Privacy

Privacy Policy

Last updated: January 2026. This Privacy Policy explains how Dravyn Solutions Inc. collects, uses, discloses, and safeguards your information when you use our services.

1. Introduction

Dravyn Solutions Inc. ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy applies to all personal information collected through our website, applications, and services. We comply with applicable privacy laws including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and the General Data Protection Regulation (GDPR) for European residents.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide to us, including:

Contact Information: Name, email address, phone number, physical address, and company name.
Account Information: Username, password, and account preferences.
Professional Information: Job title, company details, and practice areas (for legal professionals).
Communication Data: Messages, inquiries, and feedback you send us through contact forms or email.
Payment Information: Billing address, payment method details (processed securely through third-party providers).
Legal Documents: Any documents you upload to our platform (processed with strict confidentiality).

2.2 Information Collected Automatically

When you access our website or services, we automatically collect:

Device Information: IP address, browser type, operating system, and device identifiers.
Usage Data: Pages visited, time spent on pages, links clicked, and interaction patterns.
Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to enhance your experience.
Location Data: General geographic location based on IP address (not precise location).

2.3 Information from Third Parties

We may receive information about you from third parties, including:

Service providers and integration partners
Payment processors and financial institutions
Analytics providers and marketing partners
Publicly available sources and data brokers

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Delivery: Providing, maintaining, and improving our legal technology services.
Account Management: Creating and managing your account, processing transactions, and sending service-related communications.
Communication: Responding to inquiries, providing customer support, and sending updates about services.
Marketing: Sending promotional materials and newsletters (with your consent, and with opt-out options).
Legal Compliance: Complying with legal obligations, enforcing terms of service, and protecting against fraud or abuse.
Analytics and Improvement: Understanding usage patterns to enhance user experience and develop new features.
Security: Detecting and preventing unauthorized access, fraud, and security incidents.

4. Legal Basis for Processing

Under GDPR and similar privacy laws, we process your information based on:

Contractual Necessity: Processing required to provide services you've requested.
Consent: Your explicit consent for marketing communications and non-essential processing.
Legitimate Interests: Our business interests in improving services, preventing fraud, and maintaining security.
Legal Obligation: Compliance with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

Service Providers: Third-party vendors who assist in delivering our services (under data processing agreements).
Legal Requirements: When required by law, court order, or government agencies.
Business Transfers: In case of merger, acquisition, or sale of assets (with notice and choice).
With Your Consent: When you explicitly authorize us to share information with third parties.

6. Data Security

We implement comprehensive security measures to protect your information:

End-to-end encryption for sensitive data transmission and storage
Industry-standard SSL/TLS protocols for website security
Regular security audits and vulnerability assessments
Access controls and authentication mechanisms
Employee training on data protection and privacy practices
Incident response procedures and breach notification protocols

While we strive to protect your information, no system is completely secure. We cannot guarantee absolute security of your personal data.

7. Data Retention

We retain your personal information for as long as necessary to provide services and fulfill the purposes outlined in this policy. Retention periods vary based on the type of information and legal requirements:

Account information is retained while your account is active and for 7 years afterward for legal/tax compliance.
Marketing data is retained until you opt out.
Transaction records are retained for 7 years per Canadian tax requirements.
Legal documents are retained according to your service agreement terms.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Essential Cookies: Necessary for website functionality and security.
Analytics Cookies: To understand how users interact with our site.
Marketing Cookies: To deliver relevant content and measure campaign effectiveness.
Preference Cookies: To remember your preferences and settings.

Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please refer to your browser settings for instructions on how to manage cookies.

9. Your Rights and Choices

Depending on your location, you have certain rights regarding your personal information:

9.1 GDPR Rights (European Residents)

Right to Access: Request a copy of your personal data.
Right to Rectification: Request correction of inaccurate information.
Right to Erasure: Request deletion of your data ("right to be forgotten").
Right to Restrict Processing: Limit how we use your information.
Right to Data Portability: Receive your data in a portable format.
Right to Object: Object to processing for marketing or profiling purposes.
Right to Withdraw Consent: Withdraw consent for processing at any time.

9.2 PIPEDA Rights (Canadian Residents)

Right to access your personal information
Right to request correction of inaccurate information
Right to opt out of marketing communications
Right to request deletion (subject to legal obligations)

To exercise any of these rights, please contact us at business@dravyn.bond with the subject line "Privacy Request" and specify which right you wish to exercise.

10. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence, including the United States. These countries may have data protection laws different from your home country. When we transfer data internationally, we implement appropriate safeguards, including Standard Contractual Clauses (SCCs) and adequacy decisions, to ensure your information remains protected.

11. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information and terminate the child's account.

12. Third-Party Links

Our website may contain links to third-party websites and services. This Privacy Policy does not apply to these external sites. We are not responsible for their privacy practices. Please review their privacy policies before providing any personal information.

13. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected, used, and shared
Right to delete personal information collected from you
Right to opt out of the "sale" of personal information
Right to non-discrimination for exercising CCPA rights

To exercise CCPA rights, contact us at business@dravyn.bond.

14. Marketing Communications

We may send you marketing communications about our services, updates, and promotions. You can opt out of marketing emails at any time by:

Clicking the "unsubscribe" link at the bottom of our emails
Contacting us at business@dravyn.bond with "UNSUBSCRIBE" in the subject line
Updating your communication preferences in your account settings

15. Data Breach Notification

In the event of a data breach involving your personal information, we will notify you without undue delay if required by law. Notification will be sent to your registered email address or through other means of contact if available. We will also notify relevant regulatory authorities as required.

16. Data Protection Officer and Privacy Contacts

For privacy-related inquiries, data subject requests, or if you have concerns about our privacy practices, please contact us at:

Email: business@dravyn.bond
Phone: +1 416 597 5582
Mailing Address: Dravyn Solutions Inc., 250 University Ave, Toronto, ON M5H 3E5, Canada
Company Registration: VAT: 920681534 RT 0001

17. Supervisory Authority

If you are an EU resident, you have the right to lodge a complaint with your local supervisory authority. For Canada, you may contact the Office of the Privacy Commissioner of Canada (OPC).

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last updated" date at the top of this policy and, when appropriate, by sending you an email notification. Your continued use of our services following the posting of revised Privacy Policy means that you accept and agree to the changes.

19. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Ontario, Canada, without regard to its conflict of law principles. Any disputes arising from this policy will be subject to the exclusive jurisdiction of the courts of Toronto, Ontario.