Overview
13461564 Canada Inc., doing business as "GrainFlow" ("GrainFlow", "we", "us"), is committed to protecting the privacy of our users. This policy describes what information we collect, how we use it, and your rights regarding that information. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
For data that originates from farming operations ("Ag Data"), we also follow the Ag Data Transparent Core Principles. Ag Data belongs to the farmer it originates from, even when it flows through a facility's instance of the platform. Our complete data terms are set out in our Data & Ag Data Use Agreement, which this policy complements.
Information We Collect
We collect the following types of information:
- Account information: Name, email address, phone number, organization name, and role when you create an account or submit a demo request.
- Operational data: Delivery schedules, contract details, inventory levels, fleet information, and driver availability that you enter into the platform.
- Yard intelligence data: Camera feeds and computer vision analytics from facilities that enable the Yard Intelligence feature. Video is processed in real-time and not stored beyond what is necessary for analytics.
- Usage data: How you interact with the platform, including pages viewed, features used, and session duration.
- Analytics and session data: We use Microsoft Clarity, Google Analytics, and similar tools to collect interaction data including mouse movements, clicks, scroll depth, and page navigation patterns. Microsoft Clarity records anonymized session replays and generates heatmaps to help us understand how users interact with the platform. Sensitive form inputs (passwords, payment details) are automatically masked and never recorded.
- Device information: Browser type, operating system, and IP address for security and performance purposes.
How We Use Your Information
- To provide and improve the GrainFlow platform and its features
- To facilitate scheduling, delivery coordination, and contract management between facilities and farms
- To generate yard analytics, inventory forecasts, and capacity planning insights
- To send notifications related to deliveries, schedule changes, and driver assignments
- To respond to demo requests and customer support inquiries
- To analyze usage patterns and improve platform performance
- To train and run optimization and forecasting models whose purpose is to reduce wait times and maintain a steady flow of product through the supply chain
Where optimization models use insight across multiple customers, that insight is built only from aggregated, de-identified data that cannot reasonably be used to identify a single farm, facility, individual, or transaction. We do not sell your data, and we never sell or share identifiable information, except as you direct or as required by law.
Analytics and Session Recording
We use the following analytics tools to understand how our platform is used and to improve the user experience:
- Microsoft Clarity: Records anonymized session replays, click heatmaps, and scroll maps. Clarity automatically masks sensitive content and does not capture passwords, payment information, or other sensitive inputs. Clarity data is retained for 30 days. Microsoft Privacy Statement.
- Google Analytics: Collects aggregated usage statistics including page views, session duration, and traffic sources. Google Privacy Policy.
- HubSpot: Tracks page visits for customer relationship management and support purposes.
You may opt out of analytics tracking by enabling "Do Not Track" in your browser settings, using browser extensions such as uBlock Origin, or adjusting cookie preferences. Opting out does not affect platform functionality.
Cookies
GrainFlow uses cookies and similar technologies for the following purposes:
- Essential cookies: Required for authentication, session management, and platform security.
- Analytics cookies: Used by Google Analytics, Microsoft Clarity, and HubSpot to understand platform usage patterns.
- Preference cookies: Store your display preferences such as dark mode and notification settings.
You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent you from using the platform.
Data Sharing
We do not sell your personal information. We share data only in the following circumstances:
- Between platform participants: Delivery, scheduling, and contract data is shared between facilities and their partner farms as necessary for platform functionality.
- Service providers: We use third-party services (hosting, analytics, email) that process data on our behalf under strict confidentiality agreements.
- Analytics providers: Anonymized usage data is shared with Microsoft (Clarity), Google (Analytics), and HubSpot for product analytics and customer support. These providers process data under their respective privacy policies and data processing agreements.
- Legal requirements: We may disclose information if required by law or to protect the rights and safety of our users.
Data Security & Breach Notification
We use industry-standard security measures including encryption in transit and at rest, access controls, and regular security reviews. Our platform is hosted on Google Cloud infrastructure with enterprise-grade security certifications.
If we become aware of a security breach affecting your data that creates a real risk of significant harm, we will notify you without undue delay, describe the incident and the steps taken, and meet our breach-reporting obligations under PIPEDA.
Identity of Our Data Partners
We use a defined set of service providers ("sub-processors") to host and run the platform — including cloud hosting (Google Cloud), analytics (Google Analytics, Microsoft Clarity), CRM and support (HubSpot), and email — each under written confidentiality and data-protection obligations. Where you enable an integration (such as feeding live queue and wait-time data into a grower-facing app), we share only the data needed for that integration. We do not provide your data to advertisers, data brokers, or commodity traders.
Data Retention
We retain your account and operational data for as long as your account is active. You may request deletion of your data at any time by contacting us. Aggregated, anonymized analytics data may be retained indefinitely.
Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your data
- Withdraw consent for data processing
- Export your data in a portable, machine-readable format
- Halt the collection of your Ag Data, or disable specific data-collecting features, at any time without terminating the entire Service
If you are an individual in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Changes to This Policy
We may update this policy from time to time. We will notify users of material changes via email or through the platform.
Contact Us
If you have questions about this privacy policy or your data, or to exercise any of your rights above, contact our privacy team at privacy@grainflow.ca or info@grainflow.ca.