Privacy Policy
Last updated: July 6, 2026
This Privacy Policy explains how OCorp Innovations Ltd. ("StormIt", "we", "us", or "our") collects, uses, and shares information when you visit stormit.ca(the "Site"), read our articles, create an account, subscribe, or use our writing tools. By using the Site you agree to the practices described here.
1. Who We Are
The Site is operated by OCorp Innovations Ltd., Vancouver, BC. Privacy at StormIt is the responsibility of our Privacy Officer, whom you can reach at privacy@stormit.ca.
2. Information We Collect
We collect information in three ways:
- Information you give us. When you create a StormIt account we collect your email address, name, and any profile information you choose to provide. If you subscribe to a paid plan we (through Stripe) process billing details; StormIt does not store full card numbers. If you subscribe to the newsletter we collect your email address.
- Content you create. Drafts, posts, comments, uploads, and text you send to our AI writing tools.
- Information collected automatically. Like most websites, we and our service providers automatically collect technical data such as your IP address (which we anonymise for rate-limiting), browser and device information, referring pages, the pages you visit, and the dates and times of your visits. This is collected through cookies and similar technologies (see Section 7 and our Cookie Policy).
3. How We Use Your Information & Our Legal Bases
We use the information we collect to (with the legal basis, where GDPR applies):
- Provide, maintain, and improve the Site and services — performance of our contract with you
- Process AI-powered writing assistance requests — contract
- Send service-related notifications, and — if you opt in — our newsletter — contract / consent
- Monitor usage, prevent abuse, and enforce rate limits — legitimate interests
- Process payments through Stripe — contract
- Measure and understand how visitors use the Site — consent
- Display and measure advertising on the public areas of the Site, if and when enabled — consent
- Comply with legal obligations and protect our rights — legal obligation / legitimate interests
Newsletters and commercial email.We send marketing or newsletter emails only to people who have asked to receive them. In line with Canada's Anti-Spam Legislation (CASL), every such email identifies us, includes our mailing address, and offers a one-click unsubscribe link; you can withdraw your consent at any time and we will stop sending you marketing email promptly. Service and account emails — for example security, billing, or legal notices — are not marketing and may still be sent while your account is active.
4. AI-Generated Content
Content you create using our AI writing tools is processed by third-party AI providers (OpenAI and Anthropic) to generate responses. We do not use your content to train AI models, and we use these providers' APIs under terms that do not train on your inputs.Our AI tools assist your writing; they do not make legal, financial, or other decisions about you that produce significant effects without human involvement. Please review the respective providers' privacy policies for their data-handling practices.
5. Data Storage, Security & Retention
Your data is stored using Supabase (hosted on AWS). We implement row-level security, encryption at rest, and encrypted connections (TLS) for all data transfers. We retain your data for as long as your account is active and for a limited period afterward as needed to provide the service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When you delete your account we remove your personal data within 30 days, except where we must retain limited records to meet a legal obligation. Some data may be retained in anonymised or aggregated form that no longer identifies you.
Data breaches.If a breach of security safeguards creates a real risk of significant harm, we will notify affected individuals and the relevant authorities (such as the Office of the Privacy Commissioner of Canada and, in Québec, the Commission d'accès à l'information) as required by law, and keep records of breaches as required.
6. Advertising
The public areas of the Site may display advertising — including, if and when we enable it, Google AdSense — to help keep our content free to read. No advertising is active today; the disclosures below apply if and when we turn it on, and we will not set advertising cookies before you consent:
- Third-party vendors, including Google, may use cookies to serve ads based on your prior visits to this Site and other websites.
- Google's advertising cookies (including the DoubleClick / DART cookie) would enable it and its partners to serve ads based on your visits to this and/or other sites.
- Third-party ad networks may use cookies, web beacons, and similar technologies to collect information about your activity to provide targeted advertising and analytics.
- We do not share the personal information in your StormIt account (such as your name or email) with advertisers.
You can opt out of personalised advertising via Google's Ads Settings, the Digital Advertising Alliance at aboutads.info/choices, or (in the EEA) youronlinechoices.eu.
7. Cookies & Similar Technologies
We use cookies and similar technologies for three purposes: (1) essential cookies that keep you signed in and the Site working; (2) analytics cookies that help us understand how the Site is used; and (3) advertising cookies (only if advertising is enabled). We ask for your consent before setting any non-essential cookies through our cookie banner, and you can change your choice at any time. For a full description and a list of the specific cookies, please read our Cookie Policy.
8. Third-Party Services (Processors)
We rely on the following service providers, each of which has its own privacy policy:
- Supabase — database and authentication
- Vercel — hosting, deployment, and (Vercel Analytics / Speed Insights) aggregate, privacy-friendly traffic and performance measurement
- PostHog — product analytics (set only with your consent)
- Sentry — error monitoring and diagnostics
- OpenAI / Anthropic — AI text and image generation
- Stripe — payment processing
- Resend — transactional and newsletter email delivery
- Google AdSense — advertising, if and when enabled
9. International Transfers
We operate from Canada. Your information may be processed in Canada, the United States, and other countries where our service providers operate — meaning it may be subject to the laws of, and accessible to authorities in, those countries. Where we transfer personal information outside your jurisdiction (including, for Québec residents, outside Québec), we take steps to ensure it receives an adequate level of protection, such as relying on our providers' contractual safeguards (including standard contractual clauses where applicable).
10. Your Rights & Choices
Depending on where you live (e.g. Canada/PIPEDA, Québec/Law 25, the EU/EEA/UK/GDPR, or California/CCPA), you may have the right to:
- Access the personal data we hold about you and know how it is used and shared
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Export / receive a portable copy of your content and data
- Withdraw consent for non-essential cookies and personalised advertising
- Object to or restrict certain processing, or (Québec) request that we cease disseminating data
- Where advertising is enabled, opt out of any "sale" or "sharing" of personal information for cross-context behavioural advertising
To exercise any of these rights, contact privacy@stormit.ca. You also have the right to complain to your data-protection authority (in Canada, the Office of the Privacy Commissioner; in Québec, the Commission d'accès à l'information; in the EU/UK, your local supervisory authority).
11. Data Deletion
You can delete your account at any time from Settings. Upon deletion, we remove your personal data within 30 days, subject to the limited legal-retention exceptions in Section 5. Some anonymised usage data may be retained for analytics purposes.
12. Children's Privacy
The Site is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date above; where required, we will seek your consent.
14. Contact Us
Questions about this Privacy Policy? Contact our privacy contact at privacy@stormit.ca or by mail at OCorp Innovations Ltd., Vancouver, BC.