Privacy Policy
Our Commitment to Privacy
Canada Well Finder is committed to protecting your privacy in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). This policy explains how we collect, use, and safeguard your personal information.
Information We Collect
Canada Well Finder collects minimal information necessary to provide our service:
- Account Information: When you create an account, we collect your email address and password (encrypted). You may optionally provide a display name.
- Usage Data: We use Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal information. We track aggregate page views and general usage patterns only.
- User-Generated Content: If you upload files (images, PDFs, spreadsheets) as well annotations, or save pinned wells, this data is stored in your account.
- Payment Information: Credit card details are processed directly by Stripe and are never stored on our servers. We only receive confirmation of successful payments and basic transaction details (amount, date, last four digits of card).
How We Use Your Information
We use the information we collect to:
- Provide and maintain the Canada Well Finder service
- Process credit purchases and manage your account balance
- Sync your pinned wells, preferences, and annotations across devices
- Send important service-related notifications (e.g., password resets, security alerts)
- Improve our service based on aggregate usage patterns
- Respond to your inquiries and support requests
We do not sell, rent, or share your personal information with third parties for marketing purposes. We will never send you unsolicited marketing emails.
AI Processing
When you request an AI-powered well or company analysis, relevant well data is sent to third-party AI services (currently Anthropic) for processing. Important details:
- Only well-related data is sent—no personal information from your account
- AI providers process data according to their own privacy policies
- Generated analyses are stored in your account for 90 days
- You may share analyses via unique URLs; shared analyses are accessible to anyone with the link
By using AI analysis features, you consent to this data processing.
Data Storage and Security
Your data is stored securely using industry-standard practices:
- User accounts and data are stored on Supabase, a secure cloud database platform
- All data transmission is encrypted using HTTPS/TLS
- Passwords are hashed using industry-standard algorithms and never stored in plain text
- File uploads are stored in secure cloud storage with access controls
Data Location: Your data may be stored and processed in Canada and the United States, depending on our service providers' infrastructure. By using the service, you consent to such transfer and storage.
Third-Party Services
We use the following third-party services to operate Canada Well Finder:
- Plausible Analytics: Privacy-focused analytics that doesn't use cookies or collect personal data. View their privacy policy.
- Stripe: Secure payment processing. Your payment details are handled directly by Stripe and never touch our servers. View their privacy policy.
- Supabase: Authentication, database, and file storage services. View their privacy policy.
- Anthropic: AI analysis generation. View their privacy policy.
Cookies
Canada Well Finder uses minimal cookies:
- Authentication cookies: Essential cookies to keep you signed in to your account. These are strictly necessary for the service to function and cannot be disabled.
- Preference cookies: We may store your map preferences and settings in local browser storage (localStorage), which is not transmitted to our servers.
We do not use tracking cookies, advertising cookies, or any third-party cookies for marketing purposes. Our analytics (Plausible) are completely cookieless.
Your Rights
Under Canadian privacy law, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct your account information at any time through your profile settings
- Deletion: Request deletion of your account and associated data
- Export: Download your pinned wells, annotations, and account data
- Withdraw Consent: You may withdraw consent to data processing by closing your account
To exercise these rights, contact us through the support channels available on our website. We will respond to requests within 30 days.
Data Retention
We retain your data as follows:
- Account data is retained until you request deletion
- AI well and company analyses expire and are deleted after 90 days
- Exported files are automatically deleted after 24 hours
- Analytics data is aggregated and contains no personal identifiers
- Payment records are retained as required by Canadian tax law (typically 7 years)
Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law.
Children's Privacy
Canada Well Finder is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a user under 18, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us.
Security Breach Notification
In the unlikely event of a data breach affecting your personal information, we will:
- Notify affected users via email within 72 hours of confirming the breach
- Report the breach to the Office of the Privacy Commissioner of Canada as required by PIPEDA
- Take immediate steps to contain the breach and prevent further unauthorized access
- Provide information about what data was affected and steps you can take to protect yourself
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Significant changes will be announced via email to registered users. We will update the effective date when we make changes.
We encourage you to review this policy periodically. Your continued use of the service after changes constitutes acceptance of the updated policy.
Contact and Complaints
If you have questions about this privacy policy, how we handle your data, or wish to make a complaint, please contact us through the support channels available on our website.
If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.