Privacy policy

1. Who we are and what this policy covers

Exacto Systems Inc., operating as Finnovate.io (“Finnovate,” “we,” “us” or “our”), operates https://finnovate.io. This Privacy Policy explains how we handle personal information submitted through our Website contact form and in related correspondence.

We are responsible for personal information under our control and handle it in accordance with the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and other applicable privacy laws. This policy does not govern personal information processed through separate client engagements or software products, which are subject to their applicable agreements and privacy notices.

2. Personal information we collect

Our contact form collects your name, email address and phone number so that we can respond to you. If you continue the conversation by email or phone, we may also receive information you choose to provide in that correspondence.

Please provide only information relevant to your inquiry. Do not send passwords, payment card details, government identification numbers, sensitive personal information or confidential client information through the contact form. Contact us first if your inquiry requires a secure channel.

3. How we use your information

We use your contact information to receive, understand and respond to your inquiry, contact you about it and manage related correspondence. We do not use contact form information for unrelated purposes or automatically add you to a marketing mailing list.

If we wish to use your information for a new purpose, we will explain that purpose and obtain consent where required by law. We may also use or disclose information without consent where applicable law requires or permits it.

4. Your consent and choices

When you voluntarily submit your contact details after receiving notice of these purposes, you consent to our handling of that information to respond to your inquiry. This consent does not extend to unrelated marketing, advertising or other undisclosed purposes.

You may choose not to submit the form. You may withdraw consent to further use or disclosure of your information by contacting us, subject to legal or contractual restrictions and reasonable notice. We will explain any relevant restrictions or consequences, including if withdrawal means we can no longer respond to your inquiry.

5. When we share information

We do not sell or rent your personal information. Access within Finnovate is limited to personnel who need it to respond to your inquiry or administer the systems used for that purpose.

Where we use service providers to operate the Website, deliver form submissions or manage email and related systems, they may process information on our behalf. We require appropriate protection and limit their use of the information to providing those services. We remain accountable for personal information transferred to service providers.

We may disclose information if required or permitted by law, including in response to a valid legal demand. Any other disclosure will require consent unless a lawful exception applies.

6. How long we keep information

We retain contact form information and related correspondence only for as long as reasonably necessary to respond to and manage your inquiry, and to meet applicable legal obligations. Relevant considerations include whether the inquiry remains active, whether follow-up is reasonably expected and whether a legal retention requirement applies.

When information is no longer needed, we securely delete or destroy it, or anonymize it. You may ask us to delete your information. We will assess the request and explain any legal requirement or other lawful reason that prevents immediate deletion.

7. How we protect information

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information to protect it against loss, theft, unauthorized access, disclosure, copying, use or modification. We limit access to personnel and service providers with a legitimate need to handle it.

No transmission or storage system can be guaranteed completely secure. If a breach occurs, we will assess it and meet applicable record-keeping, reporting and notification obligations.

8. Access and correction

You may request access to the personal information we hold about you, ask how it has been used or disclosed, or request correction of inaccurate or incomplete information. Contact us using the details below. We may ask for information reasonably necessary to verify your identity before responding.

We will respond to access requests within 30 calendar days, unless an extension is permitted by law. If an extension is needed, we will notify you within the initial 30-day period and explain the reason, the extended deadline and your right to complain. Access is subject to applicable legal exceptions. If we refuse a request, we will explain the reason and available complaint options, except where prohibited by law.

9. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. The effective date identifies when the current version took effect. We will provide additional notice and obtain new consent where required for material changes to how we handle personal information. Posting a revised policy does not, by itself, authorize a new use of previously collected information.

10. Privacy questions and complaints

Our Privacy Officer is responsible for overseeing our handling of personal information. To withdraw consent, request access or correction, request deletion, or raise a question or complaint, contact:

We will investigate privacy complaints and take appropriate steps to address them. You may also contact the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca or another privacy regulator with jurisdiction. You do not have to contact us first to exercise your right to complain to a regulator.