DRAFT — requires review by Canadian privacy counsel before publication. Not in force.
Last updated: 1 November 2026 · Français
Who we are. Nysroc is run by Scopien Technologies Inc., Oakville, Ontario. Our Privacy Officer, Zameer Mulla (CEO), answers at privacy@nysroc.com. At launch Nysroc is offered to businesses in Canada and the United States only.
What we collect. Your account details (name, business email, business name, province, language), billing details (but never your card number — you type it only on Stripe's page), what you and your team put into Nysroc, and the technical and security logs needed to run and protect the Service.
Your business data is yours. For the information your business keeps in Nysroc — your clients, invoices, calls, tickets, website forms — we act only on your instructions. Export everything any time; cancel in two clicks.
We never sell your information or share it for advertising. We don't use it to train AI.
Where it lives. Nysroc is hosted in Canada (Beauharnois, Quebec, with a copy in Toronto) [CONFIRM]. Exceptions are named on our sub-processor list — chiefly:
Websites built on Nysroc. No third-party trackers. Visitor measurement and ad measurement are off until the visitor says yes; Global Privacy Control and Do Not Track are honoured automatically; IP addresses are never stored by our analytics.
How long we keep it. While your account exists. Delete your account and we keep an export for 30 days, then purge your data; encrypted backups expire within 35 days. Support tickets are kept 3 years; raw website analytics 13 months. Billing records stay 7 years and security audit logs up to 7 years because the law or security requires it.
How we protect it. Encryption in transit and at rest, multi-factor sign-in, separate database per business, least-privilege staff access, and a tamper-evident audit log you can see.
Your rights. See, correct, export or delete your information; withdraw consent; ask for a human review of an automated decision; in Quebec, ask us to stop dissemination or de-index. Most of it is self-serve in your account; otherwise email privacy@nysroc.com. We answer within 30 days, free.
Marketing email only with your consent (Canada's anti-spam law); unsubscribe in one click.
Kids. Nysroc is for businesses; no accounts under 16.
Health data. Nysroc does not host health information at launch and signs no HIPAA agreements. Don't store patient or health records in Nysroc or send them through website forms.
Not happy? Tell us first. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), the Commission d'accès à l'information du Québec (cai.gouv.qc.ca), or your provincial or US regulator.
Changes. We'll email you at least 30 days before any material change.