Privacy Policy

1. Controller

The controller responsible for processing personal data in connection with our website and E-FUTURE One™ is:

2. Scope

This Privacy Policy explains how E-future Inc. processes personal data across our two surfaces: this website (e-future.ca) and E-FUTURE One™, our private platform for professional collaboration.

This Policy is governed by Canada’s Personal Information Protection and Electronic Documents Act (“PIPEDA”) and, where applicable, Alberta’s Personal Information Protection Act (“PIPA”).

3. Personal Data We Collect

Public website

Homepage contact form

When you submit the contact form on our homepage, we may process the following data:

• Identity and contact data: first and last name, work email address and telephone number.
• Professional data: organisation.
• Communication data: inquiry type and message.
• Project and investment data: primary workload, indicative GPU requirement, preferred jurisdiction, target deployment window, indicative allocation, decision timeframe, GPU model or configuration, GPU quantity and project context, where relevant to your inquiry.

Technical data required to operate the website

When you visit our website, we and our service providers process technical data to deliver the website, maintain its operation, diagnose errors and protect its security:

• Connection and device data: IP address and browser and device information.
• Request and navigation data: requested pages, referring information, timestamps and request identifiers.
• Operational and security data: response status, error information and security data.

E-FUTURE One™ processing

We may process the following in connection with E-FUTURE One™:

• Account, profile, role and account-status information
• Authentication, session, multi-factor authentication and security information
• Professional contacts, organisation and relationship information
• Project permissions, related documents, access records and communications
• Private communications and associated sender, participant, timestamp and read-status information
• Invitation, administration, audit and security records

Project-related information and documents may include personal or professional information relevant to the project. Please provide personal data about another person only where you are permitted to do so.

4. Purpose of Processing

We process personal data for the following purposes:

• Operate, maintain and secure our website and E-FUTURE One™ (GDPR Art. 6(1)(f)).
• Respond to inquiries and take requested pre-contractual steps (GDPR Art. 6(1)(b), (f)).
• Establish and administer professional and business relationships (GDPR Art. 6(1)(b), (f)).
• Create, authenticate, secure and support E-FUTURE One™ accounts (GDPR Art. 6(1)(f)).
• Manage professional contacts, projects, and permissions (GDPR Art. 6(1)(b), (f)).
• Provide controlled access to project-related materials (GDPR Art. 6(1)(b), (f)).
• Enable private professional communications (GDPR Art. 6(1)(b), (f)).
• Send invitations, recovery messages and necessary account communications (GDPR Art. 6(1)(f)).
• Prevent misuse, investigate security events and protect confidential information (PIPEDA Art. 8; GDPR Arts. 6(1)(f), 32).
• Fulfil applicable information, access and breach-notification duties (PIPEDA Arts. 19, 24, 25; GDPR Arts. 6(1)(c), 12–22, 33–34).
• Establish, exercise or defend legal claims (PIPEDA Art. 31; GDPR Art. 6(1)(f)).
• Analyse usage and produce aggregated statistics to improve our services (GDPR Art. 6(1)(a), (f)).

We do not sell personal data and do not use website or E-FUTURE One™ data for third-party advertising.

5. Contact Form and Communication

Contact-form submissions are transmitted via Resend to authorized E-FUTURE personnel. Resend processes names, email addresses, subject, message content and delivery metadata to deliver the email.

We use your inquiry and related correspondence to respond, follow up and meet security, compliance and recordkeeping requirements.

The application does not store contact-form submissions. Copies may remain with Resend and in our business email systems, subject to the retention criteria in section 9.

6. Website and Platform Hosting

Our website and E-FUTURE One™ are hosted by Vercel. Vercel may process IP addresses, browser and device information, requested paths and search parameters, timestamps, request identifiers, response status, function-execution information, errors and security information to deliver, protect and maintain the services.

7. Analytics, Cookies, Service Providers and Third-Party Content

Analytics

We use Simple Analytics across our website and E-FUTURE One™ to understand how the services are used. It provides aggregated statistics without analytics cookies, persistent visitor profiles or cross-site tracking.

Analytics information may include requested pages, referring pages, campaign information, browser and device categories, language, screen size, country indication and interaction statistics.

Fonts

We use Google Fonts for typography. Loading fonts connects your browser to Google servers, which may receive your IP address, browser and operating-system details, requested font files, request time and, where transmitted by your browser, the referring page.

Necessary cookies

We use first-party cookies to remember your website language, maintain E-FUTURE One™ authentication, support password recovery and control access to restricted content.

We do not use advertising or analytics cookies. The application does not use local storage, session storage or IndexedDB for persistent account or analytics data.

Service providers

• Vercel: hosts and delivers our website and E-FUTURE One™ and processes the technical data described in section 6
• Supabase: provides authentication, database, private file storage and realtime infrastructure for E-FUTURE One™
• Resend: delivers contact-form notifications and account-related emails
• Simple Analytics: provides aggregated usage statistics
• Google Fonts: provides the website fonts
• Frankfurter API: the calculator fetches public exchange rates (European Central Bank reference rates, updated on working days) directly from your browser

Links to Partner and Third-Party Websites

Our services may contain links to third-party websites. When you follow an external link, the privacy policy of the destination website applies. E-FUTURE has no control over the content or privacy practices of third-party websites.

8. Data Transfers Abroad

Vercel, Inc. (United States and subprocessors)

Vercel states that its primary processing facilities are in the United States and that processing may also occur where its subprocessors operate. Its data processing terms describe applicable cross-border transfer mechanisms, including Standard Contractual Clauses where required. Data Processing Addendum

Supabase Pte. Ltd. (Canada / Singapore and subprocessors)

Our primary project data is hosted in Canada on AWS infrastructure. Supabase is based in Singapore, and support or subprocessor access may involve transfers outside Canada. Its data processing terms include standard contractual clauses. Data Processing Addendum

Plus Five Five, Inc. / Resend (United States)

Resend stores email content, recipient information and delivery logs in the United States. Its data processing terms include standard contractual clauses and provisions for transfers from Canada. Data Processing Addendum

Simple Analytics (Netherlands)

Simple Analytics states that visitor analytics are processed and stored in the Netherlands. Canada treats the Netherlands as providing an adequate level of data protection. Privacy policy

Google Fonts (United States and international infrastructure)

Google may process font-request data in the United States and other countries where it operates servers. Its privacy policy describes international processing and the transfer safeguards it uses. Privacy policy

Frankfurter API / Cloudflare (international infrastructure, including the United States)

Exchange-rate requests pass through Cloudflare’s international network and may involve processing of IP addresses and request metadata in the United States. Frankfurter states that it does not retain personal request logs. Provider documentation

Transfers to countries without recognised adequate protection require appropriate safeguards, such as standard contractual clauses, or a statutory exception (PIPEDA; GDPR Arts. 44–49). Information about the safeguards applicable to your data is available at e-future2023@gmail.com.

9. Data Retention

Routine inquiries and correspondence are retained for as long as needed to respond and complete necessary follow-up.

Account and contact data are retained as needed to manage the relationship. After account closure or the end of the relationship, these data, project documents and correspondence are retained only where needed for outstanding obligations or legal claims.

Accounting records, supporting vouchers and annual and audit reports are retained for six years from the end of the relevant financial year (Canada Revenue Agency record-keeping requirements). This period does not apply automatically to all emails, account data or project files.

Technical and security logs are retained for as long as needed to operate and protect our services, investigate incidents or document authorised access. Retention is limited to what these purposes and applicable legal duties require.

10. Your Rights

Under Canadian data protection law (PIPEDA), and additionally under the GDPR where it applies, you have the following rights. The scope of each right is subject to applicable legal requirements and exceptions:

• The right to obtain confirmation and information about our processing
• The right to access your personal data and obtain a copy
• The right to have your data corrected or completed
• The right to request deletion or destruction of personal data
• The right to request restriction of processing
• The right to receive certain personal data in a portable format
• The right to object to processing in the circumstances provided by law and based on legitimate interest
• The right to withdraw consent at any time where processing is based on consent, without affecting prior lawful processing
• The right to not be subject to a decision based solely on automated processing where the applicable legal requirements are met
• The right to lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC, priv.gc.ca).

Requests may be sent to e-future2023@gmail.com. We may ask for information needed to verify your identity and will respond in accordance with applicable law.

11. Data Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure or destruction. Measures include encrypted transmission, invitation-only accounts, multi-factor authentication, role-based access, Row Level Security, private file storage, controlled file delivery, rate limiting and security logging.

No internet transmission or electronic storage system can be guaranteed to be completely secure. Please avoid sending confidential or highly sensitive information through the general website contact form unless a suitable secure channel has been agreed.

12. Updates to This Policy

We may update this Privacy Policy when our website, E-FUTURE One™, service providers, processing activities or legal obligations change. The version published on the website is the current version.

13. Contact

If you have questions about this Privacy Policy or our processing of personal data, please contact: