Privacy Policy

This Privacy Policy explains how 17449275 Canada Inc., operating as GIS4AG (“GIS4AG”, “we”, “us” or “our”), collects, uses, discloses and protects personal information in connection with the geo-surface.com website and Geo-Surface Pro (also shown as Geo-Surface Drain Pro), its demo, the free Geo-Surface Viewer, the LiDAR Extractor, our free tools, the support assistant and member support (together, “Geo-Surface”). It should be read with our Terms of Service. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws.

1) Who is responsible

17449275 Canada Inc., operating as GIS4AG, Manitoba, Canada, is responsible for personal information under our control and has designated a Privacy Officer who is accountable for our compliance with this Policy. To reach the Privacy Officer, use our contact form and choose a privacy topic (“Privacy question or complaint” or “Access, correct or delete my personal data”). We do not publish an email address, to limit spam.

2) Information we collect

A) Account and membership information

When you register, purchase or manage a membership, our website (which runs on WordPress with the MemberPress membership system) collects your name, email address, username, password (stored in hashed form; we cannot see it), the plan and number of seats you hold, your Organization and the users its Administrator adds, billing details requested at checkout (such as billing address and country for tax), membership status, dates and transaction history. If you are added to a multi-user plan, your Administrator gives us your name and email address.

B) Payment information

Payments are processed by Stripe. Your full card number and security code go directly to Stripe; we do not receive or store them. We receive limited information from Stripe, such as the payment status, amount, date and limited card details (for example card brand, last four digits and expiry date), to manage your membership, renewals and refunds.

C) Messages and support

• Contact and member-support forms collect your name, email address, topic and message, and any details you choose to include. These forms are delivered to us through Formspree.
• Support cases from inside Geo-Surface Pro send, only when you press Send, your name, email, message, a session identifier, the page it came from and, if you choose to include it, a diagnostic bundle describing the state of the app (for example its version, settings, recent actions and error messages).

D) The support assistant

The support assistant is an artificial-intelligence helper. When you use it, the following is sent through our service provider (Bunny.net, which runs the relay) to OpenAI to generate a response:

• your question and the recent conversation in that session;
• only if you turn on project help for the session: a summary of your project’s state, such as the mode you are in, settings, counts of items, recent actions, warnings and errors. This summary is designed to exclude coordinates, field geometry, elevation data, file names, your branding and your cost figures;
• only if you attach one: a screenshot of the map, which may show imagery of your field.

We ask for your consent before project details are shared, and you can use the assistant without sharing them. We do not keep the content of assistant conversations; our relay logs only technical details (such as a request identifier, status and error codes) when a request fails. OpenAI processes the content under its API terms, which state that API data is not used to train its models by default and may be retained by OpenAI for a limited period for abuse and misuse monitoring. Please do not enter confidential information, or personal information about other people, in the assistant.

E) Technical information

Like most websites, our website host and our content delivery network (Bunny.net) automatically receive technical information when you visit, such as your IP address, browser and device type, the pages and files requested and the date and time. Our website and membership system use cookies described in Section 6.

F) What we do not receive

We do not receive your projects, field boundaries, survey files, elevation data, designs, reports or exports. Geo-Surface Pro stores them on your device (see Section 4). We do not collect your device’s GPS location; if you use the Viewer’s GPS feature, your position is used in your browser only. We do not buy personal information about you from others.

3) Requests your browser sends to map and data services

When you use Geo-Surface Pro, the demo, the Viewer or our free tools, your browser requests maps and data directly from the services below. Each request tells that service your IP address and the area or item requested. These services are operated by independent organizations under their own privacy policies; we do not control what they record.

These requests contain map areas and coordinates, not your name or account details. Do not type personal information into location search.

4) Information stored on your device

Geo-Surface Pro stores your work and settings in your browser (local storage, session storage and IndexedDB), in a projects folder you choose on your computer, and in backup files you save. This includes your projects, preferences, the company name and logo you enter for reports, cost rates you enter, and whether you have consented to project help in the support assistant. This information stays on your device, is under your control, and is not sent to us. Clearing your browser data or deleting the folder or files removes it permanently, and we cannot recover it. If you send someone a project backup (for example to open in the free Viewer), it contains your full design and the elevation and other data in it.

5) How we use personal information

• to create and manage accounts, memberships, seats and Organizations, and to provide Geo-Surface;
• to process payments, renewals, refunds and tax records;
• to answer questions and support requests, and to investigate and fix problems;
• to send service messages such as receipts, renewal notices, password resets and important changes to Geo-Surface or our terms;
• to protect Geo-Surface and our users, including detecting fraud, abuse and account sharing, detecting repeat free trials, and verifying eligibility for multi-user plans;
• to improve Geo-Surface, using support messages, feedback and aggregated or de-identified information; and
• to meet legal, tax and accounting obligations and to establish, exercise or defend legal claims.

We do not use personal information for purposes other than these without your consent, unless permitted or required by law. We do not sell, rent or trade personal information, and we do not use it for third-party advertising.

6) Cookies

Our website uses cookies that are needed for it to work, such as WordPress and MemberPress cookies that keep you signed in, protect forms and remember your session. Stripe may set cookies during checkout to process payment and prevent fraud. We do not use advertising cookies. If we add analytics or other non-essential cookies, we will update this Policy and ask for consent where the law requires. You can block or delete cookies in your browser, but signing in and checkout may not work without them. Our website does not respond to “Do Not Track” signals.

7) Consent

By creating an account, purchasing a membership, contacting us or using Geo-Surface, you consent to the collection, use and disclosure of personal information as described in this Policy. We ask for express consent before the support assistant receives project details. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent to information we need to provide Geo-Surface may mean we can no longer provide it.

8) Who we share it with

We share personal information only as follows:

• Service providers that process it on our behalf and only for our purposes: Stripe (payments), our website hosting provider, Bunny.net (content delivery, the support-assistant relay and the Swedish elevation relay), OpenAI (support-assistant responses), Formspree (form delivery) and our email provider. We use contractual and other means to protect personal information handled by service providers.
• Your Organization. On a multi-user plan, the Administrator can see the users on the plan and their membership status.
• Legal and safety. Where required or permitted by law, for example in response to a court order or lawful request, or to protect the rights, property or safety of us, our users or others.
• Business transfers. In connection with a reorganization, merger, financing, acquisition or sale of all or part of our business, subject to protections consistent with this Policy.

9) Where information is processed

We are based in Canada. Our service providers may store and process personal information in Canada, the United States and other countries. While it is outside Canada, it is subject to the laws of that country and may be accessible to its courts, law enforcement and national security authorities.

10) How long we keep it

After these periods we delete personal information or make it anonymous, unless we must keep it longer by law or to resolve a dispute or legal claim.

11) Security

We use reasonable physical, organizational and technical safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), hashed passwords, limited access and reputable service providers. No method of transmission or storage is completely secure, and we cannot guarantee security. You are responsible for protecting your password, your devices and the files you save and share. If we become aware of a breach of security safeguards involving personal information under our control that creates a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

12) Your rights

• You may ask to access the personal information we hold about you, ask us to correct it, or withdraw consent as described in Section 7. You may also ask us to delete it where we no longer need it; some records must be kept for legal or tax reasons.
• Send requests through the contact form with the topic “Access, correct or delete my personal data”. We may need to verify your identity. We will respond within thirty (30) days, or tell you if we need more time as the law allows.
• If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.
• If you live outside Canada, you may have additional rights under local law (for example in the European Union, the United Kingdom or certain U.S. states, such as rights to data portability, to object to or restrict processing, or to opt out of the sale or sharing of personal information). We do not sell or share personal information for cross-context behavioural advertising. Contact us to exercise any right available to you.

13) Children

Geo-Surface is intended for business and professional use by adults and is not directed to children. We do not knowingly collect personal information from anyone under the age of majority. If you believe a child has given us personal information, contact us and we will delete it.

14) Links to other sites

Our website and Geo-Surface link to and load data from other websites and services, including the data services listed in Section 3. We are not responsible for their privacy practices. Please review their policies.

15) Changes to this Policy

We may update this Policy. We will post the updated Policy on this page with a new effective date and, for material changes, give notice through the website or by email.

16) Contact

For privacy questions or requests, use our contact form and choose a privacy topic. Attention: Privacy Officer, 17449275 Canada Inc., operating as GIS4AG, Manitoba, Canada.