Privacy policy

Visitor data: what we learn when you visit this website or book a walkthrough. We decide how it is used.

Case data: the client details, documents and messages a firm puts into the product. The firm decides how it is used. We hold and process it only to run the product for that firm. If you are a firm's client, your questions about your case go to your consultant first.

On this website: pages viewed and the actions taken on them, through PostHog and Google Tag Manager. When you book a walkthrough, Cal.com collects the name, email and notes you enter.

In the product: staff names and email addresses for sign in; the client details, documents and messages a firm or its clients upload; and how the product is used, through PostHog.

To run the product: store case files, sort, name and check documents, build PDF packages, send sign in links and notifications.

To improve the website and product, using usage data.

To reply when you write to us or book a walkthrough.

We do not sell personal information, and we do not use it for advertising.

Cloudflare: hosting, file storage, and the email we send.

Our database host, reached through Cloudflare, which stores case records.

AI providers, which read document content to classify, extract and check it: Google (Gemini) by default, and Anthropic (Claude) when a firm selects it. We use their paid API plans, whose terms do not let them use what we send to train their models. They may keep it for a short time to detect abuse. A firm can also connect its own AI provider account; that provider's terms then apply.

PostHog: product and website analytics, on its United States servers.

Cal.com: walkthrough booking.

Some of these providers process data outside Canada.

A sign in cookie keeps you signed in to the product. It is needed for the product to work.

PostHog sets a cookie to count visits and connect website visits to later product use.

Cal.com may set its own cookies when the booking calendar loads.

Traffic to the website and product is encrypted with HTTPS. Stored files are encrypted at rest by our storage provider. Secrets a firm stores with us, such as its own AI keys, are encrypted before they are saved.

Inside a firm, admins and staff see that firm's cases only. A client sees only their own case.

Case data stays until the firm deletes it or asks us to. When staff delete a case in the product, its record and its stored files are deleted with it. To remove a whole firm's data, email us and we will confirm when it is done.

Booking details stay in Cal.com for as long as we need them to follow up.

You can ask to see, correct or delete the personal information we hold about you, or withdraw consent, by writing to hello@rcicaxis.com. We reply within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

When this policy changes, we update the date at the top. If a change affects how we use case data, we tell firms by email first.