Privacy policy
This policy explains what personal information Tidewire collects, why, who we share it with and the choices you have. It covers our website (tidewire.ca) and the Tidewire texting app (app.tidewire.ca).
- We collect only what we need to run the website and the app.
- We never sell personal information, and we never share mobile numbers or texting consent with anyone for their marketing.
- Analytics cookies stay off until you accept them.
- Our service providers store data in the United States.
- Email privacy@tidewire.ca to see, correct or delete your information.
What we collect
When you join early access
Your name, work email, where your contacts are kept today and roughly how many texts you send per month. We use this to contact you about Tidewire and to plan your onboarding.
When you visit the website
If you accept analytics cookies, Google Analytics collects information about your visit: pages viewed, how you arrived, your general location (city level), device and browser type. If you decline, Google Analytics may still receive basic, cookieless signals such as a page view without identifying you across visits. We use this to understand which pages are useful. We don't use advertising cookies.
When you use the Tidewire app
- Account information: your name, email, business name and password (stored only as a secure hash).
- Your customers' information: the contacts, phone numbers, consent records and messages your business adds to Tidewire or exchanges through it.
- Usage and technical information: message counts for billing, delivery status from carriers, and server logs such as IP address and browser type, used for security and troubleshooting.
Information businesses store in Tidewire
When a business uses Tidewire to text its customers, that business decides who to text and what to say, and is responsible for having consent to do so. Tidewire processes those contacts and messages on the business's behalf, only to provide the service. If you received a text from a business using Tidewire and want your information changed or removed, contact that business directly. You can also reply STOP to any message to stop receiving texts from that number.
Text messaging
- We do not sell, rent or share mobile phone numbers, or text messaging opt-in data and consent, with third parties or affiliates for their marketing or promotional purposes.
- Reply STOP (or ARRÊT) to any message to opt out, and HELP (or AIDE) for help. Message frequency varies by business. Message and data rates may apply.
- Opt-outs are recorded and kept so that the number isn't texted again by mistake.
Who we share information with
We share personal information only with service providers that help us run Tidewire, under agreements that require them to protect it and use it only for the service they provide to us:
| Provider | What they do | Where data is processed |
|---|---|---|
| Render | Hosts the website and the app, including its database | United States |
| Twilio | Sends and receives text messages through phone carriers | United States |
| Google Analytics | Website analytics, only with your consent for cookies | United States |
| Microsoft 365 | Our email, when you write to us | Canada or United States |
Phone carriers receive the phone numbers and content of texts as needed to deliver them. We may also disclose information if the law requires it, or as part of a sale or merger of the business, in which case this policy would continue to apply.
Information stored outside Canada
Our providers store and process information in the United States. It is protected by contract while there, but it may be accessible to courts and authorities there under United States law. We assessed this before choosing these providers and will tell you if that changes.
How long we keep information
- Early-access signups: until 12 months after Tidewire's public launch, or sooner if you ask us to remove you.
- Analytics: up to 14 months.
- Account and business data: while the account is open. After an account closes, we delete its data within 90 days, except opt-out records and anything we must keep by law.
- Server logs: up to 30 days.
How we protect information
Connections use encryption (https), passwords are stored as one-way hashes, access to production systems is limited to people who need it, and incoming carrier messages are verified before they're accepted. No system is perfectly secure. If a breach creates a real risk of significant harm, we'll notify affected people and the Office of the Privacy Commissioner of Canada, and the Commission d'accès à l'information du Québec where required.
Your choices and rights
- Access and correction: ask for a copy of the personal information we hold about you, or for corrections.
- Deletion and withdrawal of consent: ask us to delete your information or stop using it, subject to legal limits. Withdrawing consent may mean we can't provide some services.
- Portability: ask for your information in a common structured format.
- Cookies: change your analytics choice at any time with .
- Complaints: contact us first. You can also complain to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d'accès à l'information.
We'll reply within 30 days. We may need to confirm your identity first.
Children
Tidewire is a business service and isn't intended for anyone under 18. We don't knowingly collect information from children.
Privacy officer
Our privacy officer is responsible for protecting personal information at Tidewire and for this policy. Contact them at privacy@tidewire.ca.
Changes to this policy
If we change this policy, we'll update the date at the top. For significant changes, we'll also notify account holders by email or in the app before the change takes effect.