Draxus
Sign InStart Building

Privacy Policy

Version 1.0.0|Last updated: 2026-01-08

1. Introduction

Draxus Inc. ("Draxus," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our emergency response training scenario builder platform and related services (the "Service"). This Privacy Policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws.

By accessing or using the Service, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

  • Create an account: Full name, email address, password, and organization information
  • Use the Service: Training scenarios, images, content, and other materials you create or upload
  • Contact us: Information you provide when you contact our support team or communicate with us
  • Participate in surveys or promotions: Responses and feedback you choose to provide

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information, including:

  • Device information: Device type, operating system, unique device identifiers, browser type and version
  • Log data: IP address, access times, pages viewed, referring URL, and other system activity
  • Usage data: Features used, actions taken within the Service, and interaction patterns
  • Location data: General geographic location based on IP address

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. For more details, see Section 9 (Cookies and Tracking Technologies) below.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Provide and maintain the Service: Create and manage your account, process transactions, and deliver the features you request
  • Improve and develop the Service: Analyze usage patterns, troubleshoot issues, and develop new features and functionality
  • Communicate with you: Send service-related announcements, updates, security alerts, and support messages
  • Personalize your experience: Customize content and features based on your preferences and usage
  • Ensure safety and security: Detect, prevent, and address fraud, abuse, and security issues
  • Comply with legal obligations: Meet our legal requirements and respond to lawful requests from authorities
  • Marketing (with consent): Send promotional communications if you have opted in to receive them

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service providers: Third-party vendors who assist us in operating the Service, such as cloud hosting providers, analytics services, and customer support tools. These providers are contractually obligated to protect your information.
  • Organization members: If you use the Service as part of an organization, administrators and other authorized members may have access to certain information about your account and activity.
  • Business transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity.
  • Legal requirements: When required by law, legal process, or government request, or to protect our rights, privacy, safety, or property, or that of our users or the public.
  • With your consent: When you have given us explicit consent to share your information for a specific purpose.

5. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. When determining retention periods, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process the information, and applicable legal requirements.

When your personal information is no longer required, we will securely delete or anonymize it. If deletion is not possible (for example, because the information has been stored in backup archives), we will securely store the information and isolate it from any further processing until deletion is possible.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy laws, you have the following rights:

  • Access: You have the right to request access to the personal information we hold about you and to receive a copy of that information.
  • Correction: You have the right to request that we correct any inaccurate or incomplete personal information we hold about you.
  • Withdrawal of consent: You may withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice.
  • Complaint: You have the right to file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, please contact us using the information provided in Section 12 below. We will respond to your request within the timeframes required by applicable law.

8. International Data Transfers

Your personal information may be transferred to and processed in countries other than Canada, where our service providers are located. These countries may have data protection laws that are different from the laws of Canada. When we transfer your information to other countries, we take appropriate steps to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable Canadian privacy laws, including implementing appropriate contractual safeguards with our service providers.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of the Service. Cookies are small data files stored on your device that help us improve the Service and your experience.

Types of cookies we use:

  • Essential cookies: Required for the Service to function properly, including authentication and security cookies
  • Functional cookies: Remember your preferences and settings to personalize your experience
  • Analytics cookies: Help us understand how you use the Service so we can improve it

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

10. Children's Privacy

The Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe that a child under 18 has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also provide additional notice, such as sending an email notification. We encourage you to review this Privacy Policy periodically for any changes.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer at:

Draxus Inc.

Privacy Officer

Email: privacy@draxus.com

Ontario, Canada

13. Office of the Privacy Commissioner of Canada

If you are not satisfied with our response to your privacy concerns, you may contact the Office of the Privacy Commissioner of Canada:

Office of the Privacy Commissioner of Canada

30 Victoria Street

Gatineau, Quebec K1A 1H3

Toll-free: 1-800-282-1376

Website: www.priv.gc.ca