Privacy Policy

1. Who we are

Nimbus Analytica Inc. ("Nimbus Analytica", "we", "us") is an Ontario, Canada company. We help teams decide whether to build, buy or skip a software or AI project. Our main service is Groundwork, a flat-fee, human-delivered engagement. We also offer optional fixed-price builds and care plans, a newsletter called The Inference, and a small set of tools and data products (currently TokenWatch, VoxRank and MarketSignals).

Our mailing address is [PLACEHOLDER: mailing address]. Our privacy contact is privacy@nimbusanalytica.com. Questions about this policy and requests about your information go to that address, and we are accountable for the personal information we hold.

2. What we collect

Information you give us through forms on this site. Depending on the form, this can include your name, email address, company, a description of your project, your budget range, how you heard about us, the tools you use, and any notes you choose to write. The forms are:

• the contact form
• the TokenWatch demo request
• the VoxRank waitlist
• the MarketSignals inquiry
• the newsletter signup

With each submission we also keep a record of the consent wording you saw and its version, so we can show what you agreed to.

Information you share during a Groundwork or build engagement. If you hire us, you will tell us about your idea, your current tools, your budget and who will use the system. That can include confidential business information and, occasionally, information about your staff or customers. We ask that you share personal information about other people only where it is necessary for the work. How we handle engagement information is also set out in the written agreement we sign with you, and that agreement takes priority if the two differ.

Emails you send us. If you email hello@nimbusanalytica.com or privacy@nimbusanalytica.com, we keep the message and our reply.

Basic technical data. Our hosting providers (see section 6) automatically process standard request information, such as your IP address and browser type, to deliver the site and keep it secure. We do not use this data to build profiles or to track you across sites.

What we do not do. We do not use analytics tools. We do not set cookies and we do not use advertising or tracking pixels, so there is no cookie banner. The MarketSignals datasets describe companies and markets, not individuals. Your form submissions are not sent to any AI service. Separately, we use AI tools, currently Claude (Anthropic) and ChatGPT (OpenAI), to help with research, drafting and analysis in our Groundwork and build work. We do not enter your confidential information, or personal information about your staff or customers, into these tools without your agreement.

3. Why we collect it

We use personal information to:

• reply to your enquiry and book a fit call
• deliver what you asked for (a demo, a waitlist spot, an article or dataset)
• run Groundwork and any build or care plan you hire us for, including invoicing and keeping records
• send The Inference newsletter, only if you opted in
• keep the site and our email systems secure and working
• meet legal, tax and accounting obligations

We do not sell personal information, and we do not share it with other companies for their marketing.

4. Consent

We ask for your consent for each purpose separately. Optional boxes, such as the newsletter checkbox, are never pre-ticked. If you submit a form, you are agreeing to our using what you entered to respond to you.

You can withdraw consent at any time by emailing privacy@nimbusanalytica.com or, for the newsletter, using the unsubscribe link in any email. Withdrawing consent may mean we can no longer provide a particular service, and we will tell you if that is the case.

5. Email

We send commercial email only with your consent, as required by Canada's Anti-Spam Legislation (CASL).

• Newsletter. If you tick the newsletter box or use the signup form, we will send you The Inference and a welcome email. Every newsletter email includes a working unsubscribe link, and we process unsubscribes promptly and no later than 10 business days after you ask.
• Replies and transactional messages. When you submit a form, we may reply to you directly, send the item you requested, or write about the service you enquired about. These are not newsletter emails.
• After you unsubscribe. We keep your email address, the date you unsubscribed and the record of your consent, so that we do not email you again.

Each email identifies us and tells you how to reach us. Our contact details are in section 1.

6. Who we share it with

We share personal information only with the service providers that help us run the business, and only as needed:

We may also disclose information if the law requires it (for example, a valid court order), to protect our rights or safety, or to our professional advisers (lawyers, accountants) under a duty of confidentiality. If Nimbus Analytica is ever sold or reorganised, personal information may transfer to the new owner, who must honour this policy.

7. Where it is stored

Form and subscriber data is stored in Amazon Web Services' us-east-1 region (Northern Virginia, USA). Our business email is hosted by Zoho in Canada.

Because some data is stored in the United States, it is subject to United States laws, and courts, law enforcement and national security authorities there may be able to access it. We use reputable providers with contractual and technical safeguards, but we cannot remove that legal risk. If you would rather not have your information stored in the United States, please email us instead of using the forms and tell us so. The AI providers we use are based in the United States and may process information there.

8. How long we keep it

When we no longer need information, we delete it or anonymise it. Backups roll off on a short cycle.

9. Your rights

Under Canadian privacy law (PIPEDA), you can:

• ask whether we hold personal information about you and get a copy
• ask us to correct information that is inaccurate or incomplete
• withdraw your consent, and ask us to delete your information where we no longer need it
• ask how we handle your information

To use any of these rights, email privacy@nimbusanalytica.com. We may need to confirm who you are first. We aim to respond within 30 days and will explain if we cannot meet a request fully (for example, where the law requires us to keep a record). We do not charge for ordinary requests.

10. Security

Data held on AWS is encrypted in transit (HTTPS) and at rest. Access to personal information is limited to the owner of the business, and the systems that handle form data use narrowly scoped permissions. We do not store payment card numbers on this site.

No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.

11. Children

Our services are for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email privacy@nimbusanalytica.com and we will delete it.

12. Complaints

If you have a concern about how we handle your information, contact us first at privacy@nimbusanalytica.com and we will investigate and respond. If you are not satisfied, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

13. Changes to this policy

We may update this policy as our business or the law changes. We will post the new version here with a new "last updated" date. If a change is significant, for example a new use of your information, we will tell newsletter subscribers by email or ask for fresh consent where the law requires it.

Contact

Nimbus Analytica Inc.
[PLACEHOLDER: mailing address]
privacy@nimbusanalytica.com (privacy matters)
hello@nimbusanalytica.com (general enquiries)