Privacy policy
Effective date: [DATE]. This policy explains what Goodwin Investigations Inc. ("Goodwin", "we", "us") collects when you use Agent Goodwin and this website, what we do with it, and the choices you have. We are subject to Alberta's Personal Information Protection Act and, where it applies, Canada's PIPEDA.
- Retention wording in section 4 needs Martine's sign-off. It states the Azure 30-day abuse-monitoring retention plainly and avoids "zero retention".
- Confirm whether product analytics (PostHog) will run inside the app at launch. It is listed as a provider below; remove it if not.
- Confirm the email provider used for sign-in and account emails and add it to the provider table.
- Name a privacy contact. This draft uses the general contact address.
1. Two kinds of information
We handle two different things and treat them differently.
Account information is about you: your name, email address, password (stored hashed), billing details held by Stripe, and records of how you use the Service.
Your Content is what you upload and create: investigation documents, the passages you select, and the reports you draft. It usually contains personal information about other people, such as complainants, respondents, and witnesses. You control it. We process it only to provide the Service to you, and we act on your instructions.
2. What we collect and why
| What | Why | Source |
|---|---|---|
| Name and email | To create and secure your account and send you sign-in and service emails | You, via Stripe checkout or an invitation |
| Payment details | To bill your subscription. We never see your full card number; Stripe holds it. | You, via Stripe |
| Your Content | To index, search, and draft reports at your direction | You |
| Prompt and output log | So you can show how each draft was produced. Kept with the report. | Generated by the Service |
| Usage and technical data (pages visited in the app, actions taken, browser type, IP address, errors) | To keep the Service working, secure it, and understand what is used | Your browser |
| Marketing-site analytics (this website only) | To measure whether our advertising works. See section 7. | Your browser, via the Meta Pixel |
3. Where it is stored
Account information and Your Content are stored on Microsoft Azure in the Canada Central region. Backups are kept in the same region. Stripe stores billing data on its own systems, some of which are in the United States.
4. AI processing and retention
Drafting and search use large language models hosted by Microsoft Azure OpenAI Service, under Microsoft's enterprise terms, not a consumer chatbot.
- Your Content is not used to train or improve any model, by us or by Microsoft.
- Microsoft may retain prompts and outputs for up to 30 days for abuse and misuse monitoring, after which they are deleted. Microsoft staff may review flagged content in that window. We do not claim zero retention because this window exists.
- Requests may be processed in Azure regions outside Canada when capacity requires it. Stored data stays in Canada.
Within the Service: Your Content is kept while the report exists. Delete a report and its documents, index, and log are deleted within 30 days, and from backups within 90 days. Close your account and all of Your Content is deleted on the same schedule. Account information is kept for as long as your account is open and for up to 7 years afterwards where needed for tax and legal records.
5. Who can see it
Your Content is visible only to your account. Goodwin staff do not open it unless you ask for help and grant access, we need to investigate abuse or a security incident, or the law requires it. Access is logged.
We use the following providers to run the Service. Each processes information only on our instructions and under contract.
| Provider | Purpose | Location |
|---|---|---|
| Microsoft Azure | Hosting, storage, database, document processing, AI models | Canada Central (storage); AI may route to other Azure regions |
| Stripe | Payments and subscription billing | Canada / United States |
| [Email provider] | Sign-in and account emails | [Region] |
| PostHog | Product analytics inside the app (which features are used). No document content is sent. | [Region] |
| Meta | Advertising measurement on this website only. Not used inside the app. | United States |
We do not sell personal information, and we do not share Your Content with anyone for their own purposes.
6. Security
Data is encrypted in transit and at rest. Access to production systems is limited to named staff with two-factor authentication. Each account's content is isolated in the database at the row level. We log administrative access. If we learn of a breach that creates a real risk of significant harm, we will notify you and the Alberta Privacy Commissioner as the law requires.
7. Cookies and tracking
Inside the app we use only the cookies needed to keep you signed in, plus product analytics if enabled (section 5). No advertising trackers run inside the app.
On this website we use the Meta Pixel to measure whether people who see our ads visit and sign up. It sets cookies and sends Meta the pages you view here. You can block it with a browser setting or extension; the site works without it.
8. Your rights
You can see, correct, export, or delete your account information at any time by signing in or emailing us. You can delete Your Content yourself in the app. If you believe we have handled your information improperly, contact us first; you may also complain to the Office of the Information and Privacy Commissioner of Alberta.
If you are a person whose information appears in a document uploaded by one of our users, the user is responsible for that information. Contact them, or contact us and we will pass your request to them.
9. Changes
We will email account holders at least 30 days before a material change to this policy takes effect.
10. Contact
Privacy contact: support@goodwininvestigations.ca. Goodwin Investigations Inc., 1150 – 333 11 Avenue SW, Calgary, Alberta T2R 0K3.