Privacy Policy

We keep this policy clear and direct. Last updated: March 23, 2026.

What data we collect

  • Account data: email, name (if provided), and Supabase-managed authentication data.
  • Usage data: search queries, viewed datasets, and product interactions.
  • Payment data: processed by Stripe. We do not store full card numbers.
  • Analytics data: only when you opt in. Anonymous visitors are tracked in memory mode without persistent cookies.
  • For non-logged-in users, we hash IP addresses with a daily rotating salt to enforce limits. We never store raw IP addresses.

How we use your data

  • Deliver search, charting, and account features.
  • Enforce daily query and API usage limits.
  • Improve product quality through aggregate analytics.
  • We do not sell your personal data.
  • We do not use your search queries to train AI models.

Cookies and tracking

  • Anonymous users: no cookies, no localStorage, no persistent tracking.
  • Logged-in users who opt in: PostHog cookie and localStorage-based analytics.
  • Logged-in users who opt out: memory-only analytics, same as anonymous mode.

Third-party services

  • Supabase for authentication and database services.
  • Stripe for payments.
  • PostHog for product analytics.
  • Together AI or Groq for query processing.
  • Vercel for hosting and scheduling.

Your rights (PIPEDA)

  • Access your data.
  • Delete your data.
  • Withdraw analytics consent anytime.
  • Query history retention target is 90 days.

Data sourcing

Statistical data is from Statistics Canada Open Data. We are not affiliated with or endorsed by Statistics Canada.

Contact

privacy@canstats.ca

Changes

We will email registered users about material policy changes. Continued use after updates indicates acceptance.