Legal

Privacy Policy

Last updated: June 19, 2026

Xec Corp (“Xec Corp,” “we,” “us”), the company behind XecSuite, is based in Ontario, Canada. This policy explains what information we collect through this website (xecsuite.com), how we use it, and the choices you have.

Data we process inside the XecSuite platform on behalf of a customer is governed by that customer’s written agreement and the commitments on our Trust Center. This policy covers the public website and our sales and marketing activity.

Information you give us

When you submit our contact form or email us, we collect the details you choose to provide so we can respond and assess fit:

  • Your name and work email
  • Company name, your role, and company size
  • What you want help with (your selected priority, the tools you use today, and your message)

Information collected automatically

Like most websites, we collect limited technical and usage data through cookies and similar technologies — your IP address, device and browser type, the pages you visit, and the site or ad that referred you.

We use Google Analytics 4 to understand how the site is used and Google Ads conversion tracking to measure which campaigns lead to genuine inquiries. These tools set cookies and process data on Google’s infrastructure.

How we use your information

  • Respond to your inquiry, scope a diagnostic, and follow up about XecSuite
  • Operate, secure, and improve the website (including rate-limiting and spam prevention on the contact form)
  • Measure marketing and advertising performance and improve our outreach
  • Meet legal, accounting, and record-keeping obligations

Cookies and analytics choices

You can control cookies through your browser settings and opt out of Google Analytics with Google’s opt-out browser add-on. Google describes how it uses data from sites that use its services at policies.google.com/technologies/partner-sites.

We do not sell your personal information.

Service providers we share with

We share information only with the providers that help us run the site and respond to you, under their own security and privacy commitments:

  • Google (Analytics and Ads) — website analytics and conversion measurement
  • Our email provider (Resend) — to deliver inquiry notifications to our team
  • Our customer-relationship and lead-management platform — to track and follow up on inquiries
  • Our cloud hosting and infrastructure providers — including sovereign Canadian hosting where required

Customer data inside XecSuite

For data processed inside the XecSuite platform, control and ownership are part of the product. You own your data: company memory, evidence, embeddings, and transcripts are exportable anytime in open formats and deleted on termination.

Customer data is never used to train shared or external models, tenants are isolated at the database layer using Postgres row-level security, sovereign Canadian hosting is available, and outbound or irreversible actions are approval-gated. Full details are on our Trust Center.

Data retention

We keep website inquiry data for as long as needed to respond to you and maintain our business relationship and records, then delete or anonymize it. Customer platform data is retained and deleted according to the customer agreement.

Where your data is processed

Our website analytics and email providers may process data in Canada and the United States. For customer engagements that require it, platform data can be hosted on sovereign Canadian infrastructure.

Your privacy rights

Consistent with Canadian privacy law (PIPEDA) and applicable regulations, you can ask us to access, correct, or delete the personal information we hold about you, or withdraw consent to marketing contact. Email us and we will respond within a reasonable time.

Security

We protect information with encryption in transit, least-privilege connectors that terminate on disconnect, tenant isolation, and human approval gates for sensitive actions. No method of transmission or storage is perfectly secure, but we work to protect your data and limit access to those who need it.

Children

This website and XecSuite are intended for businesses and are not directed to children under 16. We do not knowingly collect their information.

Changes and contact

We may update this policy as our products and practices evolve; the “Last updated” date above reflects the latest version.

Questions or privacy requests? Contact us at nick@xecsuite.com.

Questions?

Want to talk through how we handle your data?

We are happy to walk your team or IT reviewer through exactly how XecSuite handles data, residency, and access before anything goes live.