Privacy Policy

ZoningLogic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada, including Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), the Personal Information Protection Act (PIPA) in British Columbia, and the Personal Information Protection Act (PIPA) in Alberta, where applicable.

By using our Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

ZoningLogic's Privacy Officer is responsible for overseeing our compliance with this Privacy Policy and all applicable privacy legislation. The Privacy Officer is accountable for the organization's personal information management practices and can be reached at:

If you have any questions, concerns, or complaints about our privacy practices, or wish to exercise any of your privacy rights, please contact our Privacy Officer.

Our Service uses artificial intelligence, including large language models (LLMs) and a multi-agent orchestration workflow, to analyze zoning regulations and generate feasibility reports. It is important that you understand how your data interacts with these systems:

• •Account Data: Retained for as long as your account is active. Upon account deletion, your account data will be deleted or anonymized within 90 days, unless retention is required by law.
• •Analysis Data: Property analysis results and feasibility reports are retained while your account is active to provide you with access to your analysis history. This data is deleted when you delete your account.
• •Communication Data: Support requests and contact form submissions are retained for up to 24 months after the matter is resolved.
• •Usage and Analytics Data: Aggregated and anonymized usage data may be retained indefinitely for product improvement purposes. Identifiable usage data is retained for up to 24 months.
• •Legal Obligations: We may retain certain information for longer periods where required by law, regulation, or legitimate business purposes (e.g., tax records, fraud prevention, dispute resolution).

We use administrative, technical, and physical safeguards to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• • Industry best practices for data protection
• • Regular security assessments and updates
• • Access controls and authentication mechanisms
• • Secure data centers and infrastructure
• • Encryption of data in transit

In the event of a data breach involving your personal information that creates a real risk of significant harm, we will:

• • Notify the Office of the Privacy Commissioner of Canada as required by PIPEDA
• • Notify the Commission d'accès à l'information du Québec (CAI) if the breach involves Quebec residents, as required by Law 25
• • Notify affected individuals as soon as feasible, describing the nature of the breach, the personal information involved, steps we are taking, and steps the individual can take to reduce the risk of harm
• • Maintain records of all breaches of security safeguards as required by law

"Significant harm" includes bodily harm, humiliation, damage to reputation or relationships, loss of employment or business opportunities, financial loss, identity theft, negative effects on credit records, and damage to or loss of property.

Under Canadian privacy legislation, you have the right to:

• • Access: Request access to your personal information that we hold
• • Correction: Request correction of inaccurate, incomplete, or outdated information
• • Withdrawal of Consent: Withdraw your consent to our collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
• • Deletion: Request deletion of your personal information, subject to legal retention requirements
• • Complaint: File a complaint with the Privacy Commissioner of Canada or your provincial privacy commissioner if you believe we have violated your privacy rights
• • Information: Be informed about why we collect, use, and disclose your personal information

To exercise these rights, please contact our Privacy Officer at privacy@zoninglogic.com. We will respond to your request within 30 days, as required by Canadian privacy legislation, or inform you if we require additional time.

If you are a resident of Quebec, you have additional rights under Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), including:

• • Right to Information About Automated Processing: The right to be informed of any automated decision-making that may affect you, and to request that a human review any decision made exclusively by automated means
• • Right to Data Portability: The right to receive your personal information in a structured, commonly used technological format
• • Right to De-indexation: The right to request that hyperlinks to your personal information be de-indexed from search results, where applicable
• • Right to Be Informed: The right to be informed at the time of collection of the purposes for which your personal information is collected, the means by which it is collected, your rights of access and rectification, and your right to withdraw consent

To exercise your rights under Quebec privacy law, or to file a complaint, please contact our Privacy Officer at privacy@zoninglogic.com. You may also contact the Commission d'accès à l'information du Québec at www.cai.gouv.qc.ca.

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages (such as marketing emails, newsletters, and promotional communications) with your express consent.

We use cookies and similar tracking technologies to track activity on our Service and store certain information. Cookies are small data files stored on your device.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted or expired).

Your information is primarily stored and processed in Canada. However, we may transfer your information to and process it in countries other than Canada, including the United States, where our service providers (including AI model providers and cloud infrastructure) may be located. These countries may have data protection laws that differ from those in Canada.

When we transfer personal information outside of Canada, we take appropriate safeguards to ensure your information receives an adequate level of protection in accordance with PIPEDA and this Privacy Policy. This may include contractual protections, ensuring the recipient is subject to similar privacy laws, or obtaining your explicit consent where required.

By using our Service, you consent to the transfer of your information to these countries for the purposes described in this Privacy Policy.

If you are located in the European Economic Area (EEA), we process your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR). Our lawful basis for processing your personal data depends on the type of data and the context in which we collect it:

• • Consent: Where you have given us explicit consent (e.g., for marketing communications or non-essential cookies)
• • Contract Performance: Where processing is necessary to provide you with the Service you requested
• • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights

You have the right to: access your personal data; rectify inaccurate data; request erasure of your data; restrict processing; data portability; object to processing; and withdraw consent at any time. To exercise these rights, contact our Privacy Officer at privacy@zoninglogic.com.

Canada has been recognized by the European Commission as providing adequate data protection for transfers of personal data from the EEA to Canadian organizations subject to PIPEDA.

You also have the right to lodge a complaint with your local data protection supervisory authority.