Privacy Policy

1. Who we are

SIRJ (“SIRJ,” “we,” “our,” or “us”) is a Canadian business that builds custom systems for home-services businesses. This Privacy Policy describes how we collect, use, share, and protect personal information when you visit, interact with, or submit information through:

• sirj.ca — our marketing site
• insights.sirj.ca — our personalized AI Insights audit
• demo.sirj.ca — our product demonstration
• Any related sub-domains, emails, calls, or follow-up communication we use to engage with you (collectively, the “Services”)

By using the Services, you agree to the collection and use of information described in this policy.

2. Information we collect

Information you provide

When you fill out the Insights questionnaire, book a Discovery Call, email us, or otherwise communicate with us, we may collect:

• Name and contact details (email, phone, company)
• Information about your business (industry, size, applications you currently use, workflows, pain points)
• Anything you voluntarily share during a call, email exchange, or form submission

Information collected automatically

When you visit our Services, we may automatically collect limited technical information such as your IP address, approximate geographic region, browser type, operating system, referring URL, and pages viewed. We may use minimal first-party storage (cookies or local storage) only where strictly necessary for the Service to function.

Information from third parties

When you book a call through Calendly, Calendly forwards your meeting details to us. If you sign up via a referral or a paid campaign, we may receive limited campaign-attribution metadata.

Sensitive personal information

We do not knowingly collect government identifiers, financial account numbers, health information, biometric data, precise geolocation, or information about minors. If you submit such information voluntarily, we will limit its use to fulfilling your specific request and delete it once that purpose is complete.

3. How we use information

We use personal information to:

• Generate your personalized Insights audit and deliver it within the timeframe quoted on insights.sirj.ca
• Schedule and prepare for Discovery Calls and follow up afterward
• Scope, build, and maintain custom systems for paying customers
• Send transactional and marketing communications you have consented to receive (you can withdraw consent at any time using the unsubscribe link in any email or by replying STOP to any SMS)
• Improve, secure, and operate the Services, including troubleshooting and analyzing aggregate usage patterns
• Comply with legal obligations and enforce our agreements

Legal bases (where required by law). Depending on the jurisdiction, we rely on one or more of the following: your consent, performance of a contract with you, our legitimate interests in operating and growing our business, or compliance with a legal obligation. Where we rely on legitimate interests, you may object to that processing as described below.

4. How we share information

We do not sell or rent personal information. We share it only:

• With service providers (sub-processors) who help us operate the Services under contractual confidentiality and data-protection obligations. These currently include:

• Calendly — meeting scheduling
• FormSubmit — questionnaire form delivery on insights.sirj.ca
• Supabase — managed database for product features where used
• Email service providers — for transactional and marketing email delivery
• Hosting providers — for serving the Services

• With your direction — for example, if you ask us to connect a third-party application during a build
• For legal reasons — to comply with applicable law, lawful request, court order, or to protect our rights, property, or safety, or that of our customers or the public
• In connection with a business transaction — such as a merger, acquisition, or sale of assets, in which case we will require any successor to honor this Privacy Policy or notify you of any material changes

5. International data transfers

SIRJ operates from Canada. Your information may be processed and stored in Canada, the United States, or any other country where we or our sub-processors operate. Where required by law, we use appropriate safeguards (such as standard contractual clauses or equivalent measures) to protect cross-border transfers.

6. Data retention

We retain personal information only as long as needed for the purposes described in this policy or as required by law. Typical retention windows:

• Insights questionnaire submissions and Discovery Call notes: up to 24 months from last contact, unless you become a paying customer
• Customer records: for the duration of the engagement plus seven (7) years for tax, accounting, and legal-defence purposes
• Email-marketing consent records: until you unsubscribe, plus a reasonable suppression period to honor your opt-out
• Server logs and operational metadata: typically up to 90 days

You may request earlier deletion at any time, subject to exceptions explained below.

7. Your privacy rights

Depending on where you live, you have some or all of the following rights regarding your personal information. We honor these rights for everyone where it is operationally reasonable to do so, regardless of jurisdiction.

• Access — request a copy of the personal information we hold about you
• Correction — ask us to fix inaccurate or incomplete data
• Deletion — ask us to delete your data, subject to legal-retention exceptions
• Portability — receive a portable copy of your data
• Opt-out — withdraw consent for marketing communications and certain processing
• Restrict or object — ask us to limit how we use your data or object to processing based on legitimate interests
• Non-discrimination — we will not discriminate against you for exercising any of these rights

How to exercise your rights

Email js@sirj.ca with the subject line “Privacy Request” and tell us what you would like us to do. We will respond within the period required by applicable law (typically 30 days under PIPEDA, 45 days under most US state laws). If we deny a request, we will tell you why and how to appeal.

Specific jurisdictional notices

• Canada (PIPEDA, PIPA AB, PIPA BC, Quebec Law 25): Our Privacy Officer is reachable at js@sirj.ca. Quebec residents have additional rights including data portability, the right to request information about automated decision-making, and the right to lodge a complaint with the Commission d'accès à l'information. If you are unsatisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial regulator.
• California (CCPA / CPRA): California residents have the right to know what categories of personal information we collect, to delete personal information, to correct inaccurate personal information, to opt out of the sale or sharing of personal information (we do not sell or share for cross-context behavioral advertising), and to limit use of sensitive personal information. We do not use or disclose sensitive personal information beyond what is necessary to provide the Services. You may designate an authorized agent to exercise rights on your behalf. We do not discriminate against consumers who exercise their rights.
• Other US states (Virginia VCDPA, Colorado CPA, Connecticut CTDPA, Utah UCPA, Texas TDPSA, Oregon OCPA, Montana MCDPA, Tennessee TIPA, Delaware DPDPA, Iowa ICDPA, Nebraska NDPA, and similar): You have rights to access, correct, delete, port, and opt out of targeted advertising, sale, or profiling that produces legal or similarly significant effects. Contact us at js@sirj.ca to exercise these rights.
• European Economic Area, United Kingdom, Switzerland (GDPR / UK GDPR): You have rights to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. You may also lodge a complaint with your supervisory authority. Where required, we will identify our EU/UK representative.

8. Email and SMS communications

Marketing emails comply with Canada's Anti-Spam Legislation (CASL) and the US CAN-SPAM Act. Every marketing email includes an unsubscribe link and our mailing address. We will honor opt-out requests promptly. Where we use SMS (for example, during a build), messages comply with the Telephone Consumer Protection Act (TCPA) and applicable Canadian rules; reply STOP at any time to opt out.

9. Cookies and similar technologies

We use only the cookies and storage strictly necessary for the Services to function. We do not currently use third-party advertising or cross-site tracking cookies. If we add analytics or advertising tracking in the future, we will update this policy and provide an in-product consent mechanism where required.

10. Security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), access controls, and vetted sub-processors. No system is perfectly secure, however, and we cannot guarantee the security of information transmitted to or from the Services.

11. Children

The Services are not directed to children under sixteen (16). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it.

12. Industry-specific note

SIRJ works with businesses across many industries (construction, professional services, wellness, real estate, and more). When a build connects an application that holds regulated data (for example, a healthcare booking system, financial records, or government identifiers), the customer is the controller of that data; SIRJ acts as a processor under the customer's direction and the contract for that engagement. We do not access regulated data on the marketing or Insights side of our Services.

13. Changes to this policy

We may update this Privacy Policy from time to time. The “Effective” date at the top will reflect the latest version. Material changes will be communicated by email to affected users where we have a current address on file, or by a prominent notice on sirj.ca.

14. Contact us

Privacy questions, requests, or complaints: js@sirj.ca.