Privacy Policy
Personal Information Protection and Electronic Documents Act (PIPEDA) · Last updated June 2026
1. Data controller
PassiveIncomeAI Inc. (“we,” “us,” “the observatory”) is the organisation responsible for personal information collected through passiveincomeai.one and related correspondence. Our registered office is 320 East Broadway, Suite 405, Vancouver, BC V5T 1W9, Canada. Business Number 728 416 092.
2. Privacy Officer
Amara Singh, Archive Curator and Privacy Officer
Email: [email protected]
Mail: PassiveIncomeAI Inc., Attn. Privacy Officer, 320 East Broadway, Suite 405, Vancouver, BC V5T 1W9
3. Information we collect
Contact form submissions: When you use our contact form, we collect your name, email address, optional phone number, selected subject, message text, and the timestamp of submission. We also record your IP address and browser user-agent string for anti-spam defence and security logging — a practice disclosed at the point of collection.
Enrolment and service correspondence: If you proceed beyond an initial inquiry, we may collect billing address, programme preferences, accessibility requirements, and payment confirmation references. We do not store full credit card numbers on our servers; payments are processed through third-party processors who maintain PCI-compliant infrastructure.
Website navigation: Our hosting provider logs standard server data including IP address, request time, pages viewed, and referring URL. Analytics cookies, if you consent, collect anonymised audience measurements as described in our Cookie Policy.
Cookie consent records: Your cookie preference choice and expiry timestamp are stored in your browser's local storage for up to six months, aligned with Office of the Privacy Commissioner guidance.
4. Purposes of collection
We collect personal information for the following purposes:
- Responding to inquiries about observation slots, dispatch subscriptions, and memberships;
- Administering enrolled programmes and maintaining inflow logs you choose to store with us;
- Processing payments and issuing receipts in CAD;
- Complying with PTIB record-keeping requirements where applicable;
- Protecting the website against spam, abuse, and header-injection attacks;
- Improving site usability through anonymised analytics — only after your express cookie consent;
- Sending commercial electronic messages where you have provided express consent under CASL.
5. Legal basis under PIPEDA
PIPEDA Schedule 1 sets ten fair information principles. We rely primarily on consent — your explicit checkbox on the contact form and, where applicable, written enrolment agreements. For security logging and basic server operation, we rely on legitimate business interests that are reasonable, limited, and documented in this policy. We do not use personal information for purposes incompatible with those described here without obtaining fresh consent.
6. Recipients and cross-border processing
Personal information is accessed by authorised PassiveIncomeAI staff: the viewport host, chief watchkeeper, archive curator, and Privacy Officer on a need-to-know basis. Technical infrastructure is hosted by OVH Cloud Canada (Montréal, QC). Email delivery for form submissions transits through standard SMTP pathways to our designated inquiry mailbox. We do not sell, rent, or trade personal information to third-party marketers. If we engage subprocessors for payment or video hosting, we require contractual safeguards consistent with PIPEDA accountability requirements.
7. Retention
Contact form records and related correspondence are retained for three years after the last meaningful interaction, unless a longer period is required for statutory accounting, tax, or PTIB audit obligations. Security logs are retained for twelve months. Cookie consent records live in your browser for six months unless you clear local storage sooner. When retention periods expire, we delete or anonymise records unless anonymised data is retained in aggregate statistical form.
8. Your rights
Under Sections 8 and 9 of PIPEDA, you have the right to:
- Access personal information we hold about you, subject to limited exceptions;
- Correct inaccurate or incomplete information;
- Withdraw consent for non-essential processing, understanding that withdrawal may limit our ability to provide services;
- File a complaint with the Office of the Privacy Commissioner of Canada if you believe we have handled your information improperly.
Submit access or correction requests to [email protected]. We respond within thirty days unless an extension is permitted under PIPEDA.
9. CASL — commercial electronic messages
Canada's Anti-Spam Legislation (CASL) requires express consent before we send commercial electronic messages — including programme offers, renewal reminders, or promotional briefings. Our contact form includes an explicit, non-pre-ticked consent checkbox linking to this policy. Every commercial message identifies PassiveIncomeAI Inc., provides our contact address, and includes an unsubscribe mechanism effective within ten business days. Transactional messages related to active enrolments (schedule changes, receipt confirmations) are exempt from marketing consent requirements but remain identifiable as observatory correspondence.
10. Security safeguards
We implement administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold: HTTPS transport encryption, access controls for staff accounts, rate limiting on form submissions, honeypot bot filtering, and locked storage for bound inflow logs at our Vancouver facility. No method of transmission over the Internet is perfectly secure; we encourage you to avoid sending highly sensitive identifiers through the general contact form.
11. Children
Programmes target adult learners. We do not intentionally gather personal information from anyone below sixteen without verified parental permission. Should you suspect a minor filed data through our form, notify the Privacy Officer for immediate removal.
12. British Columbia privacy law
While PIPEDA applies to our interprovincial activities, we also respect British Columbia's Personal Information Protection Act (PIPA) where applicable to provincial private-sector handling. Observers in Quebec may have additional rights under Law 25; contact us for province-specific questions.
13. Changes to this policy
This Privacy Policy may change when law, technology, or observatory operations evolve. Substantive revisions appear here with a fresh “Last updated” stamp. Further browsing after publication counts as notice; active observers receive direct word when changes touch ongoing services.
14. Contact and complaints
Privacy Officer: [email protected]
Office of the Privacy Commissioner of Canada: www.priv.gc.ca · 1-800-282-1376