Privacy Policy

Sixty67 Intelligence Inc. ("Sixty67", "we", "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what we collect, how we use it, and the rights you have over it. This policy is aligned with the Personal Information Protection and Electronic Documents Act (PIPEDA), the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

Information We Collect

• Account information: full name, email address, password (hashed), organization name, and role.
• Usage information: recipes, menus, events, catering jobs, and other content you create or upload.
• Technical information: IP address, browser type, device identifiers, and interaction logs.
• Payment information: payments are processed by Stripe. We do not store full card numbers; Stripe tokenizes and holds card data.

How We Use Your Information

• To provide, operate, and improve the Sixty67 Intelligence platform.
• To create and manage your account and subscription.
• To process payments and issue invoices.
• To provide customer support and respond to inquiries.
• To send service notices, security alerts, and (with consent) product updates.
• To detect, prevent, and address fraud, abuse, and security issues.

Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data on the following legal bases: (a) contract, to deliver the service you signed up for; (b) legal obligation, to meet tax and record-keeping duties; (c) legitimate interests, to secure the platform and prevent fraud; and (d) consent, for optional marketing communications, which you may withdraw at any time.

Data Sharing

We do not sell your personal information. We share data only with the sub-processors listed in our Sub-Processors List that are necessary to run the service, and where required by law.

Data Retention

We keep your data for as long as your account is active. After account deletion, personal data is removed within 30 days, except financial records retained for 7 years as required by Canadian tax law. See our Data Retention Policy for details.

Your Privacy Rights

• Canada (PIPEDA): access, correct, and withdraw consent for your personal information.
• EU (GDPR): access, rectify, erase, restrict, port, object, and withdraw consent.
• California (CCPA): know, delete, opt-out of sale, and non-discrimination.

To exercise any right, email privacy@sixty67intelligence.com.

Security Measures

We use TLS 1.2+ encryption in transit, AES-256 encryption at rest, role-based access control, and row-level security on all data. See our Security Overview for more.

Children's Privacy

The service is not directed to children under 16, and we do not knowingly collect their personal information. Account holders must be 18 or older.

International Data Transfers

Some sub-processors are located outside Canada. We use Standard Contractual Clauses (SCCs) and equivalent safeguards to protect data transferred internationally.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated "Last Updated" date.

Contact

Questions about privacy? Contact our Privacy team at privacy@sixty67intelligence.com.