Information We Collect

We collect information that you provide directly and data generated through your use of our platform. The type of data depends on how you engage with our services.

Personal Information You Provide

• Contact details including name, email address, phone number, and mailing address
• Account credentials such as username and encrypted password information
• Financial data related to your budget analysis needs and organizational information
• Communication records when you reach out to our support team or participate in surveys
• Payment information processed through secure third-party payment processors

Automatically Collected Information

• Device information including IP address, browser type, and operating system
• Usage data such as pages visited, features accessed, and time spent on platform
• Technical data like error reports and performance metrics to improve service quality
• Cookie data and similar tracking technologies to enhance user experience

How We Use Your Information

Your data helps us deliver effective budget deviation analysis services and maintain platform functionality. We don't sell your personal information to third parties.

Data Sharing and Disclosure

We share your information only when necessary to provide services or meet legal obligations. Here's how that works in practice.

Service Providers

We work with carefully selected third-party companies that help us operate our platform. These include hosting providers, payment processors, and analytics services. All providers are contractually required to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose information when required by Canadian law, court orders, or government regulations. This includes responding to subpoenas or protecting the rights and safety of Atmosprx, our users, or others.

Business Transfers

If Atmosprx undergoes a merger, acquisition, or sale of assets, your personal information may be transferred as part of that transaction. We'll notify you before your data becomes subject to a different privacy policy.

Your Privacy Rights Under Canadian Law

PIPEDA grants you specific rights regarding your personal information. You can exercise these rights by contacting us directly.

• Access: Request a copy of the personal information we hold about you
• Correction: Update inaccurate or incomplete information in your account
• Deletion: Request removal of your personal data, subject to legal retention requirements
• Withdrawal of Consent: Revoke permission for certain data processing activities
• Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe we've mishandled your data

To exercise any of these rights, send a detailed request to info@atmosprx.com. We'll respond within 30 days and may need to verify your identity before processing certain requests.

Data Security Measures

We implement technical and organizational safeguards to protect your information from unauthorized access, loss, or misuse.

Technical Protection

• Industry-standard encryption for data transmission and storage
• Regular security audits and vulnerability assessments
• Secure authentication protocols and access controls
• Automated backup systems to prevent data loss

Administrative Safeguards

• Employee training on privacy practices and data handling
• Limited access to personal information based on job requirements
• Confidentiality agreements with all staff and contractors
• Incident response procedures for potential security breaches

While we take reasonable precautions, no system is completely secure. You should also protect your account credentials and notify us immediately if you suspect unauthorized access.

Data Retention and Deletion

We keep your personal information only as long as necessary to fulfill the purposes outlined in this policy or meet legal obligations.

Retention Periods

Active account data is retained while you maintain a relationship with Atmosprx. After account closure, we keep certain information for up to seven years to comply with financial record-keeping requirements under Canadian tax law. Usage analytics and aggregated data may be retained indefinitely in de-identified form.

Deletion Process

When you request account deletion, we remove or anonymize your personal information within 30 days, except where legal retention is required. Some data in backup systems may persist for up to 90 days before permanent deletion occurs.

Cookies and Tracking Technologies

Our platform uses cookies and similar technologies to enhance functionality and understand user behavior. You can control cookie preferences through your browser settings.

Types of Cookies We Use

• Essential Cookies: Required for basic platform functionality and security
• Performance Cookies: Help us analyze usage patterns and improve service quality
• Preference Cookies: Remember your settings and customization choices

Disabling cookies may limit certain features, but you'll still be able to access core services. We don't use cookies for third-party advertising purposes.

International Data Transfers

Your data is primarily stored and processed on servers located in Canada. Some of our service providers operate from outside Canada, which means your information may be transferred to and stored in other jurisdictions.

When we transfer data internationally, we ensure adequate protection through contractual safeguards and select providers in countries with privacy laws comparable to Canadian standards. You have the right to request information about where your data is stored and how it's protected.

Children's Privacy

Atmosprx services are designed for business and organizational use by adults. We don't knowingly collect personal information from individuals under 18 years of age. If we discover that we've inadvertently gathered data from a minor, we'll delete it promptly.

Changes to This Privacy Policy

We update this policy periodically to reflect changes in our practices or legal requirements. When we make significant modifications, we'll notify you via email or through a prominent notice on our platform at least 30 days before the changes take effect.

The "Effective Date" at the top of this document indicates when the current version was last revised. We encourage you to review this policy periodically to stay informed about how we protect your information.