1. Introduction and Scope

Excibico ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered agricultural asset management simulation platform and related services (collectively, the "Service").

This policy applies to all users of our platform, including executives, managers, and other professionals in Canada's agriculture and farming sector who access our licensed training solutions. By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information in accordance with this policy.

We are committed to compliance with all applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA), provincial privacy legislation, and other relevant regulations governing the collection and use of personal information in the agricultural training sector.

2. Information We Collect

We collect various types of information to provide and improve our Service, ensure platform security, and deliver personalized training experiences. The information we collect includes:

Personal Information

• Registration Information: Full name, email address, phone number, job title, company name, industry sector, and professional credentials when you create an account
• Contact Information: Mailing address, billing address, and emergency contact details for account verification and service delivery
• Professional Details: Years of experience, areas of expertise, management level, and specific agricultural sectors of interest
• Payment Information: Credit card details, billing information, and transaction history (processed securely through third-party payment processors)
• Identity Verification: Government-issued identification numbers and professional certifications as required for regulatory compliance

Usage and Performance Data

• Simulation Performance: Decision-making patterns, scenario completion rates, strategic choices, and learning progress metrics
• Platform Interaction: Pages visited, features used, time spent on different modules, and navigation patterns
• Learning Analytics: Quiz scores, assessment results, skill development tracking, and competency evaluations
• Communication Records: Support tickets, feedback submissions, survey responses, and correspondence with our team

Technical Information

• Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution
• Log Data: Server logs, error reports, crash data, and system performance metrics
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies, and similar tracking technologies
• Location Data: General geographic location based on IP address for regulatory compliance and content localization

3. How We Use Your Information

We use the collected information for various legitimate business purposes related to providing our agricultural training services:

Service Provision and Enhancement

• Platform Operation: To provide, maintain, and improve our AI-powered simulation platform and ensure optimal performance
• Personalization: To customize your learning experience, recommend relevant training modules, and adapt scenarios to your expertise level
• Progress Tracking: To monitor your learning progress, generate performance reports, and provide feedback on skill development
• Content Development: To create new training scenarios, improve existing content, and develop industry-specific modules

Communication and Support

• Customer Service: To respond to inquiries, provide technical support, and resolve platform issues
• Educational Communications: To send training updates, industry insights, and relevant agricultural business information
• Administrative Notices: To communicate important changes to our services, policies, or terms of use
• Marketing Communications: To inform you about new features, training programs, and relevant industry events (with your consent)

Legal and Regulatory Compliance

• Regulatory Requirements: To comply with Canadian agricultural training regulations and licensing requirements
• Record Keeping: To maintain required training records and certification documentation
• Audit and Compliance: To support regulatory audits and demonstrate compliance with industry standards
• Legal Obligations: To fulfill legal obligations, respond to legal requests, and protect our rights and interests

4. Information Sharing and Disclosure

We respect your privacy and do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following specific circumstances:

Service Providers and Partners

• Technology Partners: Cloud hosting providers, database management services, and platform infrastructure partners under strict data processing agreements
• Payment Processors: Secure payment processing companies that handle billing and transaction processing with industry-standard security measures
• Analytics Providers: Trusted analytics services that help us understand platform usage and improve user experience, with anonymized data where possible
• Customer Support Tools: Help desk software and communication platforms used to provide efficient customer service

Legal and Regulatory Requirements

• Government Authorities: When required by law, regulation, court order, or government request
• Regulatory Bodies: To agricultural training regulatory authorities for compliance verification and licensing purposes
• Law Enforcement: When necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, or threats to safety
• Legal Proceedings: In connection with legal proceedings, investigations, or regulatory inquiries

Business Transfers

• Corporate Transactions: In connection with mergers, acquisitions, asset sales, or other business transfers, with appropriate notice to affected users
• Due Diligence: To potential buyers or investors during due diligence processes, under strict confidentiality agreements

5. Data Security and Protection

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Technical Safeguards

• Encryption: All data transmission is protected using industry-standard SSL/TLS encryption protocols
• Data Storage: Personal information is stored in secure, encrypted databases with restricted access controls
• Network Security: Firewalls, intrusion detection systems, and network monitoring to prevent unauthorized access
• Regular Updates: Security patches and system updates are applied promptly to maintain protection against emerging threats

Administrative Safeguards

• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal information
• Employee Training: Regular privacy and security training for all staff members who handle personal information
• Background Checks: Comprehensive background checks for employees with access to sensitive information
• Confidentiality Agreements: All employees and contractors sign strict confidentiality agreements

Physical Safeguards

• Secure Facilities: Physical security measures at data centers and office locations
• Equipment Security: Secure disposal of hardware and storage devices containing personal information
• Access Monitoring: Physical access controls and monitoring systems at all facilities

6. Your Privacy Rights and Choices

As a user of our platform, you have various rights regarding your personal information under Canadian privacy laws:

Access and Correction Rights

• Right to Access: You can request access to the personal information we hold about you, including details about how it's used and shared
• Right to Correction: You can request correction of any inaccurate, incomplete, or outdated personal information
• Account Management: You can update most of your personal information directly through your account settings
• Data Portability: You can request a copy of your personal information in a structured, machine-readable format

Control and Consent

• Marketing Communications: You can opt out of marketing emails and promotional communications at any time
• Cookie Preferences: You can manage cookie settings through your browser or our cookie preference center
• Data Processing: You can withdraw consent for certain types of data processing where consent is the legal basis
• Account Deletion: You can request deletion of your account and associated personal information, subject to legal retention requirements

Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Information" section. We will respond to your request within 30 days and may require verification of your identity to protect your privacy.

7. Data Retention and Deletion

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

Retention Periods

• Account Information: Retained for the duration of your active account plus 7 years after account closure for regulatory compliance
• Training Records: Maintained for 10 years to comply with Canadian agricultural training certification requirements
• Financial Records: Billing and payment information retained for 7 years for tax and accounting purposes
• Communication Records: Customer service interactions retained for 3 years for quality assurance and dispute resolution
• Technical Logs: System logs and technical data retained for 1 year for security and troubleshooting purposes
• Marketing Data: Marketing communication preferences retained until you opt out or request deletion

Secure Deletion

When personal information is no longer needed, we securely delete or anonymize it using industry-standard data destruction methods. This includes secure wiping of electronic storage devices and proper disposal of physical documents.

8. International Data Transfers

While our primary operations are based in Canada, some of our service providers may be located outside of Canada. When we transfer personal information internationally, we ensure appropriate safeguards are in place:

• Adequacy Decisions: We prioritize transfers to countries with adequate privacy protection as recognized by Canadian authorities
• Contractual Safeguards: We use standard contractual clauses and data processing agreements to protect transferred data
• Certification Programs: We work with service providers who participate in recognized privacy certification programs
• Regular Monitoring: We regularly review and monitor international data transfers to ensure ongoing protection

9. Children's Privacy

Our Service is designed for professional use by adults in the agricultural sector. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected personal information from a minor without proper consent, we will take immediate steps to delete such information from our systems.

Parents or guardians who believe their child has provided personal information to us should contact us immediately using the contact information provided below.

10. Third-Party Links and Services

Our platform may contain links to third-party websites, applications, or services that are not owned or controlled by Excibico. This Privacy Policy does not apply to these third-party services, and we are not responsible for their privacy practices.

We encourage you to review the privacy policies of any third-party services you access through our platform. Some third-party services we may integrate with include:

• Payment processing services
• Analytics and performance monitoring tools
• Customer support platforms
• Educational content providers

11. Privacy Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Notification: Provide notice through our platform, email, or other appropriate means
• Advance Notice: Give at least 30 days' notice for material changes that affect how we use your personal information
• Clear Communication: Clearly explain what has changed and how it may affect you
• Consent: Obtain your consent for changes that require it under applicable law
• Version Control: Maintain previous versions of our Privacy Policy for reference

Your continued use of our Service after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Information and Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer:

We are committed to addressing your privacy concerns promptly and will respond to all inquiries within 30 days. If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy authority.