Privacy Policy

1. Introduction

TariffCalc ("we", "our") operates the tariffcalc.ca website from Montreal, Quebec, Canada. This privacy policy describes how we collect, use, disclose, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act to modernize legislative provisions as regards the protection of personal information (Law 25).

2. Information We Collect

Information You Provide

• Account information: email address, name, company name (upon registration)
• Payment information: securely processed by Stripe. We never store your credit card numbers on our servers.
• Support requests: emails and messages sent via the contact form

Information Collected Automatically

• Calculation history: HS codes searched, duty calculations performed, saved products
• Technical data: IP address, browser type, operating system, pages visited, visit duration
• Usage data: features used, frequency of use

3. How We Use Your Information

• Provide, maintain, and improve our tariff calculation and classification services
• Manage your account, subscription, and process payments
• Send important notifications about tariff changes and service updates
• Improve the accuracy of our AI classification engine (aggregated and anonymized data only)
• Respond to your support requests
• Comply with applicable legal obligations

4. Third-Party Services

We share certain information with the following service providers, only to the extent necessary to deliver our services:

• Supabase (database hosting and authentication) — stores your account data and calculation history
• Stripe (payment processing) — securely processes your payment information. PCI DSS compliant.
• Vercel (web hosting) — hosts our web application and may collect server logs
• OpenAI (AI classification) — processes product descriptions for HS code classification. No personal data is sent to OpenAI.
• Resend (email delivery) — sends transactional and notification emails

We never sell your personal information to third parties.

5. Cookies

• Essential cookies: necessary for the site to function (authentication, language preferences). You cannot disable these.
• Analytics cookies: used to understand site usage and improve our services. You can disable these in your browser settings.

6. Data Retention

• Account data: retained as long as your account is active. Deleted within 30 days of account deletion.
• Calculation history: retained for the duration of your subscription. Anonymized or deleted after account deletion.
• Technical logs: retained for a maximum of 90 days.
• Billing data: retained in accordance with accounting legal requirements (7 years in Canada).

7. Security

We implement technical and organizational security measures to protect your personal information, including: SSL/TLS encryption for all communications, secure authentication, row-level security (RLS) policies in our database, and restricted access to personal data to our authorized team only.

8. Your Rights

In accordance with PIPEDA and Quebec Law 25, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information (right to erasure)
• Withdraw your consent to the processing of your data
• Request portability of your data in a structured and commonly used format
• File a complaint with the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec

You can exercise these rights from your account settings or by contacting us at support@tariffcalc.ca. We will respond within 30 days of your request.

9. International Transfers

Some of our service providers (Supabase, Stripe, Vercel, OpenAI) may process data in the United States or other jurisdictions. When personal information is transferred outside of Canada, we ensure that adequate contractual safeguards are in place, in accordance with the requirements of PIPEDA and Law 25.

10. Children

TariffCalc is not intended for persons under 18 years of age. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this privacy policy periodically. Significant changes will be communicated by email or through a prominent notice on our site. The "last updated" date at the top of this page indicates the latest revision.

12. Privacy Officer

For any questions about this privacy policy or to exercise your rights, contact our Privacy Officer: