Privacy Policy
Flashana Technologies Inc.

1. Introduction

Flashana Technologies Inc. ("Flashana", "we", "us", or "our") is committed to protecting the privacy and security of personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information in connection with our website at www.flashana.com (the "Website"), our AI-driven demand forecasting and scenario simulation platform (the "Platform" or "Service"), and related business activities.

We are a Canadian corporation headquartered in North Vancouver, British Columbia. This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), the British Columbia Personal Information Protection Act (PIPA), and other applicable Canadian privacy legislation.

By accessing our Website, using our Platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of this Policy

This Privacy Policy applies to:

Visitors to our Website (www.flashana.com)
Individuals who request demos, contact us, or subscribe to communications
Users of our Platform (account holders, administrators, and authorized users)
Prospective customers, partners, and investors who interact with us
Any other individuals whose personal information we collect in the course of our commercial activities

Note on Customer Data: When our business customers upload or connect their operational data (sales history, inventory, order lines, etc.) to the Platform for forecasting and optimization, that data is processed under the terms of our customer agreements and applicable Data Processing Addenda. To the extent such data contains personal information of our customers' end-users or employees, our customers remain the primary data controllers, and we act as a service provider / data processor. This Policy focuses on personal information that Flashana collects and controls directly.

3. Personal Information We Collect

We may collect the following categories of personal information:

3.1 Information You Provide Directly

Contact and Account Information: Name, business email address, telephone number, job title, company name, and account credentials when you create an account, request a demo, or contact us.
Communications: Information contained in emails, contact forms, meeting notes, or other correspondence you send to us.
Pilot / Customer Onboarding Data: Business contact details and any personal information included in datasets provided for evaluation or pilot purposes.
Investor / Partner Information: Name, contact details, and professional background information provided in the course of investment or partnership discussions.

3.2 Information Collected Automatically

Technical Data: IP address, browser type and version, device type, operating system, referring URLs, pages viewed, and timestamps.
Usage Data: How you interact with our Website and Platform (features used, session duration, clicks, and navigation paths).
Cookies and Similar Technologies: See Section 10 below.

3.3 Information from Third Parties

We may receive personal information from business partners, referral sources, publicly available professional profiles (e.g., LinkedIn), or service providers who assist us with analytics, hosting, or communications, always in accordance with applicable law.

4. How We Collect Personal Information

We collect personal information in the following ways:

Directly from you when you complete forms, create accounts, request demos, or communicate with us
Automatically through cookies, server logs, and analytics tools when you visit our Website or use the Platform
From our business customers when they authorize integrations or upload data that may contain personal information
From third-party sources as described above, where permitted by law

5. Purposes for Collection, Use and Disclosure

We collect, use, and disclose personal information for the following legitimate business purposes:

Providing and Improving Our Services: To create and manage user accounts, deliver the Platform, process forecasting requests, and improve functionality, accuracy, and user experience.
Customer Support and Communications: To respond to inquiries, provide technical support, send service-related notices, and manage the customer relationship.
Marketing and Business Development: To send information about our products, pilots, events, or relevant industry insights (you may opt out at any time).
Security and Fraud Prevention: To protect the Platform, detect and prevent unauthorized access, and maintain the integrity and security of our systems.
Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from authorities, and protect our legal rights.
Business Operations: For internal analytics, quality assurance, research and development (including SR&ED activities), and to support investor or partnership discussions (using aggregated or de-identified information where possible).

6. Consent

We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law. Consent may be express (e.g., checking a box, signing an agreement) or implied (e.g., where the purpose is obvious from the context).

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services. To withdraw consent or update your preferences, please contact us using the details in Section 15.

Where we process personal information as a service provider to our business customers, we rely on the customer to ensure that appropriate consents or other lawful bases have been obtained from the relevant individuals.

7. Disclosure of Personal Information

We do not sell personal information. We may disclose personal information in the following circumstances:

Service Providers: To trusted third-party processors who assist us with hosting, analytics, email delivery, customer support, or development (e.g., cloud infrastructure providers). These parties are contractually required to protect the information and use it only for the purposes we specify.
Business Partners: With partners involved in joint pilots or integrations, under appropriate confidentiality and data protection agreements.
Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of others.
Corporate Transactions: In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

8. Data Residency and Cross-Border Transfers

Canadian Data Sovereignty: Flashana is designed with data sovereignty as a core principle. Our Platform is hosted on sovereign Canadian cloud infrastructure (AWS Canada regions). Customer operational data processed through the Platform remains in Canada unless a customer expressly authorizes otherwise.

Some of our service providers (for example, certain email or analytics tools) may process limited personal information outside Canada, including in the United States or other jurisdictions. Where such transfers occur, we use contractual and technical safeguards consistent with Canadian privacy requirements to protect the information.

By providing personal information to us, you acknowledge that it may be transferred to, stored, or processed in jurisdictions outside your province of residence, and that while in those jurisdictions it may be subject to the laws of those jurisdictions.

9. Retention of Personal Information

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by law. Retention periods vary depending on the nature of the information and our legal and business requirements.

Account information is generally retained for the duration of the commercial relationship plus a reasonable period thereafter for legal, audit, and record-keeping purposes. Website analytics data is typically retained for shorter periods or in aggregated form.

When personal information is no longer required, we securely destroy, erase, or anonymize it.

10. Security Safeguards

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include:

Encryption of data in transit (TLS) and at rest (AES-256)
Access controls and authentication mechanisms
Sovereign Canadian cloud hosting with restricted access
Regular security assessments and monitoring
Contractual requirements for service providers

While we strive to protect personal information, no method of transmission or storage is completely secure. We encourage you to use strong passwords and to notify us promptly of any suspected unauthorized access to your account.

11. Access, Correction and Accuracy

Upon written request, we will provide you with access to the personal information we hold about you, subject to limited exceptions permitted by law (for example, where disclosure would reveal personal information about another individual or confidential commercial information).

You may also request that we correct or update inaccurate or incomplete personal information. We will respond to access and correction requests within the timeframes required by applicable law (generally 30 days under PIPEDA/PIPA).

We take reasonable steps to ensure that the personal information we collect and use is accurate, complete, and up-to-date for the purposes for which it is to be used.

12. Cookies and Similar Technologies

Our Website uses cookies and similar technologies (such as web beacons and local storage) to improve functionality, analyze usage, and support security. Cookies may be session cookies (deleted when you close your browser) or persistent cookies (which remain until they expire or are deleted).

We use:

Essential cookies: Necessary for the Website and Platform to function (e.g., authentication, security).
Analytics cookies: To understand how visitors interact with our Website so we can improve it.
Preference cookies: To remember your settings and preferences.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Website or Platform. Where required by law, we will seek consent before placing non-essential cookies.

13. Third-Party Websites and Services

Our Website may contain links to third-party websites or services that are not operated by us. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of third parties.

14. Children's Privacy

Our Website and Platform are intended for business and professional users. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

15. Contact Us / Privacy Officer

If you have questions, requests, or concerns about this Privacy Policy or our personal information practices, please contact our Privacy Officer:

Privacy Officer

Flashana Technologies Inc.

2043 Casano Drive

North Vancouver, British Columbia V7J 2R1

Canada

Email: privacy@flashana.com (or geoff.fawkes@flashana.com)

Telephone: 1-604-671-9245

16. Complaints and Regulatory Oversight

We encourage you to contact us first so that we can address your concerns. If you are not satisfied with our response, you have the right to file a complaint with the relevant privacy regulatory authority:

Office of the Privacy Commissioner of Canada (PIPEDA)

Website: www.priv.gc.ca

Toll-free: 1-800-282-1376

Office of the Information and Privacy Commissioner for British Columbia (PIPA)

Website: www.oipc.bc.ca

Telephone: 250-387-5629

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will post the updated Policy on our Website and update the "Last Updated" date. Where required by law, we will provide additional notice or seek consent.We encourage you to review this Privacy Policy periodically.

18. Governing Law

This Privacy Policy is governed by the laws of the Province of British Columbia and the federal laws of Canada applicable therein. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts of British Columbia.

Thank you for trusting Flashana Technologies Inc. with your information. We are committed to protecting your privacy while delivering advanced, sovereign AI solutions for demand forecasting and supply-chain decision support.

Privacy Policy Flashana Technologies Inc.

1. Introduction

By accessing our Website, using our Platform, or otherwise providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. Scope of this Policy

This Privacy Policy applies to:

Visitors to our Website (www.flashana.com)

Individuals who request demos, contact us, or subscribe to communications

Users of our Platform (account holders, administrators, and authorized users)

Prospective customers, partners, and investors who interact with us

Any other individuals whose personal information we collect in the course of our commercial activities

3. Personal Information We Collect

We may collect the following categories of personal information:

3.1 Information You Provide Directly

Contact and Account Information: Name, business email address, telephone number, job title, company name, and account credentials when you create an account, request a demo, or contact us.

Communications: Information contained in emails, contact forms, meeting notes, or other correspondence you send to us.

Pilot / Customer Onboarding Data: Business contact details and any personal information included in datasets provided for evaluation or pilot purposes.

Investor / Partner Information: Name, contact details, and professional background information provided in the course of investment or partnership discussions.

3.2 Information Collected Automatically

Technical Data: IP address, browser type and version, device type, operating system, referring URLs, pages viewed, and timestamps.

Usage Data: How you interact with our Website and Platform (features used, session duration, clicks, and navigation paths).

Cookies and Similar Technologies: See Section 10 below.

3.3 Information from Third Parties

We may receive personal information from business partners, referral sources, publicly available professional profiles (e.g., LinkedIn), or service providers who assist us with analytics, hosting, or communications, always in accordance with applicable law.

4. How We Collect Personal Information

We collect personal information in the following ways:

Directly from you when you complete forms, create accounts, request demos, or communicate with us

Automatically through cookies, server logs, and analytics tools when you visit our Website or use the Platform

From our business customers when they authorize integrations or upload data that may contain personal information

From third-party sources as described above, where permitted by law

5. Purposes for Collection, Use and Disclosure

We collect, use, and disclose personal information for the following legitimate business purposes:

Providing and Improving Our Services: To create and manage user accounts, deliver the Platform, process forecasting requests, and improve functionality, accuracy, and user experience.

Customer Support and Communications: To respond to inquiries, provide technical support, send service-related notices, and manage the customer relationship.

Marketing and Business Development: To send information about our products, pilots, events, or relevant industry insights (you may opt out at any time).

Security and Fraud Prevention: To protect the Platform, detect and prevent unauthorized access, and maintain the integrity and security of our systems.

Legal and Regulatory Compliance: To comply with applicable laws, respond to lawful requests from authorities, and protect our legal rights.

Business Operations: For internal analytics, quality assurance, research and development (including SR&ED activities), and to support investor or partnership discussions (using aggregated or de-identified information where possible).

6. Consent

We collect, use, and disclose personal information with your knowledge and consent, except where otherwise permitted or required by law. Consent may be express (e.g., checking a box, signing an agreement) or implied (e.g., where the purpose is obvious from the context).

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services. To withdraw consent or update your preferences, please contact us using the details in Section 15.

Where we process personal information as a service provider to our business customers, we rely on the customer to ensure that appropriate consents or other lawful bases have been obtained from the relevant individuals.

7. Disclosure of Personal Information

We do not sell personal information. We may disclose personal information in the following circumstances:

Service Providers: To trusted third-party processors who assist us with hosting, analytics, email delivery, customer support, or development (e.g., cloud infrastructure providers). These parties are contractually required to protect the information and use it only for the purposes we specify.

Business Partners: With partners involved in joint pilots or integrations, under appropriate confidentiality and data protection agreements.

Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, property, or safety, or that of others.

Corporate Transactions: In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

8. Data Residency and Cross-Border Transfers

By providing personal information to us, you acknowledge that it may be transferred to, stored, or processed in jurisdictions outside your province of residence, and that while in those jurisdictions it may be subject to the laws of those jurisdictions.

9. Retention of Personal Information

We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required or permitted by law. Retention periods vary depending on the nature of the information and our legal and business requirements.

Account information is generally retained for the duration of the commercial relationship plus a reasonable period thereafter for legal, audit, and record-keeping purposes. Website analytics data is typically retained for shorter periods or in aggregated form.

When personal information is no longer required, we securely destroy, erase, or anonymize it.

10. Security Safeguards

We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, or modification. These measures include:

Encryption of data in transit (TLS) and at rest (AES-256)

Access controls and authentication mechanisms

Sovereign Canadian cloud hosting with restricted access

Regular security assessments and monitoring

Contractual requirements for service providers

While we strive to protect personal information, no method of transmission or storage is completely secure. We encourage you to use strong passwords and to notify us promptly of any suspected unauthorized access to your account.

11. Access, Correction and Accuracy

Upon written request, we will provide you with access to the personal information we hold about you, subject to limited exceptions permitted by law (for example, where disclosure would reveal personal information about another individual or confidential commercial information).

You may also request that we correct or update inaccurate or incomplete personal information. We will respond to access and correction requests within the timeframes required by applicable law (generally 30 days under PIPEDA/PIPA).

We take reasonable steps to ensure that the personal information we collect and use is accurate, complete, and up-to-date for the purposes for which it is to be used.

12. Cookies and Similar Technologies

Our Website uses cookies and similar technologies (such as web beacons and local storage) to improve functionality, analyze usage, and support security. Cookies may be session cookies (deleted when you close your browser) or persistent cookies (which remain until they expire or are deleted).

We use:

Essential cookies: Necessary for the Website and Platform to function (e.g., authentication, security).

Analytics cookies: To understand how visitors interact with our Website so we can improve it.

Preference cookies: To remember your settings and preferences.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Website or Platform. Where required by law, we will seek consent before placing non-essential cookies.

13. Third-Party Websites and Services

14. Children's Privacy

Our Website and Platform are intended for business and professional users. We do not knowingly collect personal information from individuals under the age of 16. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

15. Contact Us / Privacy Officer

If you have questions, requests, or concerns about this Privacy Policy or our personal information practices, please contact our Privacy Officer:

Privacy Officer

Flashana Technologies Inc.

2043 Casano Drive

Privacy Policy
Flashana Technologies Inc.