Privacy Policy
Effective date: December 24, 2025
This Privacy Policy explains how Tristan Salisbury (operating as BearPack Online Services, “BearPack”, “we”, “us”, “our”) collects, uses, discloses, and protects personal information when you use https://bearpackonlineservices.com (the “Site”) or engage our services.
If you do not agree with this Privacy Policy, do not use the Site.
1) Who we are
- Legal name: Tristan Salisbury
- Operating name: BearPack Online Services
- Business address:
Tristan Salisbury
2375 Tecumseh Rd W
Ste 1 #1255
Windsor, ON N9B 1W2
Canada - Email: ArctiCasters@gmail.com
2) Scope
- Visitors to the Site
- Prospective customers who contact us
- Customers and their authorized users (where applicable)
- Vendors and partners (limited)
3) Personal information we collect
A) Information you provide
- Contact details (name, email, phone number if provided, company)
- Project information (requirements, messages, files you share)
- Billing details (invoices, payment confirmations; payment card details are typically handled by third‑party payment processors and not stored by us)
- Support information (issue reports, logs you provide)
B) Information collected automatically
- Device and usage data (approximate location, browser type, pages viewed, referring pages)
- Cookies and similar technologies (see Section 9)
C) Information from third parties (where applicable)
- Analytics providers (aggregated usage information)
- Payment processors (payment status and limited billing metadata)
- Auth providers (if you sign in with a third-party service such as Discord/Google)
4) How we use personal information
- Respond to inquiries and provide estimates
- Deliver, operate, and maintain services you request
- Communicate about project status, support, and updates
- Process invoices and maintain accounting records
- Improve our Site and services (e.g., diagnostics, analytics)
- Prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce agreements
5) Consent and legal bases (Canada)
We generally rely on your knowledge and consent for the collection, use, or disclosure of personal information, except where permitted or required by law. You may withdraw consent, subject to legal/contractual restrictions and reasonable notice (see Section 8).
In Canada, privacy obligations may apply under federal or provincial laws depending on context. For most private-sector commercial activities, privacy practices are commonly aligned with PIPEDA principles (including accountability, limiting collection, safeguards, and access).
6) How we disclose personal information
We may disclose personal information:
- To service providers who help us operate (hosting, email delivery, analytics, error monitoring, payment processing)
- To professional advisors (legal/accounting) as needed
- If required to comply with lawful requests or to protect rights, safety, and property
- In connection with a business transaction (e.g., merger/asset sale), subject to applicable law
We do not sell personal information.
6a) Service providers list (categories)
Our main service providers include:
- Hosting and infrastructure: Supabase (database), Vercel (web hosting), AWS (optional backup)
- Analytics: Plausible Analytics, Sentry
- Email: Resend
- Payments: Stripe
- AI services: OpenAI, Anthropic, DeepSeek (AI chat processing)
- Authentication: Discord, Google
- Professional services: Accountants, legal counsel, IT support
These providers have contractual obligations to protect personal information and use it only for purposes we specify.
7) Cross-border processing
Our service providers may store or process information outside Canada. When this occurs, information may be subject to the laws of the jurisdiction where it is processed. We use reputable providers and implement safeguards appropriate to the sensitivity of the information.
8) Your privacy choices and access
Depending on applicable law, you may request to:
- Access or correct your personal information
- Withdraw consent (where we rely on consent)
- Ask questions about our privacy practices
To make a request, contact ArctiCasters@gmail.com with the subject line: "Privacy Request".
9) Cookies and tracking
We use cookies and similar technologies to:
- Make the Site function (essential cookies)
- Measure performance and improve the Site (analytics cookies)
- Remember preferences (preference cookies)
- Support marketing (optional; if used, we provide appropriate notice/choices)
You can control cookies through:
- Your browser settings
- Any on-site cookie controls we provide (if enabled)
If we use online behavioural advertising, we will provide appropriate notice and choice mechanisms.
10) Customer support chat (if enabled)
If we enable a live chat or AI-powered help chat on the Site, the following applies:
- What we collect: Chat transcripts, questions asked, contact information you provide
- How we use it: Answering questions, improving support quality and response accuracy. We do not use chat content to train public AI models.
- AI processing: If AI chat is enabled, your messages may be processed by third-party AI service providers (e.g., OpenAI) subject to their terms and policies
- Retention: Chat transcripts are retained for 90 days for quality assurance, then archived or deleted
- Your rights: You can request deletion of your chat transcript by contacting us at ArctiCasters@gmail.com with subject line "Chat Transcript Deletion"
- Do not share: Payment card details, passwords, or sensitive personal information via chat
11) Data retention
We keep personal information only as long as necessary for the purposes described above, unless a longer period is required by law (e.g., tax/accounting records) or for legitimate business needs (e.g., security logs).
Specific retention windows:
- Contact form inquiries: Retained for 2 years for customer relationship purposes, then deleted unless required by law
- Customer communications: Retained as long as the customer relationship is active, plus 3 years for legal/tax purposes
- Chat transcripts: Retained for 90 days for quality assurance, then deleted
- Invoicing and accounting records: Retained for the period required by tax/accounting law (typically 6-7 years in Canada)
- Analytics data: Retained according to analytics provider policies (typically 12-26 months)
12) Security safeguards
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information, which may include:
- Access controls and least-privilege permissions
- Encryption in transit (TLS) and, where appropriate, at rest
- Secure credential management
- Monitoring and logging for security events
No method of transmission or storage is 100% secure.
13) Children
The Site is not intended for children under the age of 13, and we do not knowingly collect personal information from children under 13.
14) Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will update the “Effective date” and, where appropriate, provide additional notice.
15) Contact
Questions or concerns:
Email: ArctiCasters@gmail.com
Mail:
BearPack Online Services (Tristan Salisbury)
2375 Tecumseh Rd W
Ste 1 #1255
Windsor, ON N9B 1W2
Canada
Privacy contact: Tristan Salisbury