Privacy Policy

We collect a small amount of information, only when needed:

• Contact information you submit voluntarily: name, email address, company name, and the message you write when you fill out a form on this site.
• Purchase information: when you buy a product, our payment processor (Stripe) collects your name, email, billing address, and card details. We do not see or store your card details. We receive your name, email, and the fact that you purchased a product.
• Anonymous usage analytics: we use Vercel Analytics, which does not use cookies and does not track individuals across sites. It tells us how many people visit each page and roughly where they are in the world. It does not identify you.
• Free tool inputs: our free tools (domain checker, password checker, business exposure scanner) process information you enter directly in your browser. We do not store this information. The password checker uses a privacy-preserving technique (k-anonymity) so your password is never sent to any third party in full.

What we do not collect: we do not track you across the web, we do not sell data to third parties, we do not use advertising cookies, and we do not build profiles of individual visitors.

We use the information we collect for these specific purposes:

• To respond to your inquiry when you fill out a contact form
• To deliver the products you have purchased
• To send you transactional emails about your purchase (e.g. download links)
• To meet our legal obligations (tax records, fraud prevention)
• To improve the website based on aggregate, anonymous usage patterns

We do not send marketing emails unless you have explicitly asked to receive them.

We share your information only with these service providers, and only as needed:

• Stripe (payment processing): handles your payment securely. Their privacy policy is at stripe.com/privacy.
• Vercel (website hosting): hosts this website. Their privacy policy is at vercel.com/legal/privacy-policy.
• Resend (email forwarding): delivers contact form submissions to our inbox. Their privacy policy is at resend.com/legal/privacy-policy.
• Zoho Mail (email): hosts our info@maplenorthit.com inbox. Their privacy policy is at zoho.com/privacy.html.

We do not share your information with anyone else unless required by law (e.g. valid court order, tax audit).

Maple North IT operates from Canada. Our service providers are based in the United States, the European Union, and other regions. By using this site, you understand that your information may be processed in countries outside of your own.

For European Union visitors: we rely on the standard contractual clauses and jurisdiction-specific protections that our service providers maintain (Stripe, Vercel, Resend, and Zoho all comply with applicable EU data transfer requirements).

We keep information only as long as needed for the purposes above, or as required by law:

• Contact form submissions: 24 months from receipt, then deleted unless an active engagement is in progress.
• Purchase records: 7 years, as required by Canadian tax law.
• Email correspondence: until the conversation is closed, then archived for up to 3 years.
• Analytics: aggregated and anonymized; retained indefinitely.

Depending on where you live, you may have rights under privacy laws including PIPEDA (Canada), GDPR (European Union), and similar laws in other regions. These typically include:

• The right to know what information we hold about you
• The right to receive a copy of your information
• The right to correct inaccurate information
• The right to ask us to delete your information (subject to legal exceptions)
• The right to withdraw consent for processing
• The right to file a complaint with your local privacy authority

To exercise any of these rights, email info@maplenorthit.com. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

Canadian residents may file a complaint with the Office of the Privacy Commissioner of Canada. European Union residents may file a complaint with their national data protection authority.

We use reasonable technical and organizational measures to protect your information, including encryption in transit (HTTPS), access controls, and reputable service providers. No method of online transmission or storage is 100% secure. We will notify affected individuals and applicable regulators of any security breach as required by law.

Our products and services are intended for businesses and adult professionals. We do not knowingly collect information from children under 16. If you believe we have collected information from a child, contact us and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be announced on this page and, where appropriate, by email to active customers.

For any privacy question or to exercise your rights: