Deep Data

Privacy Policy

Last updated: April 21, 2026

1. Introduction

Deep Data ("we", "us", or "our") operates the website deepdata.ca (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

  • Email address
  • Password (stored as a bcrypt hash — we never store plaintext passwords)
  • Company name (optional)
  • OAuth provider information (Google or GitHub), if you choose social login

Usage Data

  • Search queries and API requests
  • IP address
  • Browser type and version
  • Pages visited and time spent

Payment Information

Payment processing is handled entirely by Stripe. We store your Stripe customer ID, subscription tier, and payment status. We do not store credit card numbers, CVVs, or full card details on our servers.

Cookies & Local Storage

  • JWT authentication token
  • Theme preference (light/dark)
  • Session data

3. How We Use Your Information

  • To provide and maintain the Service
  • To authenticate your identity and manage your account
  • To process billing and manage subscriptions
  • To enforce rate limits and prevent abuse
  • To improve our Service, features, and user experience
  • To communicate with you about your account or changes to our policies

4. Third-Party Services

We use the following third-party services:

  • Stripe — payment processing and subscription management
  • Google OAuth — optional social login
  • GitHub OAuth — optional social login
  • Google Gemini AI — search queries may be processed by AI models to provide intelligent results

Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their policies.

5. Data Sources & Business Data

Business data available through our Service is sourced from publicly available Canadian government open data portals (Statistics Canada, Open Canada, CIPO, OSFI, FINTRAC, Registraire des entreprises du Québec via Données Québec, municipal open data, and others). We aggregate, normalize, and index this public information to make it searchable.

Personal information within business records. We recognize that some of this data — notably sole-proprietorship registrations, partnership filings, director and officer listings, and charity T3010 returns — can contain information about identifiable individuals. Canadian case law (A.T. v. Globe24h.com, 2017 FC 114) has established that the commercial republication of publicly-available personal information can engage PIPEDA, even when the source is a government registry. We treat such records as potentially subject to privacy law and will process removal or correction requests in line with PIPEDA and Quebec Law 25 (see Your Rights below).

If you believe your personal information appears in a company profile and you have a reasonable basis to request its removal or correction (for example, you are the sole proprietor of a listed business, a private-address registration, or the subject of an outdated charity filing), contact us at [email protected] with the company name, business number (if available), and the specific fields involved. We respond within 30 days.

6. Data Retention

  • Account data — retained while your account is active, plus 30 days after deletion request
  • Usage logs — retained for 90 days
  • Payment records — retained as required by applicable tax law

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Passwords are hashed using bcrypt
  • API keys are stored as hashed values
  • All data is transmitted over HTTPS
  • Database access is restricted to authorized services only

8. Your Rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation, you have the right to:

  • Access your personal information via your Dashboard
  • Export your data
  • Request deletion of your account and associated data
  • Withdraw consent for data processing

If you are a resident of Quebec, you may also have additional rights under Quebec's Law 25 (Act to modernize legislative provisions as regards the protection of personal information), including the right to data portability (receiving your data in a structured, commonly used format) and the right to deindexation (requesting that your personal information be de-indexed from search results or other dissemination mechanisms).

To exercise any of these rights, contact us at [email protected].

9. Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by sending an email to the address associated with your account and updating the "Last updated" date at the top of this page. You are advised to review this Privacy Policy periodically for any changes.

11. Privacy Officer (Quebec Law 25)

Under Quebec's Act respecting the protection of personal information in the private sector(the "Act", as amended by Bill 25), Deep Data designates the following Privacy Officer to handle privacy-related requests, complaints, and access / rectification / de-indexation requests from Quebec residents:

  • Role: Privacy Officer, Deep Data
  • Email: [email protected]
  • Response window: 30 days from receipt of request

De-indexation requests. If a search result on deepdata.ca or a link to deepdata.ca content causes you injury or contravenes the law or a court order, you may request its removal from our index. Send the request to [email protected] with the specific URL, the reason for the request, and proof of identity. We will respond within 30 days.

Right to file a complaint.If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec (CAI): cai.gouv.qc.ca.

Data sources. Deep Data aggregates open data published by the Government of Canada and provincial governments under the Open Government Licence — Canada and equivalent provincial licences. Personal information about company directors or registered charity trustees appears in our records only insofar as those individuals have been published in the original public registries (Corporations Canada, Quebec REQ, CRA T3010 returns, etc.).

12. Contact Us

For general questions about this Privacy Policy, contact us at [email protected]. For privacy-specific requests, use [email protected] as listed in the Privacy Officer section above.