Privacy Policy

1. Who we are

This Privacy Policy explains how 102238904 Saskatchewan Inc. ("Nimbus Land", "we", "us", or "our") handles personal information in connection with the Nimbus Land platform and the nimbusland.ca website (together, the "Service").

We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. The two roles we play

It is important to distinguish between two kinds of data:

• Account & usage data — information about you and your organization as a customer of Nimbus Land (for example, your name, email, and how you use the dashboard). For this data, Nimbus Land acts as the party accountable for the information it collects.
• Customer content — the applications, data, files, and AI workloads that you and your team deploy and store on the Service. For this data, you (the customer) determine the purposes and means of processing, and Nimbus Land acts as your service provider / processor, handling it only on your instructions. Our handling of customer content is governed by your customer agreement and our Terms of Service, and is available under a Data Processing Agreement on request.

3. Information we collect

Information you provide

• Account details: name, work email, organization name, and password credentials.
• Contact and sales enquiries submitted through our contact form.
• Billing information processed by our payment provider (we do not store full card numbers).
• Support communications and any information you choose to include in them.

Information collected automatically

• Usage and diagnostic data such as log entries, IP address, browser type, and pages viewed.
• Audit records of actions taken in the control plane (who deployed what, and when).
• Strictly necessary cookies used to keep you signed in and to secure the Service.

4. How we use personal information

We use account and usage data to:

• Provide, operate, secure, and improve the Service;
• Authenticate users and maintain audit trails;
• Process payments and manage billing;
• Respond to enquiries and provide customer support;
• Send service-related notices, and (where permitted) relevant product updates; and
• Comply with legal obligations and enforce our agreements.

5. Consent

We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting our Privacy Officer (see below). Withdrawing consent may limit our ability to provide certain features of the Service.

6. Where your data is stored and cross-border transfers

Nimbus Land hosts the Service on Canadian-based infrastructure, and customer content is stored in Canada by default.

We do not transfer your data outside Canada without your permission. Some optional features rely on third-party services that may operate outside Canada — for example, third-party AI model providers. These integrations are off by default and are only used when you or your organization explicitly enable them. When you choose to enable such a feature, the data you send to it may be processed in another country and subject to the laws of that jurisdiction. You can review which services are involved on our Security & Trust page.

7. Disclosure and service providers (sub-processors)

We do not sell personal information. We share it only with service providers that help us deliver the Service (such as infrastructure, payment processing, and email delivery), bound by contractual confidentiality and data-protection obligations, and only as needed to perform their functions. A current list of sub-processors is maintained on our Security & Trust page. We may also disclose information where required by law or to protect our rights, users, or the public.

8. Retention

We retain personal information only as long as necessary to fulfil the purposes described in this policy, to provide the Service, and to meet legal, accounting, or reporting requirements. Customer content is retained according to your customer agreement and is deleted following account termination in accordance with that agreement.

9. How we protect information

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, tenant isolation, scoped access controls, and audit logging. Details are described on our Security & Trust page. No method of transmission or storage is completely secure, but we work to protect your information and to notify you of material breaches as required by law.

10. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Withdraw consent to certain uses; and
• Make a complaint about our handling of your information.

To exercise these rights, contact our Privacy Officer using the details below. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

11. Cookies

We use strictly necessary cookies to operate and secure the Service (for example, to keep you signed in). We do not use advertising cookies. Where we use any optional analytics, we will describe it here and obtain consent where required.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above. Material changes will be communicated through the Service or by email.

13. Contact us

Questions, requests, or complaints can be directed to our Privacy Officer:

• Email: privacy@nimbusland.ca
• Privacy Officer: Raul Chedrese, 102238904 Saskatchewan Inc.