Privacy Policy

TradeRig ("TradeRig," "we," "our," or "us") operates the traderig.app and traderig.ca platforms. We are based in Canada and are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

For privacy inquiries, contact us at support@traderig.app.

We collect information you provide directly and information generated through your use of the platform:

• Account information: name, email address, password (hashed), and organization details provided at registration.
• Workspace data: safety check submissions, incident reports, training records, crew and member information, corrective actions, and audit log entries created within your organization's workspace.
• Simulation activity: scenario results, scores, and diagnostic responses generated through TradeRig Sim.
• Usage data: page views, feature interactions, session duration, and error logs collected for platform improvement and security.
• Device and connection data: IP address, browser type, operating system, and device identifiers.

We do not collect payment card numbers directly. Payment processing is handled by third-party providers subject to their own privacy policies.

We use personal information to:

• Provide, operate, and improve the TradeRig platform.
• Authenticate users and maintain account security.
• Enable organizations to manage their workforce safety and training records.
• Generate reports and analytics for authorized users within your organization.
• Send transactional communications (account verification, password reset, subscription notices).
• Detect and prevent fraud, unauthorized access, and security threats.
• Comply with legal obligations and respond to lawful requests.

We do not sell your personal information to third parties. We do not use your data to train AI models.

Under PIPEDA, we process personal information with your consent (express or implied through your use of the platform), or as necessary to fulfill the contract for services you have requested, or where we have a legitimate interest that does not override your rights (such as platform security and fraud prevention).

Your data is stored on infrastructure operated by Supabase, Inc. with data centres in Canada or the United States. We implement industry-standard technical and organizational security measures including encryption in transit (TLS), encryption at rest, row-level security, and role-based access controls.

No method of transmission or storage is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

We retain personal information for as long as your account is active or as needed to provide services. Workspace data (safety records, incident reports, training records) is retained for the duration of the organization's subscription and for a period of 90 days following account termination, after which it is permanently deleted.

Audit logs are retained for a minimum of 12 months to support compliance and security purposes. You may request earlier deletion by contacting us at support@traderig.app.

We do not share personal information except:

• Within your organization: Workspace administrators and authorized members may access workspace data in accordance with their assigned roles and permissions.
• Service providers: We engage sub-processors (including Supabase, payment processors, and email delivery services) under data processing agreements that restrict their use of your data.
• Legal requirements: We may disclose information when required by law, court order, or government authority, or when necessary to protect the rights, property, or safety of TradeRig or others.
• Business transfers: If TradeRig is acquired or merges with another entity, personal information may be transferred as part of that transaction. We will notify you in advance.

Under PIPEDA, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent for certain uses of your information (subject to legal and contractual restrictions).
• Request deletion of your personal information, subject to retention obligations.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

To exercise any of these rights, contact support@traderig.app. We will respond within 30 days.

TradeRig uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

We may update this Privacy Policy from time to time. If we make material changes, we will notify registered users by email and update the effective date above. Continued use of the platform after notification constitutes acceptance of the updated policy.

Privacy Officer, TradeRig
support@traderig.app