Legal

Privacy Policy

NVC360 Inc. is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit nvc360.com or use NVC360’s products and services, including ArrivePing (the “Platform”). We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

Last Updated: October 7, 2026 | Effective Date: March 1, 2026

1. Who We Are

NVC360 Inc. is an AI software company headquartered in Winnipeg, Manitoba, Canada. We build AI tooling and automations, custom AI solutions and enterprise software. Our product ArrivePing is a field service platform for businesses that deploy field technicians — helping them manage dispatch, scheduling, real-time tracking, and automated client communications.

Data Controller: NVC360 Inc., Winnipeg, Manitoba R3B 1B3, Canada Privacy Officer Email: privacy@nvc360.com

2. Information We Collect

We collect the following categories of personal information:

Information You Provide Directly:

  • Contact and registration details: first name, last name, company name, email address, phone number
  • Beta access requests: team size, industry, role
  • Account credentials: username, password (stored as an encrypted hash — we never store plain-text passwords)
  • Support communications: messages, attachments, and issue descriptions you send to our team
  • Payment details: processed by Stripe — we do not store full card numbers or CVV codes

Information Collected Automatically:

  • Log data: IP address, browser type and version, pages visited, time and date of access, referring URL
  • Device data: device type, operating system, screen resolution
  • Usage data: features accessed, frequency of use, error reports, session duration
  • Cookies and tracking technologies: see Section 7 for full details

Information From Third Parties:

  • Analytics providers (Google Analytics — with anonymized IP addresses)
  • Integration partners when you connect third-party tools such as CRM, payroll, or accounting software to your NVC360 account

3. How We Use Your Information

We use your personal information to:

  • Provide, operate, maintain, and improve the Platform and website
  • Process beta access requests and onboard new clients
  • Send transactional communications: account confirmations, password resets, billing receipts, and service notices
  • Send marketing and product update emails — only with your explicit consent, which you may withdraw at any time
  • Analyze site and platform usage to improve features, fix bugs, and enhance security
  • Respond to support requests and resolve technical issues
  • Comply with applicable Canadian laws and regulatory requirements
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Enforce our Terms and Conditions and protect the rights and safety of our users

Legal Basis: Under PIPEDA, we process personal information based on your consent, contractual necessity (to deliver the services you’ve requested), or our legitimate business interests. You may withdraw consent for non-essential processing at any time by contacting privacy@nvc360.com.

4. Sharing and Disclosure of Your Information

NVC360 does not sell, rent, or trade your personal information to third parties. We may share information only in the following circumstances:

Service Providers: We work with trusted third-party companies to operate our platform, including:

  • Hosting: Cloudflare (website) and cloud infrastructure providers (Platform)
  • Email delivery: Resend
  • Payment processing: Stripe
  • Analytics: Google Analytics (anonymized)
  • Marketing and customer relationship management: HubSpot
  • All service providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing services to NVC360.

Integration Partners: When you connect a third-party tool to your NVC360 account, we share only the data you explicitly authorize.

Legal Requirements: We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the safety of our users or the public.

Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity with the same privacy protections applied. We will notify you before your information becomes subject to a different privacy policy.

5. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

  • Beta and contact form submissions: up to 3 years from submission date
  • Active account data: retained for the duration of your account plus 2 years after account closure
  • Server log data: up to 12 months
  • Financial and billing records: 7 years as required by Canadian tax law (Income Tax Act)
  • Support communications: 2 years from resolution date

You may request deletion of your personal information at any time. See Section 6 for how to submit a request.

6. Your Rights Under PIPEDA

As a Canadian resident — and where applicable, as an individual whose data we process — you have the following rights:

Right of Access: Request a copy of all personal information we hold about you.

Right of Correction: Request that we correct any inaccurate or incomplete information.

Right of Deletion: Request deletion of your personal information, subject to legal retention obligations.

Right to Withdraw Consent: Withdraw consent for marketing communications or non-essential data processing at any time without penalty.

Right to Data Portability: Request your data in a structured, machine-readable format (CSV or JSON).

Right to Complain: File a complaint with the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca if you believe we have mishandled your personal information.

How to Submit a Request: Email privacy@nvc360.com. We will acknowledge your request within 5 business days and respond fully within 30 days as required by PIPEDA. If we require additional time, we will notify you with the reason and expected completion date.

Identity Verification: To protect your privacy, we may ask you to verify your identity before processing access, correction, or deletion requests.

7. Cookies and Tracking Technologies

We use the following types of cookies on nvc360.com:

Essential Cookies: Required for basic website functionality — session management, security tokens, and load balancing. Cannot be disabled without impacting site functionality.

Preference Cookies: Remember your settings and preferences across visits, such as language selection and display options.

Analytics Cookies: Help us understand how visitors interact with our website using Google Analytics with anonymized IP addresses. These cookies require your consent and can be disabled via our Cookie Consent banner.

Marketing Cookies: Used to measure the effectiveness of our advertising campaigns. Only activated with your explicit consent.

Managing Cookies: You can manage your cookie preferences at any time using the Cookie Settings option in our website footer, or by adjusting your browser settings. Note that disabling essential cookies may affect website functionality.

For full details on how Google Analytics handles data, visit: policies.google.com/privacy.

8. Data Security

NVC360 implements industry-standard security measures to protect your personal information:

  • SSL/TLS encryption for all data transmitted between your browser and our servers
  • AES-256 encryption for sensitive data stored in our databases
  • Role-based access controls — only authorized NVC360 personnel can access personal data
  • Regular security assessments, penetration testing, and vulnerability scanning
  • Multi-factor authentication (MFA) required for all NVC360 staff accessing production systems
  • Incident response procedures in place for potential data breaches

Data Breach Notification: In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada (OPC) as required by PIPEDA’s mandatory breach reporting requirements.

No method of transmission over the internet or electronic storage is 100% secure. If you believe your account or data has been compromised, contact us immediately at privacy@nvc360.com.

9. Cross-Border Data Transfers

NVC360 is headquartered in Canada. Some of our service providers process data in the United States and other countries. When we transfer personal information outside Canada, we ensure appropriate safeguards are in place, including contractual data protection clauses consistent with PIPEDA requirements.

By using our platform, you acknowledge that your information may be transferred to and processed in countries outside Canada, subject to the safeguards described above.

10. Children’s Privacy

The Platform and website are intended for use by businesses and professionals. We do not knowingly collect personal information from individuals under 16 years of age. If you become aware that a child has provided us with personal information, please contact us at privacy@nvc360.com and we will take prompt steps to delete the information.

11. Third-Party Links

Our website and platform may contain links to third-party websites, applications, or services. This Privacy Policy applies only to NVC360’s services. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the privacy practices of third parties.

12. PIPEDA — The Ten Fair Information Principles

NVC360’s privacy practices are built around Canada’s ten fair information principles under PIPEDA:

  1. Accountability — Our designated Privacy Officer is responsible for all personal information under our control and for compliance with PIPEDA.
  2. Identifying Purposes — We identify the purpose for collecting personal information at or before the time of collection.
  3. Consent — We obtain meaningful, informed consent before collecting, using, or disclosing personal information.
  4. Limiting Collection — We collect only the information necessary for the identified purposes.
  5. Limiting Use, Disclosure, and Retention — We use personal information only for stated purposes and retain it only as long as necessary.
  6. Accuracy — We take reasonable steps to keep personal information accurate, complete, and up to date.
  7. Safeguards — We protect personal information with security measures appropriate to the sensitivity of the information.
  8. Openness — Our privacy practices and policies are available to anyone upon request.
  9. Individual Access — Individuals have the right to access and correct their personal information held by NVC360.
  10. Challenging Compliance — Individuals may challenge NVC360’s compliance with PIPEDA by contacting our Privacy Officer.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this page
  • Post a notice on our website homepage for 30 days
  • Send an email notification to registered users where the changes materially affect their rights

Your continued use of the Platform or website after the effective date of the revised policy constitutes your acceptance of the changes.

14. Contact Our Privacy Officer

For all privacy inquiries, data access requests, complaints, or to exercise any of your rights under PIPEDA:

Email: privacy@nvc360.com Mailing Address: NVC360 Inc., Privacy Officer, Winnipeg, Manitoba R3B 1B3, Canada Response Time: We acknowledge within 5 business days and respond fully within 30 days.

To file a complaint with Canada’s federal privacy regulator: Office of the Privacy Commissioner of Canada 30 Victoria Street, Gatineau, Quebec K1A 1H3 Toll-free: 1-800-282-1376 Website: priv.gc.ca