AI Privacy & Compliance
PIPEDA
Compliance
Our commitment to Canadian privacy standards — and how we implement PIPEDA's 10 Fair Information Principles.
As a Canadian company, PIPEDA compliance isn't a legal checkbox — it's a founding value.
The Personal Information Protection and Electronic Documents Act (PIPEDA) is Canada's federal privacy law governing how private-sector organizations collect, use, and disclose personal information. Secondary AI was founded in Canada and is committed to adhering to PIPEDA's 10 Fair Information Principles in every aspect of our data practices — not just for Canadian users, but as our global standard. We believe that what's right for Canadian law is right for everyone.
"Canadian privacy law is our global standard, not just our local obligation."
— Secondary AI's approach to data privacy
How We Comply
Five principles we
take seriously.
Accountability & Purpose Limitation
We are responsible for all personal information under our control and clearly identify collection purposes before or at the time of collection. Teacher data (name, email) is used for account management and service delivery. Student data (names/IDs, chat transcripts) is used solely for providing educational feedback and insights. Our privacy officer can be reached at thesecondaryai@gmail.com.
Consent & Minimal Collection
Teachers provide consent by creating accounts and agreeing to our terms of service. We rely on teachers as school officials to provide consent for student data within their classrooms. We collect only the information necessary to deliver the service — our Anonymous Mode feature minimizes student data to just an anonymous ID. You may withdraw consent at any time by contacting us.
Limited Use, Disclosure & Retention
Personal information is used only for the stated educational purposes — never sold, never used for advertising, never shared with third parties outside of our infrastructure providers who are contractually bound to protect your data. We retain data only as long as necessary to provide the service. Teachers can delete sessions at any time, and we delete all data within 30 days upon request.
Accuracy & Security Safeguards
Teachers can update their information at any time through account settings. All data is encrypted in transit and at rest using industry-standard protocols. Access to personal information is restricted to authorized personnel only. We conduct regular security reviews and carefully vet all third-party service providers to ensure they maintain PIPEDA-level protections.
Cross-Border Data Transfers
Our data is currently hosted in the United States, meaning your information may be subject to U.S. laws and disclosure requirements. We are transparent about this. All our infrastructure providers maintain privacy standards consistent with PIPEDA requirements, and we are actively evaluating Canadian data storage options as our platform grows.
Your Rights
Access, correction & complaints.
You can access your personal information by contacting us at thesecondaryai@gmail.com — we respond within 30 days. If you believe we have not adhered to PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada.
In Our Privacy Policy
PIPEDA compliance is documented in full in our Privacy Policy.
Our full Privacy Policy contains the complete, legally binding detail of our PIPEDA obligations — including all 10 Fair Information Principles, our data use practices, retention schedules, cross-border transfer disclosures, and your rights as a Canadian user. If you are a school administrator, privacy officer, or legal reviewer, the Privacy Policy is the authoritative reference document.
Read the full Privacy PolicyLearn More About Our Privacy Commitments
Explore our full approach to data privacy, student safety, and AI transparency.
Privacy Overview