Privacy with clear boundaries.

1. Scope and accountability

This Privacy Policy applies to the XORVANIQ public website, customer communications and services operated by XORVANIQ Solutions where this policy is referenced. XORVANIQ Solutions is responsible for personal information under its control and designates the published privacy contact to receive privacy questions and requests.

Canadian private-sector privacy requirements, including the Personal Information Protection and Electronic Documents Act (PIPEDA) where applicable, may govern our handling of personal information. If another mandatory law applies to a specific transaction or service, that law prevails to the extent of any conflict.

2. Information we may collect

Account and contact

Name, organization, email address, phone number, account identifiers and contact preferences.

Billing

Invoice details, transaction references, tax information, payment status and limited payment metadata. Payment processors may handle card or banking details directly.

Service configuration

Products, plans, domains, IP assignments, storage quotas, device or endpoint identifiers, configuration choices and support history.

Technical and security

IP address, timestamps, authentication events, device/browser information, logs, error data, abuse indicators and network metadata reasonably required to operate and protect the service.

Communications

Messages, support requests, sales inquiries, complaints, abuse reports and information you choose to provide to NORA.

3. Why we use information

• To create and administer accounts and accepted services.
• To authenticate users, secure systems, detect abuse and investigate incidents.
• To provision, meter, maintain, troubleshoot and support services.
• To issue invoices, process payments, apply taxes and maintain business records.
• To communicate service, security, policy and support information.
• To understand service performance and improve reliability, documentation and user experience.
• To meet legal, regulatory, accounting, fraud-prevention and dispute-resolution obligations.

4. Consent and limiting collection

Where consent is required, we seek consent that is meaningful in the circumstances and collect information by fair and lawful means. Some information is necessary to provide a requested service; if you do not provide it, we may be unable to create an account, process an order or support the service.

We do not use a request for one purpose as permission for unrelated marketing or unrelated sensitive-data collection.

5. Website storage, cookies and analytics

The website may use local browser storage, session storage or cookies for functional preferences such as theme selection, motion settings, session continuity, security and customer access. If analytics or other measurement tools are enabled, they should be configured to collect only information reasonably needed for site operation and improvement.

Seasonal presentation preferences are stored locally in your browser and do not change account, service, billing or security status.

6. NORA and AI-assisted support

NORA is an AI system operated by XORVANIQ for public product information and support triage. Information you submit to NORA may be transmitted to the systems required to generate and secure the response and may be logged for service operation, troubleshooting, abuse prevention and quality review where appropriate.

Public NORA is not intended for passwords, payment-card information, government identification, health information, private access details or other secrets. If a future authenticated workflow requires sensitive information, that workflow must identify its purpose and access controls separately.

7. When we may disclose information

We may disclose personal information to service providers and subprocessors that help us provide hosting, network, communications, payment, security, support, email, monitoring or other operational functions. They are expected to handle information only for the contracted purpose and with safeguards appropriate to the sensitivity of the information.

We may also disclose information when reasonably necessary to comply with law, lawful process, court orders, regulatory requirements, emergency safety obligations, fraud or abuse investigations, or to establish or defend legal rights. We do not sell personal information to advertisers.

8. Processing location and service providers

XORVANIQ is Canadian-operated, but some third-party providers or infrastructure components may process information outside Canada. Information processed in another country may be subject to the laws and lawful-access authorities of that jurisdiction. We assess service providers and use contractual, technical and organizational safeguards appropriate to the information and service.

9. Retention and deletion

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including active service delivery, security investigations, billing, dispute resolution, legal requirements and reasonable business records. Retention periods differ by record type and service.

When information is no longer required, we aim to delete, destroy or de-identify it using measures appropriate to its sensitivity and the systems involved. Backups and immutable security records may persist for a limited period after operational deletion.

10. Safeguards

We use administrative, technical and physical safeguards intended to protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. Safeguards may include access controls, authentication, encryption where appropriate, logging, network controls, least-privilege practices, backups and security monitoring.

No internet-connected service can guarantee absolute security. Customers also have responsibilities for their own credentials, devices, applications and configurations.

11. Access, correction and privacy choices

Subject to applicable law and reasonable identity verification, you may ask whether we hold personal information about you, request access to it, ask us to correct inaccurate information, or raise a concern about our handling of it. Some records may be withheld or preserved where law requires or permits it, including information involving other individuals, legal privilege, fraud or security investigations.

You may withdraw consent where processing is based on consent, subject to legal or contractual restrictions and reasonable notice. Withdrawal may make some services unavailable if the information is necessary to provide them.

12. Service messages and marketing

Operational messages necessary to administer an account or service are different from promotional communications. Where Canadian anti-spam rules apply to commercial electronic messages, we aim to send them only with the consent or other legal basis required by law and to provide the required sender identification and unsubscribe mechanism.

13. Privacy and security incidents

If a breach involving personal information occurs, we assess the incident, contain and investigate it, preserve required records and provide notifications or reports when applicable law requires them. Customers should promptly report suspected account compromise or data exposure through the published support or abuse channel.

14. Minors

Paid infrastructure and business services are intended for customers capable of entering a binding agreement or acting with the authorization required by law. We do not intentionally design the public site to solicit sensitive personal information from children. A parent, guardian or authorized organization should contact us if they believe a minor’s information has been provided inappropriately.

15. Changes to this Privacy Policy

We may update this policy as services, providers or legal requirements change. The current version and effective date will be published here. If a material change significantly affects how existing customer information is handled, we will use a reasonable account or contact channel to provide additional notice where required.

16. Privacy requests and complaints

If you are not satisfied with our response to a privacy concern, you may have the right to contact the Office of the Privacy Commissioner of Canada or another regulator with jurisdiction.