Privacy Policy

Last updated: March 20, 2026

This Privacy Policy explains how BorealPath collects, uses, stores, and protects information when you use the BorealPath website, application, diagnostics, and related services (the “Service”).

1) Information we collect

Depending on how you use BorealPath, we may collect and store the following categories of information:

  • Account and authentication data, such as your email address, Google account identifier, and profile image if provided via Google Sign-In.
  • Diagnostic and report data, such as your responses, role context, saved runs, generated summaries, and result history.
  • Session and continuity data, such as application session identifiers, browser-level identifiers used for continuity, and account-linking events.
  • Technical and security data, such as timestamps, approximate IP-derived security signals, device or browser signals, hashed fraud-prevention data, and operational logs.
  • Consent records, such as the policy or consent version presented, when consent was captured, and the context in which it was recorded.

2) How we collect information

We collect information directly from you when you sign in, use the diagnostic experience, save results, or contact us. We also collect limited technical information automatically through the website and app to operate the Service, maintain session continuity, and protect against misuse.

3) How we use information

  • To authenticate you and maintain your account session.
  • To generate diagnostic outputs, saved results, and report continuity.
  • To associate diagnostic history with your account across sessions or devices.
  • To send service-related communications, such as account or access notices.
  • To detect abuse, investigate issues, and maintain service reliability and security.
  • To improve the Service using internal analytics, debugging, and operational telemetry.

4) Google Sign-In

BorealPath currently uses Google Sign-In for account authentication. If you continue with Google, Google provides BorealPath with basic identity information needed to authenticate you. BorealPath then creates and manages its own application session. BorealPath does not rely on Google to store your diagnostic history or result records.

5) Cookies and similar technologies

BorealPath uses cookies and similar mechanisms to keep you signed in, support cross-page or cross-subdomain continuity, remember session state, and support security and reliability. Disabling cookies may limit parts of the Service.

6) Sharing

We do not sell personal information. We may share information with service providers that help us operate BorealPath, such as hosting, infrastructure, authentication, analytics, logging, and security providers, subject to appropriate contractual or operational controls. We may also disclose information if required by law or to protect the rights, safety, or integrity of BorealPath, our users, or others.

7) Retention

We retain information for as long as reasonably necessary to provide the Service, preserve your account and result continuity, maintain security, resolve disputes, enforce our terms, and meet legal or operational requirements. Some information may remain in backups, logs, or archived systems for a limited period after deletion or update requests.

8) Your choices and requests

Where applicable, you may request access to, correction of, or deletion of your personal information. You may also request deletion of your BorealPath account or saved results, subject to legal, security, backup, and operational retention needs.

9) Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10) Children

BorealPath is intended for adults and professional users. The Service is not directed to children.

11) Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the effective date.

12) Contact

Privacy requests or questions: info [at] borealpath [dot] ca

(Replace [at] with @ and [dot] with ..)