Privacy Policy
This Privacy Policy describes how SAP Consulting Services Canada ("we", "our", or "us") collects, uses, and protects information when you use our mobile and web applications (collectively, the "Services"). We aim to follow privacy best practices consistent with Canadian law (including PIPEDA) and applicable platform policies.
Information We Collect
- Account information: email address and a unique user identifier when you sign in.
- Chat content: messages you send or receive (stored to deliver the conversation experience).
- Device identifiers for push: Firebase Cloud Messaging (FCM) registration tokens to deliver notifications.
- Usage data: basic app events and telemetry needed to operate the service. Our public website may use Google Analytics to understand aggregate usage.
How We Use Information
- Provide and improve the chat experience, including delivering messages and notifications.
- Maintain account security (e.g., sign‑in, email verification, fraud prevention).
- Respond to support requests and operate the Services.
Legal Basis and Consent
We process your information to provide the Services you request (e.g., delivering messages) and with your consent where applicable (e.g., enabling notifications on your device). You can withdraw notification permission at any time in your device settings.
Data Sharing
We use trusted service providers to host and operate the Services, including Google Firebase (Authentication, Firestore, and Cloud Messaging). These providers process data on our behalf under contractual terms and security standards. We do not sell personal information.
Data Location and Transfers
Our Services are hosted using cloud infrastructure. Depending on your region and service configuration, data may be processed in data centers outside your province or country. We implement safeguards appropriate to the sensitivity of the data.
Retention
We retain account and message data for as long as necessary to provide the Services and meet legal or operational requirements. You can request deletion of your account; associated data will be removed or anonymized subject to legal obligations and technical constraints (e.g., backups).
Security
We take reasonable measures to protect information, including access controls, encryption in transit, and least‑privilege access. No method of transmission or storage is 100% secure; residual risk cannot be eliminated.
Your Choices
- Notifications: enable or disable push notifications in your device settings.
- Access/Correction/Deletion: contact us to request access to, correction of, or deletion of your information.
Children
Our Services are intended for use by adults in a professional context. We do not knowingly collect personal information from children.
Contact Us
If you have questions about this Privacy Policy or wish to make a privacy request, please contact us via our Contact page.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be highlighted on this page. Your continued use of the Services after changes indicates acceptance of the updated policy.