Privacy
Privacy Policy
This policy explains how CANO Technologies handles personal information in connection with this website. It describes the website as it is currently built, not a future version of it.
Who we are
CANO Technologies is a Canadian technology company providing IT, cybersecurity, infrastructure, automation and advisory services. For privacy questions, contact our Privacy Officer atprivacy@canotechnologies.com.
What this website collects
This website is a static site and does not require an account. It does not use advertising trackers, heatmaps, session replay, or browser or device fingerprinting. Optional audience measurement is described below and remains off unless you allow it.
If you use the contact form, we receive the name, business email, company, reason for contact and message you enter, and the phone number if you choose to provide one. That information is sent to a monitored CANO Technologies mailbox by email. It is not written to a database or stored on the web server after the message has been sent.
If you use the AI-assisted Ask CANO chat, the text you enter and a limited number of your recent messages from that page session are sent to our server and then to the AI service provider configured for the assistant so that a response can be generated. CANO's website-assistant application does not write the AI conversation text to a database, localStorage, sessionStorage or a local chat-transcript file.
The AI provider may process or temporarily retain API content under its service terms, security controls and the account configuration in effect at the time. We do not describe this chat as a zero-retention or Canada-only-processing service. Do not use it to send passwords, MFA codes, private keys, access tokens, banking credentials or confidential incident evidence.
If you choose to transfer Ask CANO to a human agent, the recent visitor messages needed for that handoff and the messages exchanged with the human agent are handled by CANO's live-support system and relayed through Telegram so the assigned operator can respond. That transferred conversation is therefore processed and retained by support systems separately from the AI chat path and may cross third-party infrastructure outside Canada. The browser may keep only an opaque, short-lived conversation identifier in sessionStorage so the human conversation can resume while the browser session remains open; that identifier does not contain the chat text, LHC API key, Telegram bot token or operator credentials.
To keep public forms and, when enabled, AI-assisted chat from being used by automated systems, the site uses Cloudflare Turnstile. Your browser contacts Cloudflare to complete that check, and our server asks Cloudflare to confirm the result before the protected action continues. Turnstile is provided by Cloudflare, Inc. and operates under its own terms and privacy notice.
To limit abuse, the server keeps short-lived counts of recent protected requests. Those records use one-way keyed values derived from network addresses and timestamps; they do not contain the contact message or AI chat text you entered.
Optional website analytics
If you select “Allow analytics,” this site loads Google Analytics 4, provided by Google LLC. It helps us understand aggregate page use, such as which pages are visited and how visitors move through the site. We use that information to improve navigation and content, not for advertising or automated decisions about you.
Analytics remains blocked until you opt in. If you allow it, Google Analytics may set or read analytics cookies and receive technical information associated with the visit, including page URLs, approximate location derived from an IP address, device and browser characteristics, and interaction timing. CANO disables Google Signals and ad-personalization signals in the website tag. We do not send names, email addresses, phone numbers, company names, message text or other contact-form contents to Analytics.
Your choice is saved in your browser's localStorage so the site can remember it. You can change that choice at any time using “Analytics preferences” in the footer. Continuing without analytics does not limit access to the site.
Web server logs
Like most websites, the hosting infrastructure that serves these pages may record standard technical request information such as an IP address, the page requested, a timestamp and a browser user-agent string. This is generated by the hosting environment rather than by code on this site, and it is used for security and operational purposes such as diagnosing faults and identifying abuse.
If you email us
If you contact one of our published mailboxes, we receive the information you choose to send: typically your name, email address, and whatever you describe in the message. We use it to respond to you and to discuss a possible or existing engagement. We do not sell it, and we do not use it for advertising.
Please do not send passwords, MFA codes, recovery codes, private keys, banking credentials, access tokens or confidential incident evidence by email. Where sensitive material is genuinely required for an engagement, we arrange an approved secure transfer method first.
Third parties
This website uses Cloudflare Turnstile for abuse prevention. When enabled, the optional services described above may also connect your browser to their providers. The site loads no advertising trackers, third-party fonts or embedded marketing content.
Where our providers process information and how long they retain it are still being confirmed and remain under review. This policy will be updated once those details are settled.
Email sent to our published mailboxes is handled by our email provider in the ordinary course of delivering and storing email.
Retention
We keep business correspondence for as long as needed for the purpose it was sent for, and for as long as required to meet legal, contractual, accounting or record-keeping obligations. Where a defined retention schedule applies to a specific engagement, it is set out in the written agreement for that engagement.
Security
We apply access control, multi-factor authentication and least-privilege principles to the systems we operate, and we serve this site over HTTPS. No control set removes all risk, and we do not claim that it does.
Your choices
Subject to applicable Canadian privacy law, you may ask what personal information we hold about you, ask us to correct it, or ask us to delete it where we are not required to keep it. Contactprivacy@canotechnologies.com and we will respond within 30 days, as required by PIPEDA.
If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada.
Children
This website is directed at businesses and is not intended for children. We do not knowingly collect personal information from children.
Changes
We update this policy when the website's actual practices change. The review date at the top of this page reflects the most recent review.
Contact
Privacy Officer — CANO Technologies
privacy@canotechnologies.com