Privacy Policy

1. Introduction

Governor Technologies Inc. ("Governor," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our AI governance platform and related services (collectively, the "Services").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, organization details, job title, and authentication credentials
• Configuration Data: System settings, governance rules, approval workflows, and customization preferences
• Communications: Messages, feedback, and support inquiries you send to us
• Payment Information: Billing details and transaction history (processed securely through third-party payment processors)

2.2 Automatically Collected Information

• Usage Data: Actions performed within the platform, feature utilization, and interaction patterns
• Governance Logs: Audit trails of AI proposals, human approvals, and system decisions
• Technical Data: IP addresses, device information, browser type, operating system, and access times
• Performance Metrics: System performance data, error logs, and diagnostic information

2.3 AI-Generated Data

• AI Proposals: Automated recommendations and suggestions generated by the platform
• Approval Decisions: Records of human oversight and authorization decisions
• Audit Records: Complete traceable records of all automated actions and human interventions

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Provide, maintain, and improve the Governor AI platform
• Governance Operations: Enable AI proposals, human approval workflows, and audit trail generation
• Security & Compliance: Detect and prevent security threats, ensure regulatory compliance, and maintain system integrity
• Analytics: Analyze usage patterns to enhance platform functionality and user experience
• Customer Support: Respond to inquiries, provide technical assistance, and resolve issues
• Legal Obligations: Comply with applicable laws, regulations, and legal processes
• Business Operations: Process transactions, maintain records, and conduct internal business purposes

4. Data Storage and Security

4.1 Canadian Data Sovereignty

As a Canadian company, we prioritize data sovereignty and national security:

• Primary data storage within Canadian infrastructure
• Compliance with Canadian privacy legislation (PIPEDA)
• Adherence to government and enterprise security standards
• Transparent data handling practices aligned with Canadian values

4.2 Security Measures

We implement industry-leading security measures to protect your information:

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• Continuous monitoring and threat detection
• Incident response and disaster recovery procedures
• Employee security training and background checks

4.3 Data Retention

We retain information for as long as necessary to:

• Provide ongoing services and support
• Maintain audit trails for compliance and security purposes
• Comply with legal and regulatory requirements
• Resolve disputes and enforce our agreements

Audit logs and governance records are retained according to regulatory requirements and industry best practices for critical infrastructure systems.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

5.1 With Your Consent

We share information when you explicitly authorize us to do so.

5.2 Service Providers

We engage trusted third-party service providers who assist in platform operations, including:

• Cloud infrastructure providers
• Payment processors
• Security and monitoring services
• Customer support tools

All service providers are contractually bound to maintain confidentiality and security standards consistent with this Privacy Policy.

5.3 Legal Requirements

We may disclose information when required by law, legal process, or government request, or to:

• Comply with regulatory obligations
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Service

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal and operational requirements
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain processing activities, including direct marketing
• Restriction: Request restriction of processing under certain circumstances
• Withdrawal of Consent: Withdraw previously given consent at any time

To exercise these rights, please contact us using the information provided in Section 10 below. We will respond to your request within the timeframe required by applicable law.

7. International Data Transfers

While we primarily store and process data within Canada, some service providers may process information in other jurisdictions. When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Certification under recognized frameworks
• Explicit consent where required

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance platform functionality, analyze usage, and improve user experience. Types of cookies we use include:

• Essential Cookies: Required for platform operation and security
• Functional Cookies: Enable enhanced features and personalization
• Analytics Cookies: Help us understand how users interact with our platform
• Security Cookies: Protect against fraud and maintain system security

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit platform functionality.

9. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending email notifications for significant changes
• Displaying prominent notices within the platform

Your continued use of our Services after changes take effect constitutes acceptance of the updated Privacy Policy.