Privacy Policy

Yarsa Technologies (“Yarsa”, “we”) builds and looks after websites, automations and online marketing for businesses in Canada. This policy covers yarsa.ca, our client dashboard (dash.yarsa.ca) and the work we do for clients.

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Ashwin Paudel is accountable for how we handle personal information. Write to info@yarsa.ca with any question.

We collect only what we need to talk to you and do the work you ask for:

• When you book a consultation: your name, email, the time you pick and anything you write in the booking form, so we can meet you. Booking runs on Calendly.
• When you email us: your address and what you write, to reply.
• When you use the client dashboard: your name, work email, company, the requests and messages you send, your plan and invoices, and a sign-in record. We use these to run your account, do the work and bill for it.
• When you pay: payments are handled by our payment provider. We keep the card brand, last four digits and payment status, never the full card number.
• Technical data: our host records basic request data (such as IP address and browser) to keep the service running and secure. yarsa.ca itself sets no tracking cookies; the dashboard sets one cookie that keeps you signed in.

We don't sell personal information, and we don't use it for anything you wouldn't reasonably expect from the list above.

When we run a client's website or tools, we may handle personal information about their customers: enquiries sent through their site, the records their staff keep in their dashboard, and counts of what visitors do on their pages. We handle it only on the client's instructions and to provide our service to them. The client decides why it is collected and is responsible for telling their own visitors.

Visitor counts on client sites are taken without cookies and without storing IP addresses or what anyone types.

We ask for consent when we collect personal information, and rely on implied consent where the purpose is obvious (for example, using your email address to reply to you). You can withdraw consent at any time, subject to legal or contract limits; we'll tell you what that changes.

We send commercial email only with your consent, in line with Canada's Anti-Spam Legislation (CASL). Every such email says who it is from and how to unsubscribe. Account emails (sign-in links, invoices, updates on your requests) are part of the service.

We use a small number of providers to run our service, each bound to protect the information and use it only for us:

• Cloudflare: hosting and the database behind the dashboard.
• Calendly: consultation booking.
• Amazon Web Services (Amazon SES): sending email from the dashboard.
• Twilio: text-message alerts, only for clients who turn them on.
• Stripe: card payments, once online payment is offered.

Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We choose providers with strong security and contractual protections.

We keep account and project records while you are a client and for up to seven years after, because the Canada Revenue Agency requires business records to be kept for six years from the end of the tax year they relate to. Consultation bookings and emails from people who don't become clients are deleted within two years. Sign-in links expire within 15 minutes and are not kept after use.

Access is limited to the people who need it. Connections are encrypted, the dashboard uses passwordless sign-in links with short expiry, and payment details stay with the payment provider. If a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires.

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete what we no longer need. Write to info@yarsa.ca; we answer within 30 days. If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Our services are for businesses. We don't knowingly collect personal information from children under 16.

We'll post any change here with a new date, and tell clients by email before a significant change takes effect.