Privacy Policy

This Privacy Policy explains how Shield AI Software Inc. (“Shield AI,” “we,” “us,” or “our”), the provider of the Elpista governance, risk and compliance (GRC) platform (the “Service”), collects, uses, discloses and safeguards personal information. We are committed to protecting your privacy and handling personal information in accordance with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation.

1. Who we are

Shield AI Software Inc. is a company incorporated in Canada, based in Oakville, Ontario. We are responsible for the personal information under our control. For any privacy question or request, contact us at ofatokun@shield-ai.ca.

2. Information we collect

We collect the following categories of information:

• Account and contact information — name, business email, company name, job title, and similar details you provide when you register, request a demo, or contact us.
• Usage and technical information — log data, device and browser information, IP address, and how you interact with the Service, collected to operate, secure and improve it.
• Cookies and similar technologies — used for authentication, preferences, and basic analytics (see Section 11).
• Customer Data — the content and records that you and your organization upload to or create within the Service (for example, risk registers, controls, evidence, vendor information and policies). We process Customer Data on your behalf, as described in Section 5.

3. How we use information

We use personal information to: provide, operate, maintain and secure the Service; create and manage accounts; respond to demo requests and enquiries; process transactions and administer subscriptions; communicate with you about the Service; monitor and improve performance and functionality; detect, prevent and address security incidents, fraud and misuse; and comply with legal obligations.

4. Legal basis and consent

We collect, use and disclose personal information with your consent, or as otherwise permitted or required by law. Consent may be express or implied depending on the sensitivity of the information and the circumstances. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice (see Section 9).

5. Customer Data

Customer Data that your organization submits to the Service belongs to your organization. With respect to that data, Shield AI acts as a service provider (processor) and handles it in accordance with our agreement with your organization and its instructions. If you are an individual whose personal information is contained in Customer Data controlled by one of our customers, please direct privacy requests to that organization; we will support them in responding.

6. Sharing and disclosure

We do not sell personal information. We disclose information only as follows: to service providers and sub-processors that help us operate the Service (for example, cloud hosting), under contractual obligations to protect the information; to comply with applicable law, legal process or lawful government requests; to protect the rights, property or safety of Shield AI, our customers or others; and in connection with a corporate transaction such as a merger or acquisition, subject to appropriate safeguards.

7. Data residency and hosting

The Service is hosted on Microsoft Azure in a Canadian region, and Customer Data is stored and processed in Canada. Where any processing or support activity could involve access from outside Canada, we apply appropriate contractual and technical safeguards consistent with applicable law.

8. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls and multi-factor authentication, network security, logging and monitoring, and a tamper-evident audit trail. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to applicable law, you may request to access, correct, or delete your personal information, or withdraw consent to its use. To exercise these rights, email ofatokun@shield-ai.ca. We will respond within the timeframes required by applicable law and may need to verify your identity. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your applicable provincial privacy regulator.

10. Data retention

We retain personal information only as long as necessary to fulfil the purposes described in this Policy, to provide the Service, and to comply with our legal obligations, after which it is deleted or de-identified. Retention of Customer Data is governed by our agreement with your organization.

11. Cookies and analytics

We use cookies and similar technologies for authentication, to remember preferences, and to understand how the Service and website are used. You can control cookies through your browser settings; disabling some cookies may affect functionality.

Our marketing website uses the LinkedIn Insight Tag, an analytics and advertising technology provided by LinkedIn Corporation, to measure the performance of our marketing and understand which content resonates with visitors. It may set cookies and collect information such as your device and browser, IP address, and pages viewed. This information is processed by LinkedIn in accordance with the LinkedIn Privacy Policy. You can opt out of LinkedIn’s use of your data for ads through your LinkedIn account settings (or the settings above), and you can block or delete these cookies through your browser. We do not use this tag to collect sensitive information.

12. Children’s privacy

The Service is a business tool intended for organizations and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

13. Third-party links

Our website may link to third-party sites we do not control. This Policy does not apply to those sites, and we encourage you to review their privacy practices.

14. Changes to this Policy

We may update this Policy from time to time. We will post the updated version here and revise the “Last updated” date. Material changes may be communicated through the Service or by email.

15. Contact us

For questions, concerns, or privacy requests, contact:
Shield AI Software Inc. — Oakville, Ontario, Canada
ofatokun@shield-ai.ca