Privacy & Data Policy

Effective Date: February 16, 2026  |  Last Updated: February 16, 2026

TransCanada Digital Inc. ("we", "us", "our") operates the website transcanadadigital.com and the platform at audit.transcanadadigital.com. This Privacy & Data Policy explains how we collect, use, store, and protect information when you use our services.

1. Information We Collect

1.1 Information You Provide

• Website URLs — When you submit a URL for scanning, we collect that URL to perform the audit.
• Contact Information — If you use our contact form, we collect your name, email, and message content.
• Account Information — Pro and Agency subscribers provide email and billing details (processed securely via Stripe).

1.2 Information Collected Automatically

• Scan Results — Technical data about scanned websites (schema markup, page speed, SEO signals, bot access rules). This is publicly available information about the scanned site, not private data.
• Server Logs — Standard web server logs including IP address, browser type, and request timestamps. These are retained for security monitoring only.

1.3 Information We Do NOT Collect

• We do not use tracking cookies or third-party analytics
• We do not use advertising networks or retargeting pixels
• We do not collect personal data from scanned websites
• We do not use fingerprinting or cross-site tracking

2. How We Use Your Information

• Perform Scans — URLs are used solely to fetch publicly available technical data from your website via HTTP requests
• Cache Results — Scan results are cached in our PostgreSQL database to improve performance. Free-tier results are cached for 30 days, Pro-tier for 24 hours
• Respond to Inquiries — Contact form submissions are used to reply to your questions
• Process Payments — Billing data is handled entirely by Stripe. We never store credit card numbers
• Improve Our Service — Aggregated, anonymized scan data may be used to improve our scoring algorithms

3. Data Storage & Security

• Scan data is stored in a PostgreSQL database hosted on Railway's infrastructure (encrypted at rest)
• All data transmission uses TLS 1.2+ encryption (HTTPS enforced)
• Cached scan results are automatically pruned — free-tier every 30 days, pro-tier every 24 hours
• We use HTTP-only scanning — no browser-based crawling, no screenshots, no JavaScript execution on your site
• Server access is restricted to authorized personnel only
• Security headers (HSTS, X-Frame-Options, CSP) are enforced on all pages

4. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe — Payment processing (PCI DSS compliant)
• Railway — Cloud hosting infrastructure
• Google PageSpeed Insights API — To measure website performance (only the URL is shared)
• Law Enforcement — Only when required by Canadian law or valid legal process

5. Your Rights

Under Canadian privacy law (PIPEDA) and applicable provincial legislation, you have the right to:

• Access — Request a copy of any personal data we hold about you
• Correction — Request corrections to inaccurate personal data
• Deletion — Request deletion of your personal data and cached scan results
• Withdraw Consent — Withdraw consent for data processing at any time

To exercise these rights, contact us at the address below.

6. Data Retention

• Scan Cache (Free) — Automatically deleted after 30 days
• Scan Cache (Pro) — Automatically deleted after 24 hours
• Contact Form Submissions — Retained for 12 months, then deleted
• Server Logs — Retained for 90 days for security purposes
• Subscriber Data — Retained while subscription is active, deleted within 30 days of cancellation upon request

7. Cookies

Our website uses localStorage (browser-side storage) to temporarily hold scan results so you can view your report. This data stays on your device and is never transmitted to third parties. We do not use tracking cookies, advertising cookies, or third-party cookie services.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

9. International Users

TransCanada Digital is based in Canada. If you access our services from outside Canada, your data may be transferred to and processed in Canada, which is recognized by the European Commission as providing an adequate level of data protection.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of our services after changes constitutes acceptance of the revised policy.

11. Contact Us