Privacy Policy

1. Overview

Atmventory provides business software to independent ATM operators. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Atmventory does not process payment card transactions and never collects or stores cardholder data.

2. Information we collect

Account information. When you sign up we collect your name, work email address, company name, and a password (stored only as a salted hash). If you subscribe to a paid plan, billing details are collected and processed by our payment provider; we do not store full payment card numbers on our systems.

Customer business data. In using the Service, your company uploads operational data such as terminal records, processor reports, merchant agreements, and commission records. This data may include personal information about your merchants, contacts, and field staff. Your company controls this data; we process it only on your company’s instructions to provide the Service.

Usage information. We collect standard technical logs (IP address, browser type, pages accessed, timestamps) to secure and operate the Service. We do not use third-party advertising trackers.

3. How we use information

We use personal information to provide and support the Service, authenticate users, process subscription payments, respond to support requests, send service-related notices, and maintain security (including fraud and abuse prevention). We may use aggregated, de-identified usage statistics to improve the product. We do not sell or rent personal information to anyone, and we do not use your customer business data to train machine-learning models.

4. Subprocessors and sharing

We share personal information only with service providers who help us run Atmventory, under contracts that restrict their use of the data: our cloud hosting provider (which stores application data and backups), Stripe (subscription payment processing), and Anthropic (optional AI-assisted document extraction — when you choose to extract terms from an uploaded agreement, the document content is sent to Anthropic’s API for processing and is not used to train their models). Some providers may store or process data outside Canada, in which case it is subject to the laws of those jurisdictions. We may also disclose information where required by law, such as in response to a valid court order, and we will notify you of such requests where legally permitted.

5. Retention and security

We retain account and customer business data for as long as your company’s account is active, and for 60 days after termination so you can export it, after which it is deleted from production systems (backups are purged on a rolling schedule thereafter). Technical logs are kept for up to 12 months. We protect data with encryption in transit and at rest, role-based access controls, and audit logging. Access to customer data by our staff is limited to what is needed for support and operations. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected customers and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

6. Your rights

You may access, correct, or export the personal information in your account at any time through the Service or by contacting us. Individuals whose information appears in a customer’s uploaded business data should direct requests to that customer, as the party who controls the data; we will assist our customers in responding. You may withdraw consent to non-essential communications at any time. If you have a concern we have not resolved, you may contact the Office of the Privacy Commissioner of Canada.

7. Changes and contact

We may update this policy from time to time; material changes will be announced by email or in-app notice before they take effect, and the date above will be revised. Our privacy officer can be reached at privacy@atmventory.com.