Privacy Policy

01Who we are

TriNAG Technology Solutions ("TriNAG", "we", "us") builds enterprise automation and compliance software. We are based in Mississauga, Ontario, Canada, and we are the organisation responsible for the personal information described in this policy.

For any question about this policy, or to exercise any right described in it, write to it@trinagit.com. Please put "Privacy" in the subject line so it reaches the right person quickly.

02What this policy covers

This policy covers this website and the forms on it. It does not cover the software we build and operate for clients under a separate engagement — in that work we normally act as a service provider (a "processor") on the client's instructions, and the client's own privacy notice governs. It also does not cover websites we link to, including any client platform we showcase.

03What we collect

We collect two kinds of information, and we are deliberate about keeping the second kind as small as possible.

Information you give us. The enquiry form on our contact page asks for your name, your email address and your message. That is all it asks for, and all we receive. If you email us directly, we receive whatever you put in that email.

TriNAG Assist, the website assistant. If you use the chat assistant, the messages you type are sent to our server and to OpenAI to write the replies. If you ask about working with us — a project, a quote, a demo or a call — the conversation, with any name, email address, phone number or company you choose to share, is emailed to our team so we can follow up. Please do not type passwords, identity numbers or payment details into it.

Information collected automatically. Our web server records ordinary request logs, which include your IP address, the pages requested, timestamps and your browser's user-agent string. This is standard server operation and is used to keep the site running and secure.

What we do not collect. This website sets no cookies, uses no analytics or advertising technology and embeds no social media trackers. The only thing it stores in your browser is the assistant's current conversation, kept in session storage so it survives moving between pages and cleared when you close the tab. We do not build profiles of visitors and we do not track you across other websites. The one third party your browser contacts is Google Fonts, which serves the typefaces — see the table below.

04Why we use it, and on what basis

Where Canadian law applies, we rely on consent under PIPEDA and limit use to the purposes identified at collection. Where the GDPR or UK GDPR applies to a visitor, the equivalent lawful bases are shown above.

05Who else can see it

We do not sell, rent or trade personal information, and we do not disclose it for advertising. A small number of service providers necessarily handle data on our behalf in order for the site to work:

We may also disclose information where the law requires it — for example in response to a valid court order — or where it is necessary to establish or defend a legal claim.

06Information leaving Canada

Several of the providers above operate in the United States, so information handled by them is stored on or accessible from servers outside Canada. While it is in another country it is subject to that country's laws, including lawful access by its courts and government authorities. We use established providers with contractual data protection commitments, but you should be aware of this before submitting information.

07How long we keep it

• Enquiries and email correspondence: retained for as long as needed to deal with the matter and for any follow-up it leads to, then archived or deleted in the ordinary course of business. Ask us to delete yours sooner and we will.
• Server logs: retained on a short rolling basis for security and troubleshooting.

We do not operate a database of website visitors, and this website has none. What you send through the enquiry form, or an enquiry made through the assistant, arrives as an email and is not written to any other system. The assistant's conversation lives in your browser tab; our server keeps only short-lived counters used to prevent abuse.

08How we protect it

The site is served over HTTPS. We hold no database of visitor information, which removes a whole class of risk. Access to the inbox that receives enquiries is limited to the people who need it. No system is perfectly secure, and we cannot guarantee the security of information while it is in transit to us — but we will tell you, and the relevant regulator, if a breach creating a real risk of significant harm occurs, as PIPEDA requires.

09Your rights

You may ask us to:

• tell you what personal information we hold about you, and how we have used it;
• correct anything that is inaccurate or incomplete;
• delete what we hold, where we are not required to keep it;
• stop using it, or withdraw a consent you previously gave — this will not affect anything done before you withdrew it;
• provide a copy in a portable format, or restrict or object to a particular use, where the GDPR or UK GDPR applies to you.

Write to it@trinagit.com. We will respond within 30 days, as PIPEDA requires, and we will not charge you for a reasonable request. We may need to verify your identity first, so that we do not disclose your information to someone else.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Visitors in the EU or UK may complain to their own supervisory authority.

10Children

This website is intended for business audiences and for developers old enough to enter into a contract. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, write to us and we will delete it.

11Changes to this policy

If we change what we collect or how we use it, we will update this page and change the date shown at the top. Where a change is significant and we hold your contact details, we will tell you directly.