Privacy Policy

Last updated: August 6, 2026

MR INNOVATION INC. ("we", "us") respects your privacy. This policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Who is responsible for your information

MR INNOVATION INC. is the organisation accountable for the personal information under its control. Questions, access requests, and complaints go to our Privacy Officer:

Privacy Officer, MR INNOVATION INC.
1025 King Street East
Unit 107 #1713
Cambridge, ON N3H 3P5
Canada
privacy@mrinnovationinc.com

2. What we collect, and why

We collect only what we need for the purposes below. We do not sell personal information.

Account information

Name, email address, and password credentials. Purpose: to create and secure your account, authenticate you, and contact you about your account.

Billing information

Billing name, billing address, country, and a record of your transactions. Purpose: to process payments, issue receipts and invoices, apply the correct taxes, and meet our record-keeping and tax obligations.

We do not collect or store your full payment card number. Card details are entered directly with our payment processor, which is certified to PCI-DSS. We receive only limited information such as the card brand, the last four digits, and whether a charge succeeded.

Content you provide

Data, files, and text you submit while using our software. Purpose: to provide the features you are using, and to store your work so it is there when you return.

Technical and usage information

IP address, device and browser type, operating system, timestamps, pages or screens used, and error diagnostics. Purpose: to operate and secure the service, prevent fraud and abuse, diagnose faults, and understand which features are used.

Communications

Messages you send us and our replies. Purpose: to provide support and keep a record of what was asked and answered.

3. Consent

We collect, use, and disclose personal information with your consent, except where the law permits or requires otherwise. Providing information needed to deliver a service you have asked for implies consent for that purpose. For anything beyond what is needed to deliver the service — such as marketing email — we ask for express consent, and you can withdraw it at any time. Withdrawing consent may mean we can no longer provide part of the service; we will tell you if that is the case.

4. Marketing email

We send commercial electronic messages only in accordance with Canada's Anti-Spam Legislation (CASL). Every marketing message identifies us, gives our contact information, and includes a working unsubscribe link that we honour promptly. Transactional messages — receipts, security alerts, service notices — are not marketing and are sent as part of the service.

5. Who we share it with

We share personal information only with service providers who process it on our behalf, under contract, and only for the purposes described above. These currently include providers of:

• payment processing;
• cloud hosting and databases;
• email delivery;
• error monitoring and analytics;
• authentication.

We may also disclose personal information where required by law, to comply with a valid legal process, to enforce our Terms of Service, or to protect the rights, safety, or property of any person. If our business is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction; we will give notice before it becomes subject to a different privacy policy.

6. Storage outside Canada

Our service providers may store and process personal information outside Canada, including in the United States. While it is in another country, it is subject to that country's laws, and may be accessible to its courts, law enforcement, and national security authorities under those laws. By using the Services you acknowledge this transfer. We use providers that offer contractual and technical protections comparable to those we apply ourselves.

7. How long we keep it

We keep personal information only as long as needed for the purpose it was collected, or as required by law. In practice:

• Account and content data — for the life of your account. After you close it, we delete or anonymise the data within 90 days, except where we must retain it.
• Billing and transaction records — at least six years, because Canadian tax law requires it.
• Technical logs — typically 30 days, then deleted or aggregated.

8. How we protect it

We use safeguards appropriate to the sensitivity of the information, including encryption in transit, encryption at rest with our hosting providers, access controls limiting access to those who need it, multi-factor authentication on administrative accounts, and regular review of our providers. No system is perfectly secure, and we cannot guarantee absolute security. If a breach creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

9. Cookies and similar technologies

We use cookies and similar technologies that are strictly necessary to operate the Services — for example, to keep you signed in and to protect against fraud. Where we use anything beyond strictly necessary cookies, such as analytics, we ask for consent first where the law requires it. Most browsers let you block or delete cookies; blocking necessary cookies may stop parts of the Services from working.

10. Your rights

Subject to limited legal exceptions, you may:

• ask whether we hold personal information about you, and how it has been used and disclosed;
• access a copy of that information;
• ask us to correct information that is inaccurate or incomplete;
• withdraw consent, subject to legal and contractual restrictions;
• ask us to delete your information, where we are not required to keep it;
• complain about how we have handled your information.

Email privacy@mrinnovationinc.com. We respond within 30 days. We may need to verify your identity first. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

11. Children

Our Services are not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. The "last updated" date above always reflects the current version. If a change is material, we will give notice by email or in the Services before it takes effect.