Privacy

Last updated: July 20, 2026

Introduction

Prochista Smart Technologies Corp. ("Prochista," "we," "us," or "our") respects the privacy of our users ("user," "you"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at prochista.com (the "Site") or interact with our products and services. Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Site.

We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you to changes by updating the "Last updated" date above. You are encouraged to review this Privacy Policy periodically.

Information We Collect

We collect two categories of information:

Personal information you provide directly. When you register on our Site, request a demo, complete a contact form, subscribe to communications, or correspond with us, we may collect:

• Name and job title
• Email address and phone number
• Company name and country
• Any other information you choose to provide in free-text fields

Technical information collected automatically. When you visit the Site, we automatically receive:

• IP address and approximate geographic location (city/country level)
• Browser type, operating system, and device identifiers
• Pages viewed, time spent on pages, and the referring URL
• Interaction events (clicks, scroll depth, and page interactions used for session replay, with typed text and form fields masked before anything leaves your browser)
• Chatbot conversation history, if you use the chatbot

Partly completed forms

Our contact and demo forms ask for your work email first. When you select Continue, we save that email together with the page you were on, so we can follow up about your inquiry even if you do not finish the rest of the form. This is stated next to the Continue button before anything is saved. If you complete the form, the saved email simply becomes part of your submission; if you do not, the partly completed record is deleted from our website database after 30 days. Because you agreed to be contacted, the email may also be added to our customer relationship system (HubSpot) for follow-up, where it stays until you ask us to remove it.

We also measure how our forms are used, for example which step visitors stop at. These measurements record field names and counts only, never the text you type.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and demo requests
• Provide, operate, and improve our products and services
• Send service-related communications (e.g., onboarding emails, account updates)
• Send marketing communications, only where you have opted in and only until you opt out
• Detect, prevent, and address technical issues, fraud, or abuse
• Comply with our legal obligations

Cookies and Similar Technologies

The Site uses cookies and similar technologies in three categories, which you control from the cookie banner shown on your first visit and anytime afterwards via the "Cookie settings" link in the footer:

• Strictly necessary: required for core features such as your customer-portal session, security, and your preferences (for example the "lang" language cookie). Always active.
• Analytics and performance: help us understand how the Site is used so we can improve it. These include Google Analytics cookies ("_ga", "_ga_*") and Microsoft Clarity cookies ("_clck", "_clsk").
• Marketing: support advertising measurement and remarketing through Google Ads (for example the "_gcl_au" cookie).

For visitors in the European Economic Area, the United Kingdom, and Switzerland, analytics and advertising storage stay off until you give consent (Google Consent Mode v2). Elsewhere, these categories are active by default and you can opt out at any time from the cookie banner.

You can configure your browser to refuse cookies or alert you when cookies are being sent. If you disable cookies, some parts of the Site may not function correctly.

Analytics, Advertising, and Session Replay

We use the following measurement services on the Site, always subject to the consent controls described above:

• Google Analytics 4 (Google LLC): collects device and browser information, approximate location (city or country level), pages viewed, and interaction events to produce aggregated usage statistics that help us improve the Site. Learn how Google uses this data at policies.google.com/technologies/partner-sites.
• Google Ads conversion measurement and remarketing (Google LLC): measures whether our advertising leads to actions such as a contact request, newsletter signup, or datasheet download, and may show you relevant Prochista ads on other websites. Where you submit a form, a hashed (unreadable) version of your contact details may be used to improve conversion measurement. You can opt out of personalized advertising at adssettings.google.com.
• Microsoft Clarity (Microsoft Corporation): produces heatmaps and session replays (mouse movement, clicks, scrolling) that help us find usability problems. Typed text and form fields are masked before any recording leaves your browser, so names, email addresses, and messages do not appear in replays. See the Microsoft Privacy Statement.

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We share information only in the following situations:

• Service providers we engage to operate the Site and our services. These providers are bound by confidentiality obligations and may use the information only to deliver services on our behalf. Current categories include hosting infrastructure, email delivery, AI services that power our chatbot (Azure OpenAI for natural-language generation, Pinecone for vector search, and Hugging Face for embeddings), and the measurement services described above (Google Analytics, Google Ads, Microsoft Clarity).
• Legal compliance: when required by law, court order, or to protect our rights, property, or safety, or that of our users or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case the recipient will be bound by terms at least as protective as this policy.

Data Retention

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods:

• Contact-form submissions: 24 months
• Demo-request records: 36 months
• Chatbot conversation logs: 90 days
• Google Analytics user-level data: 14 months (aggregated reports are kept longer without individual identifiers)
• Microsoft Clarity session recordings: up to 30 days (aggregated heatmap data up to 13 months)

Security

We implement administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit (HTTPS), encryption at rest for stored personal data, access controls, regular security reviews, and personnel training.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

Where Your Information Is Stored

Personal information is stored on infrastructure located in Canada. If we transfer personal information outside of Canada (for example, when using AI services hosted in the United States or Europe), we ensure appropriate safeguards are in place, including contractual commitments to standards comparable to PIPEDA and applicable provincial privacy laws.

Your Rights

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act Respecting the Protection of Personal Information in the Private Sector ("Law 25"), if applicable to you, you have the right to:

• Access the personal information we hold about you
• Correction of inaccurate or incomplete personal information
• Deletion of your personal information, subject to legal retention obligations
• Withdrawal of consent to ongoing processing, where consent is our legal basis
• Portability of your personal information in a structured, commonly used format

We will respond to verified access or correction requests within 30 days. Visitors from the European Economic Area, the United Kingdom, or other jurisdictions with privacy laws may have additional rights under their local law.

Children's Privacy

The Site is not directed at children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, please contact us and we will delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted on our Site for a reasonable period before they take effect. The "Last updated" date at the top of this policy reflects the most recent revision.

Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your rights, contact us at:

Prochista Smart Technologies Corp.
Email: info@prochista.ca
Phone: +1 (647) 478-1812