Privacy Policy
This Privacy Policy describes how 834770 Alberta Ltd. ("we," "us," "our"), an Alberta, Canada corporation operating as sensemakingwith.ai, collects, uses, and shares information about you when you use sensemakingwith.ai (the "Service"). It applies to all users — anonymous visitors, signed-in free accounts, and paid customers.
1. Information we collect
Account information
When you sign in with Google (OAuth), we receive your email address and display name from Google. We store these to identify your account.
Content you create
The frameworks you fill in, the diagrams you build, the comments you make — these are your content. We store it on our infrastructure (Cloudflare D1 and Durable Objects) so we can display it back to you and to people you collaborate with.
Anonymous (cookie) usage
If you visit sensemakingwith.ai without signing in, we set an anonymous cookie that lets you create up to 3 files for evaluation. This cookie is a random identifier; it doesn't carry personal information. The data you create is associated with the cookie until either it expires or you sign in (at which point we link the anonymous content to your account).
Technical data
Standard server logs (IP address, user agent, timestamps) for security and abuse prevention. Logs are retained for 30 days unless an active investigation requires longer.
Billing information
If you pay for a Pro or Enterprise plan, our merchant of record, Polar, handles the payment and your card details. We don't store full card numbers — we receive only the last four digits and a customer ID for record-keeping.
2. How we use your information
- To provide the Service: store and display your content, and sync changes between collaborators. We do not send marketing email; billing and subscription emails (receipts, renewal and cancellation notices) are sent by our merchant of record, Polar.
- To prevent abuse: rate-limit signed and anonymous traffic, detect suspicious account activity.
- To improve the product: aggregate, anonymized usage patterns help us decide which frameworks to invest in. We never read individual users' content for product development.
- To comply with law: respond to valid legal requests, court orders, or regulatory inquiries.
3. How we share your information
We don't sell your information. We share it only with:
- Subprocessors who help operate the Service: Cloudflare (hosting, edge compute, database, and content delivery), Polar (payments / merchant of record, paid plans only), and Google (Google sign-in via OAuth, and Google Workspace, which processes email you send to our support and role addresses).
- People you collaborate with: when you share a file with someone, they see your display name and the content you've authored.
- Authorities: if compelled by valid legal process or to prevent imminent harm.
4. Data retention
Active account data: retained while your account is active. Soft-deleted files are retained for 30 days then permanently deleted. Hard-deleted files are gone immediately and unrecoverable. If you delete your account, we delete your data within 30 days, retaining only what's required for legal/financial compliance (typically billing records for 7 years per Canadian tax law).
5. Your rights (GDPR, PIPEDA, applicable Canadian provincial law)
You may at any time:
- Access the information we hold about you (Settings → Account → "Export my data")
- Correct inaccurate information (Settings → Profile)
- Delete your account and associated data (Settings → Danger Zone)
- Object to or restrict certain processing — contact us at privacy@sensemakingwith.ai
- Lodge a complaint with the Office of the Privacy Commissioner of Canada or your local data-protection authority
6. Data location
Your data is stored on Cloudflare's global infrastructure. Cloudflare runs edge locations worldwide; your account's primary data lives on the closest D1 region to your origin, with global cache replicas. Cloudflare's privacy and data residency commitments are at cloudflare.com/privacypolicy. Enterprise customers can request data-residency commitments — contact sales.
7. Cookies
We use a small number of strictly-necessary cookies: a session cookie (to keep you signed in) and an anonymous identity cookie (to associate anonymous content with one user). We don't use third-party tracking cookies, advertising cookies, or analytics cookies that share data with third parties.
8. Children
The Service is not directed to children under 16 (EU/EEA/UK) or under 13 (US, Canada). We do not knowingly collect information from children. If we learn that a child has signed up, we will delete the account.
9. Changes to this policy
We may update this policy as the product evolves. Material changes will be announced via in-app notification and email at least 30 days before they take effect. The "Last updated" date at the top reflects the latest version.
10. Contact
Questions about this policy or your data: privacy@sensemakingwith.ai. For other inquiries: Contact.