Privacy Policy for Spacebrain

When you browse our Website, we automatically collect certain technical information to maintain and improve the site.

Data we collect:

Why we collect this:

We use this technical data to ensure the Website functions properly, identify and fix technical issues, and understand how visitors use our site so we can improve your experience. This helps us detect security threats and optimise performance.

Legal basis:

PIPEDA permits this collection based on our legitimate interest in maintaining a secure, stable, high-performing website, balanced with your reasonable privacy expectations.

To provide you with access to the Spacebrain Platform, we need certain information.

Data we collect:

Why we collect this:

This information allows us to create and manage your account, process payments, provide customer support, and communicate with you about your service. We never store full payment card details—payment processing is handled by secure third-party providers.

Legal basis:

PIPEDA permits this collection as it is necessary to fulfill our contract with you to provide the Platform and related services.

If you use our contact form or email us directly, we collect the information you provide.

Data we collect:

Why we collect this:

We use this information solely to respond to your inquiry and provide support. We don't share this information with third parties except where necessary to fulfill your request.

Legal basis:

PIPEDA permits this collection based on our legitimate interest in communicating with visitors and providing customer support.

Our Website uses cookies—small text files stored on your device that help us recognise you when you return. Some cookies are essential for basic website functionality; others help us understand how you use the site.

Session Cookies automatically delete when you close your browser. Persistent Cookies remain on your device until you delete them or they expire. You can control cookies through your browser settings, though disabling them may limit Website functionality.

We use PostHog, a product analytics platform, to understand how users interact with our Website and Platform. This helps us identify technical issues, optimise user experience, and improve our services.

Data collected by PostHog:

Why we use PostHog:

PostHog enables us to see how users interact with our product, identify bugs and usability issues, and understand which features are most valuable. This helps us build a better product experience for everyone.

Your consent:

Analytics tracking is based on your explicit consent via our cookie banner. You can withdraw consent at any time by:

Session Recording:

PostHog's session recording feature captures interactions with our website and platform. You can disable session recording by:

IP Anonymization:

We have enabled IP anonymization in PostHog where applicable, meaning your IP address may be truncated to protect your privacy.

Cookies Used by PostHog:

PostHog uses cookies to track unique visitors and sessions. Common PostHog cookies include identifiers for session tracking and user identification. Cookie retention typically persists for up to one year.

PostHog operates under a Data Processing Agreement and processes data as our processor. PostHog maintains secure data hosting, including EU data centres for compliant processing. For more information about PostHog's privacy practices and data handling, visit: 

https://posthog.com/privacy

Data Retention:

Analytics data collected through PostHog is retained for up to one year, after which it is automatically deleted or anonymized.

We implement technical and organisational security measures to protect your personal data from unauthorised access, loss, or misuse. Our security practices include:

We use third-party service providers to help maintain platform security and resolve technical issues. We have a legitimate interest in monitoring and improving platform security, which is also in your interest as a user.

We use the error analysis service Sentry from Functional Software Inc. to identify and fix technical problems. This helps ensure the reliability and stability of our services.

Data transmitted to Sentry:

Why we use Sentry:

Sentry enables us to monitor platform stability, detect errors before they impact users, and respond quickly to technical issues. This directly benefits platform reliability and your user experience.

Data protection and hosting:

Sentry operates under a Data Processing Agreement. Our Sentry instance is configured with European Union data hosting, ensuring that all error logs and related data are stored on secure infrastructure that meets international security standards.

Sentry's infrastructure is certified to ISO/IEC 27001 standards for information security.

Legal basis:

PIPEDA permits this monitoring based on our legitimate interest in maintaining a stable, reliable platform, which benefits both us and our users.

Data retention:

Error logs are retained for up to 90 days to enable troubleshooting and quality assurance. After this period, logs are automatically deleted or anonymized.

More information:

For detailed information about how Sentry handles data, including their privacy practices and security certifications, visit: 

https://sentry.io/trust/privacy/

When you use the Spacebrain Platform, we collect information about how you use our services.

Data we collect:

Why we collect this:

We use this data to provide and improve the Platform, detect and prevent fraud, ensure security, generate usage reports for your account, and comply with legal obligations. Understanding how you use Spacebrain helps us build better features and fix issues faster.

Legal basis:

PIPEDA permits this collection as it is necessary to fulfill our contract with you and based on our legitimate interest in improving our services.

We use third-party service providers to operate the Platform and deliver our services. These providers act as data processors under Data Processing Agreements and are contractually obligated to protect your data.

Categories of service providers:

All service providers are contractually obligated to protect your data and use it only as directed by us.

Your data may be transferred to and processed by service providers located outside Canada. When we transfer data internationally, we implement appropriate contractual and technical safeguards to protect your data in accordance with PIPEDA requirements.

We prioritize service providers with strong data protection practices and use standard contractual protections where data is transferred internationally.

We delete personal data once it's no longer needed for its original purpose. However, we may retain data longer if required by law.

Retention for business and tax reasons:

We retain transaction and account records for the duration of your service plus one additional year, and for 7 years thereafter to meet commercial and tax law requirements under Canadian law. During this retention period, we access data only for audit purposes.

Anonymized data:

We may indefinitely retain anonymized and aggregated data for analytics and research purposes, as this data cannot identify you.

Specific retention periods:

Retention periods may be extended where required by law or in connection with legal proceedings. We may also retain anonymized and aggregated data longer for statistical and analytics purposes.

You have several rights regarding your personal data under PIPEDA and applicable provincial privacy laws. You can exercise any of these rights by contacting us at 

success@spacebrain.ai

. We'll respond within 30 days (or as required by applicable law).

You can request information about what personal data we hold about you, how we use it, how long we keep it, and who we share it with. We can provide you with a copy of your data in a portable format.

If your personal data is inaccurate or incomplete, you can request that we correct or complete it. If we've shared inaccurate data with third parties, we'll notify them of the correction where required by law.

You can request deletion of your personal data if:

Limitations: We may not be able to delete data if we're required by law to keep it (tax records, legal claims, fraud prevention).

If we're processing your data based on consent, you can withdraw that consent anytime. Withdrawing consent doesn't affect the legality of processing before you withdrew it.

You can withdraw consent by:

If you believe we've violated your privacy rights, you can file a complaint with the appropriate privacy authority:

Office of the Privacy Commissioner of Canada

We do not use automated decision-making (including profiling) to make decisions about you that have legal or significant effects.

However, we do use automated tools for fraud detection, security monitoring, and platform optimization. If automated analysis affects your rights, you have the right to request human review.

Our Website and Platform may link to third-party websites and services. We're not responsible for their privacy practices. Please review their privacy policies before providing personal information to them.

Our Platform and Website are not intended for children under 13. We don't knowingly collect data from children. If we become aware of this, we'll delete the information and terminate the account.

We may update this privacy policy at any time. Material changes will be posted on the Website with an updated "Effective Date," and we'll notify you via email for significant updates.

Your continued use of the Platform after changes means you accept the updated policy. Please review this policy regularly to stay informed.

Spacebrain

Mailing Address:
225 Railway St E., Suite #360
Cochrane, Alberta, T4C 2C3
Canada

Email: success@spacebrain.ai

Response Time:

We aim to respond to all privacy inquiries within 30 days as required by PIPEDA.

This privacy policy is governed by the laws of Alberta and Canada. We comply with PIPEDA and applicable provincial privacy legislation.

Last Updated: January 2026