Privacy Policy

Overview

Legisail helps Canadian small businesses monitor legislative changes that may affect them. This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you use our website, application, emails, and related services.

This policy is intended to reflect Canadian privacy principles, including the Personal Information Protection and Electronic Documents Act and, where applicable, British Columbia's Personal Information Protection Act.

Information We Collect

We collect information you provide directly, information generated through your use of Legisail, and limited technical information needed to operate and secure the service.

• Account information, such as your email address, authentication status, and account settings.
• Business profile information, such as your country, province, industry, business description, employee status, employee count range, payroll range, and incorporation status.
• Product data, such as your legislative notifications, followed or ignored bills, digest preferences, and interactions with your inbox.
• Communications, such as support requests, feedback, or other messages you send us.
• Technical and analytics data, such as device/browser information, page views, feature usage, event logs, and approximate interaction timestamps.

How We Use Information

We use personal information for purposes that a reasonable person would consider appropriate in the context of providing a legislative monitoring service, including to:

• Create and manage your account.
• Build and update your business profile so we can identify legislative updates that may be relevant to you.
• Generate profile tags, profile descriptions, embeddings, matches, summaries, explanations, alerts, and weekly digests.
• Send account, product, security, notification, and digest emails.
• Improve product performance, reliability, matching quality, onboarding, and user experience.
• Detect, investigate, and prevent misuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our rights.

Business Profile and Legislative Matching

Legisail uses the information you provide about your business to match legislative updates to your profile. This may include generating technical representations of your profile, such as tags, summaries, and embeddings, so the service can compare your business profile against bills, summaries, and legislative activity.

Legislative matches and explanations are provided for informational purposes. They are not legal, tax, accounting, employment, or compliance advice.

AI-Assisted Processing

We may use AI-assisted systems and third-party AI providers to summarize legislative materials, generate plain-English explanations, create embeddings, and match legislative updates to business profiles. We do not intentionally use your personal information to train public AI models unless we say so and obtain any consent required by law.

Service Providers and Disclosure

We do not sell personal information. We may disclose personal information to service providers that help us operate Legisail, subject to appropriate contractual, technical, and organizational safeguards.

• Supabase, for authentication, database, and backend services.
• Vercel, for hosting, deployment, and scheduled jobs.
• PostHog, for product analytics and usage measurement.
• Resend, for transactional and digest email delivery.
• OpenAI, for embeddings and related AI-assisted processing.
• Anthropic, for legislative summarization and plain-English explanations.

We may also disclose information if required by law, to protect the rights and safety of Legisail, our users, or others, or in connection with a merger, financing, acquisition, or sale of assets.

Storage and Cross-Border Processing

Legisail and our service providers may store or process information in Canada, the United States, or other jurisdictions where our providers operate. When information is processed outside your province or country, it may be subject to the laws of that jurisdiction.

Cookies and Analytics

We may use cookies, local storage, and similar technologies to keep you signed in, remember preferences, understand product usage, and improve Legisail. Product analytics help us understand which features are working, diagnose issues, and improve onboarding and alert quality.

Email Preferences

We may send service emails related to your account, security, onboarding, alerts, and legislative digests. You can unsubscribe from weekly digest emails using the unsubscribe link in the email or by changing your notification settings. We may still send essential account or security messages where permitted by law.

Retention

We keep personal information only as long as reasonably necessary for the purposes described in this policy, including to provide the service, maintain records, resolve disputes, improve reliability, and meet legal obligations. When information is no longer needed, we will delete, anonymize, or securely retain it as required or permitted by law.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, copying, use, modification, and destruction. No online service can guarantee absolute security, but we work to protect information in a manner appropriate to its sensitivity.

Your Choices and Rights

You may request access to, correction of, or deletion of personal information we hold about you, subject to legal limits. You can also update your business profile and notification preferences in the product. To make a privacy request, contact us using the details below.

Changes to This Policy

We may update this Privacy Policy as Legisail evolves. If we make material changes, we will take reasonable steps to notify users, such as by updating this page, sending an email, or providing an in-product notice.

Contact Us

For privacy questions, requests, or complaints, contact Legisail at [email protected].

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, where applicable, the Office of the Information and Privacy Commissioner for British Columbia.