Privacy and data protection.
How we collect, use, protect, and retain your information. Transparency is a core value at Orchestrator, and this policy explains our practices in plain terms.
Your privacy and the security of your data are fundamental to how we operate.
This policy outlines what information Orchestrator AI Systems Ltd. ("Orchestrator") collects, how we use and protect it, and the choices you have. We collect the minimum necessary, never sell personal data, and design for privacy by default.
On compliance: Orchestrator is currently pursuing SOC 2 and aligns its controls to that framework. We handle personal information in line with applicable Canadian privacy law, including Alberta's Personal Information Protection Act (PIPA) and the federal PIPEDA.
The information we gather
Consultation Requests
When you schedule a consultation, we collect:
- First and last name
- Email address
- Your automation goals and transformation objectives
Website Usage Analytics
We collect minimal, privacy-focused usage data to improve our services:
- Pages visited and time spent
- Referral sources
- General location (country or region only)
- Device type and browser
Aggregated and anonymized. No cross-site tracking.
What your information is for
Communication
Respond to consultation requests and provide information about our services.
Service Delivery
Coordinate meetings and deliver AI consulting services tailored to your needs.
- ✓Encryption in transit (TLS)
- ✓Encryption at rest
- ✓Access controls and authentication
- ✓Periodic security review
- ✓Least-privilege access
- ✓Minimal data collection
- ✓Logical separation of customer data
- ✓No selling of personal data
We use carefully selected providers to operate our services, such as our email delivery provider for consultation confirmations. Providers that process personal data are reviewed before use and tracked through our vendor management process.
We do not sell your personal data, and we do not share it except as needed to deliver our services or as required by law.
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data
- Request a copy of your data
- Withdraw consent or opt out of communications
You may also contact the Office of the Privacy Commissioner of Canada with a concern. To exercise any right, email contact@orchestrator.ca.
How long we keep it
Consultation Requests
Retained for 2 years or until you request deletion.
Project Data
Deleted within 30 days after project completion, unless otherwise agreed.
Website Analytics
Anonymized and aggregated, retained for up to 13 months.
We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will update the effective date above and, where appropriate, notify affected customers.
This page is a summary of our practices, not a contract. Specific commitments are governed by the applicable agreement between Orchestrator and the customer.
Questions about your privacy?
For privacy questions or to exercise any of your rights, email contact@orchestrator.ca. We are here to help.