Privacy Policy

1. Who We Are

Desvy, A 3E Solutions is a technology company incorporated in Ontario, Canada. We operate the IshopLocal platform, a national product origin verification and economic intelligence system. Our contact for privacy matters is: contact@ishoplocal.ca.

2. Information We Collect

We collect the following categories of personal information:

• Account Information: Email address, password (stored as a salted hash), company name, and user role when you register.
• Scan Data: Barcodes submitted for scanning. We do not store identifiable scan history linked to individual users without consent.
• Receipt Data: Images uploaded for receipt analysis are processed in real time and are not permanently stored.
• Usage Data: Anonymised telemetry including region (province), product category, and scan origin — used for PrimeWave analytics. User IDs are SHA-256 hashed before aggregation; no plaintext user identifiers are stored in analytics tables.
• Billing Information: Payment transactions are processed by PayPal. We store subscription status and PayPal subscription IDs. We do not store credit card numbers or full payment details.
• Technical Data: IP addresses (for rate limiting and fraud detection), browser/device type, and access timestamps. IP addresses are not linked to user profiles.
• Communications: Any correspondence you send us, including support requests.

3. How We Use Your Information

We use your personal information to:

• Provide, operate, and improve the IshopLocal platform;
• Authenticate users and manage account access;
• Process payments and manage subscriptions via PayPal;
• Generate anonymised regional economic analytics (PrimeWave);
• Detect and prevent fraud, abuse, and security incidents via the Janelle control layer;
• Respond to your inquiries and provide customer support;
• Comply with legal obligations under Canadian federal and Ontario provincial law;
• Send transactional communications related to your account (e.g., billing confirmations). We do not send commercial electronic messages without your express or implied consent as required by CASL.

4. Legal Basis and Consent (PIPEDA)

Under PIPEDA, we collect, use, and disclose personal information only with your knowledge and consent, except where otherwise permitted or required by law. By registering for an account or using the Platform, you consent to the collection and use of your information as described in this Policy. You may withdraw consent at any time by contacting us at contact@ishoplocal.ca, subject to legal or contractual restrictions.

5. Anti-Spam Compliance (CASL)

We comply with the Canada Anti-Spam Legislation (CASL). We will only send commercial electronic messages (CEMs) to you if you have provided express consent or if implied consent applies under CASL. Every CEM we send will include:

• Clear identification of Desvy, A 3E Solutions as the sender;
• Our mailing address and contact information;
• A functional and easy-to-use unsubscribe mechanism.

You may unsubscribe from commercial messages at any time by emailing contact@ishoplocal.ca with the subject line "Unsubscribe". We will process your request within 10 business days.

6. Disclosure of Personal Information

We do not sell your personal information. We may share it with:

• PayPal: For payment processing. Subject to PayPal's privacy policy.
• Open Food Facts / UPCitemdb: Barcode lookups. No personal data is shared with these services — only the barcode string.
• Law Enforcement: When required by law, court order, or to protect the rights and safety of Desvy or others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred with notice to you.

7. Data Retention

• Account data is retained for the duration of your account and for 2 years after closure for legal compliance purposes.
• Anonymised PrimeWave analytics data is retained indefinitely as it contains no personal information.
• Trust Ledger entries are immutable and retained permanently for audit integrity.
• Receipt images are not stored after processing.
• Billing records are retained for 7 years as required by Canadian tax law.

8. Data Security

We implement industry-standard security measures including TLS 1.3 encryption in transit, bcrypt/SHA-256 password hashing, ed25519 cryptographic signing for certificates, role-based access controls, rate limiting, and append-only audit logging. Despite these measures, no system is completely secure. In the event of a privacy breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

9. Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Withdraw consent to collection and use, subject to legal restrictions;
• File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.

To exercise these rights, contact us at contact@ishoplocal.ca. We will respond within 30 days.

10. Cookies and Tracking

The IshopLocal platform uses browser localStorage to store your authentication token and user preferences. We do not use third-party advertising cookies or tracking pixels. We do not display advertisements. Analytics data collected is anonymised and processed on our own infrastructure — no data is shared with Google Analytics, Meta, or similar third-party analytics providers.

11. Children's Privacy

The IshopLocal platform is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at contact@ishoplocal.ca and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and post the updated policy at ishoplocal.ca/privacy with a new effective date. Continued use of the Platform after changes constitutes acceptance of the updated Policy.

13. Contact Us