Privacy Policy (DRAFT for legal review)

Last updated: [DATE]. Othermile for a product of [COMPANY LEGAL NAME], Calgary, Alberta ("we").

Othermile checks online orders and parcels against border rules, shipping costs and the limits a store sets. This policy explains what personal information we handle and why.

Two roles

• Store accounts: for the people who sign in (names, work emails, phone numbers), we decide how the information is used.
• Order data: when a store connects Othermile to its printer or sends orders through the API, the orders can include its customers' delivery regions and purchase amounts. We process that on the store's behalf under our Data Processing Addendum.

What we collect

• Account information: name, work email, business name, role.
• Sign in and security data: one time sign in links, session identifiers, and passkey public keys. Face and fingerprint data never leave your device.
• Order data sent by a store or its printer: order numbers, products and their classification, destination province or state and postal code where provided, prices and costs, and the routes compared. We do not need and do not ask for customer names.
• Connection secrets, such as a Printify API token, which we encrypt before storing.
• Product lists from manufacturers and importers: SKUs, descriptions, tariff codes, countries of origin, yearly volumes and values. We treat these as confidential business information, use them only to produce that business's scans, what ifs and alerts, and share them with a customs broker only when the business asks us to.
• Shopper reports from the public checker: countries, delivery type, amounts paid, delivery days and carrier. We do not collect names, emails or addresses with these reports.
• Billing: handled by Stripe. We store a customer identifier and plan, never card numbers.

Why we use it

To run order checks and approvals, keep a tamper evident record of decisions, improve estimates using aggregated real outcomes, bill, prevent abuse, and meet legal obligations. We do not sell personal information, and we do not use order data to train AI models.

Aggregated insights

Real world outcomes are only shown in aggregate, and only once at least five reports exist for a route, so no single report can be singled out.

Where it is stored

In Canada, with [HOSTING PROVIDER] in [REGION]. Some service providers may process data outside Canada; see the subprocessor list.

How long we keep it

Readable order details are deleted after the retention period of the store's plan (30 days to 7 years). Signed decision records hold fingerprints (hashes) rather than readable details and are kept for the life of the account. Account data is deleted within 90 days after an account closes, unless the law requires us to keep it.

Your rights

You may ask to access or correct your personal information, or withdraw consent, by writing to [PRIVACY EMAIL]. You may complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

Contact

Privacy officer: [NAME], [EMAIL], [MAILING ADDRESS, CALGARY, AB].