right to Data Portability: Request your data in a portable format

To exercise these rights, contact us at privacy@vitaiq.ca. We will respond within 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

7.1 Types of Cookies We Use:

Essential Cookies: Required for the Service to function (e.g., session management, authentication)
Preference Cookies: Remember your settings and preferences
Analytics Cookies: Help us understand how users interact with our Service (Google Analytics)
Marketing Cookies: (With consent) Track conversions and measure ad effectiveness

7.2 Managing Cookies: You can control cookies through your browser settings. However, disabling essential cookies may affect Service functionality.

7.3 Do Not Track: We currently do not respond to "Do Not Track" signals, but you can use browser privacy settings to limit tracking.

8. Third-Party Links

Our Service may contain links to third-party websites (e.g., FINTRAC.ca). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

9. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it immediately.

10. International Data Transfers

Your data is primarily stored in Canada. However, some of our service providers (e.g., Google, SendGrid) may process data in the United States or other countries. When we transfer data internationally, we ensure appropriate safeguards are in place (e.g., standard contractual clauses, Privacy Shield certification).

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website at least 30 days before changes take effect. Your continued use of the Service after changes become effective constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

VitaIQ | Law | Monitor
1110 Finch Ave W
Toronto, ON
Privacy Officer:
Email: privacy@vitaiq.ca
Support: support@vitaiq.ca
Website: https://vitalaw.app

13. Complaints

If you believe we have violated your privacy rights or Canadian privacy laws, you may file a complaint with:

Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Quebec K1A 1H3
Phone: 1-800-282-1376
Website: www.priv.gc.ca

Summary of Key Points

What we collect: Account info, payment info, website URLs, usage data
How we use it: To provide compliance monitoring, send alerts, improve the Service
Who we share with: Service providers (Railway, SendGrid, Google, Paddle/Stripe), legal authorities when required
Your rights: Access, correction, deletion, portability under PIPEDA
Security: Encryption, access controls, SOC 2 compliant hosting
Contact: privacy@vitaiq.ca

By using VitaLaw Monitor, you acknowledge that you have read, understood, and agree to this Privacy Policy.