NorthernInference ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, why, and how it is handled.
1. Information We Collect
Waitlist Signup Data:
Email address (required)
Role and primary use case (optional)
Referral code, if you were referred by another user
Automatically Collected:
IP address (used for approximate geolocation — country/region level only)
Browser type and screen size
Referring URL and UTM campaign parameters
Page view and scroll depth analytics (anonymous, tied to a random visitor ID stored in your browser)
2. How We Use Your Data
Waitlist management: To notify you when NorthernInference launches and to communicate product updates.
Analytics: To understand how visitors interact with our landing page, measure conversion, and improve the user experience. Analytics data is anonymous and not linked to your email unless you sign up.
Referral tracking: To track referral relationships for our waitlist incentive program.
3. Data Storage and Security
All data is stored in AWS infrastructure located in Canada (ca-central-1).
Data is encrypted at rest (AES-256) and in transit (TLS 1.2+).
Access is restricted to authenticated administrators only.
We do not sell, rent, or share your personal data with third parties.
4. Cookies and Local Storage
We do not use tracking cookies. We use browser localStorage to store:
A random anonymous visitor ID (for aggregate analytics)
A session ID (for session-level analytics)
These contain no personally identifiable information and can be cleared by clearing your browser data.
5. Third-Party Services
Amazon Web Services (AWS): Infrastructure hosting (Lambda, DynamoDB, S3, CloudFront). AWS processes data per their privacy policy.
Amazon SES: Email delivery for confirmation emails.
Google Fonts: Font delivery. Google may collect anonymized usage data per their privacy policy.
ip-api.com: IP geolocation lookup (country/region only, no PII stored by them).
6. Data Retention
Waitlist data: Retained until you request deletion or until the service launches and you convert to a user account.
Analytics events: Automatically deleted after 90 days via DynamoDB TTL.
7. Your Rights
Under Canadian privacy law (PIPEDA), you have the right to: