Privacy Policy
Effective Date: July 2026 • System Version v2.5.0-PROD
1. Canadian Data Sovereignty & Residency
NonaOps ("Digital Maples Platform", operated by Digital Maples Labs Inc.) enforces strict Canadian Data Sovereignty. All primary databases, Firestore collections, donor records, and AI vector indices are hosted isolated exclusively within Google Cloud Platform (GCP) Montréal servers (northamerica-northeast1). Your donor PII, case notes, and financial records never leave Canadian borders.
2. Zero Data Retention (ZDR) AI Architecture
When utilizing NonaOps's AI Copilot, proposal co-pilot, or meeting action item extractor, your prompts and uploaded organizational documents are processed under strict Zero Data Retention (ZDR) contracts with Google Gemini API & OpenRouter enterprise endpoints. Your data is never used to train base AI models.
3. Tenant Isolation & Encryption
Every non-profit organization operates within an isolated subcollection namespace. Data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption keys managed under Google Cloud KMS.
4. CRA Compliance & Tax Receipt Security
NonaOps generates official Canadian Revenue Agency (CRA) compliant electronic tax receipts. Audit logs are append-only and immutable to guarantee verification during CRA audit checks.
5. Contact & Privacy Officer
For data access requests, PIPEDA inquiries, or security audits, contact our Privacy Officer at privacy@nonaops.ca (Legal: legal@nonaops.ca, Support: support@nonaops.ca).