Version 1.0 · Effective 2026-07-01 · Last updated 2026-07-25
CipherX collects the information you submit through the Business Startup Builder application to review your request, prepare a proposal, and communicate with you about your project. We also collect limited technical information to keep the site working and, with your consent, to measure and improve our services. We do not sell your personal information. You can ask us to access, correct, or delete your information at any time.
This Privacy Policy describes how CipherX Solutions Inc. (“CipherX,” “we,” “us”) collects, uses, discloses, and protects personal information when you use the CipherX Business Startup Builder (the “Application”) and related services. It applies to visitors, applicants, and prospective clients in Canada.
This policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws including, where relevant, Ontario's private-sector requirements. It should be read together with our Terms of Use and Cookie Policy.
IMPORTANT: While this policy reflects current Canadian privacy requirements, it has not yet been reviewed by qualified Canadian legal counsel. It is provided for implementation purposes only and must be reviewed before production publication.
CipherX Solutions Inc. is responsible for the personal information under its control and has designated a Privacy Officer to oversee compliance with this policy and applicable privacy laws.
Contact information for the Privacy Officer appears in the Contact Information section of this policy.
We collect information in three broad categories: information you provide directly, information collected automatically through your use of the Application, and information received from advertising and analytics platforms.
When you complete the Business Startup Builder application, you may provide:
Required fields are necessary to process your application request. If you choose not to provide required information, we may be unable to review your application or respond to your inquiry. Optional fields help us prepare a more relevant proposal but are not required to submit.
When you visit the Application, we automatically collect:
This information is collected through server logs, local storage, and secure session management.
We use first-party campaign-attribution technology to understand which marketing channels bring visitors to the Application. When you arrive through a campaign link, we store the referring source, medium, and campaign parameters in local storage and associate them with an anonymous session identifier.
With your advertising consent, Google Ads and similar platforms may set additional identifiers for conversion measurement. When advertising consent is not granted, those identifiers are not set, and measurement relies on first-party data only. See our Cookie Policy for details.
We may receive limited information from service providers that support the Application, including hosting, database, analytics, and advertising platforms. This information is typically aggregated or pseudonymous and is used only for the purposes described in this policy.
We collect and use personal information for the following purposes:
We collect, use, and disclose your personal information with your consent, except where otherwise permitted or required by law. Consent may be express (such as checking a consent checkbox) or implied (such as providing your email address when you submit an application requesting a response).
You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. To withdraw consent, see the Consent Withdrawal section or contact us using the information below.
When you submit an application, we will use your contact information to respond to your request. This includes communications necessary to:
These service communications are tied to your request and are not marketing messages. You cannot opt out of essential service communications while your application or project is active.
With your separate, explicit consent, we may send you promotional communications about:
Marketing consent is optional and is never required to submit an application. You can withdraw marketing consent at any time through the unsubscribe link in any marketing email, by replying STOP to marketing SMS messages, or by contacting us. See our Communication Consent page for details.
We distinguish between:
The Application may use the following Google services, depending on what is enabled in the production configuration:
With your analytics consent, Google Analytics collects pseudonymous device, browser, and interaction data to help us understand how the Application is used. Google Analytics may set first-party cookies on our domain. We configure Analytics to use IP anonymization where available and do not send personal information (names, emails, phone numbers) through Analytics URLs, event names, or custom dimensions.
With your advertising consent, Google Ads may set conversion-tracking cookies to measure the effectiveness of our advertising campaigns. Advertising personalization is controlled by your consent choices. You can change these at any time through Cookie Settings.
Google Tag Manager is used to manage the deployment of analytics and advertising tags. Tag Manager itself does not collect personal information; it controls which tags load based on your consent choices.
Search Console provides aggregated search-performance data. It does not collect personal information from Application visitors.
We may help clients with Google Business Profile setup as part of the package. Business Profile data is managed by the client and Google. Google controls eligibility, approval, and verification.
NOTE: If the Application later integrates Google OAuth, Calendar, Meet, or Workspace APIs, additional disclosures will be added to this section covering the specific data accessed, purpose, retention, and revocation instructions.
Some of our service providers (including hosting, analytics, and email-delivery platforms) may process or store information outside Canada, including in the United States. When information is processed outside Canada, it may be subject to the laws of the country where the provider operates, and those laws may permit government or law-enforcement access under different standards than Canadian law.
We take reasonable steps to ensure that service providers handling personal information maintain appropriate safeguards.
We retain personal information only as long as necessary for the purposes described in this policy, or as required by law. Application data is retained while your application or project is active, and for a reasonable period afterward for follow-up, legal, and audit purposes. Consent records are retained for the period required to demonstrate compliance. Anonymous or aggregated data may be retained indefinitely.
We use reasonable administrative, technical, and physical safeguards to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include encrypted transmission, access controls, secure hosting, and regular security review. However, no internet-based system can guarantee perfect security. We cannot and do not warrant the absolute security of information transmitted to or stored by the Application.
You may request access to the personal information we hold about you. Upon written request and verification of your identity, we will provide information about the existence, use, and disclosure of your personal information, and give you access to that information, subject to exceptions permitted by law.
If you believe that personal information we hold about you is inaccurate or incomplete, you may request correction. We will correct the information as appropriate or annotate the record with the correction request.
You may request deletion of your personal information, subject to any legal or contractual retention obligations. Where deletion is not possible (for example, because the information is required for legal or audit purposes), we will explain why and restrict further processing where appropriate.
You may withdraw consent at any time by contacting us using the information in the Contact section below. Withdrawal may mean we can no longer provide certain services. We will explain the consequences of withdrawal before processing your request.
If you have a concern about how we handle your personal information, please contact our Privacy Officer using the information below. We will investigate and respond within a reasonable time.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or the Information and Privacy Commissioner of Ontario at ipc.on.ca.
The Application is intended for business owners and entrepreneurs. We do not knowingly collect personal information from individuals under the age of 18 without verifiable parental consent. If you believe we have inadvertently collected such information, please contact us immediately.
If CipherX is involved in a merger, acquisition, or sale of all or a portion of its assets, personal information may be transferred as part of that transaction. We will notify affected individuals and, where required, obtain consent before information becomes subject to a different privacy policy.
We may disclose personal information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, to investigate fraud, or to respond to a government request.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date, post a notice on the Application, and, where required, obtain renewed consent. We encourage you to review this policy periodically.
Continued use of the Application after changes are posted constitutes acceptance of the updated policy, subject to any additional consent requirements under applicable law.
Questions About This Policy?
We will acknowledge your inquiry within a reasonable time. Please direct access, correction, deletion, withdrawal, or complaint requests to the privacy email address above.