Effective date: 20 June 2026
CANOPY.INC(“we”, “us”, “our”) operates Canopy Observe, an enterprise drone-inspection and AI observability platform. We are the data controller of personal data collected through the Service.
Northern Edge Software, Queensland, Australia
Data Protection contact: [email protected]
We collect the following categories of personal data:
We process personal data for the following purposes:
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Providing and operating the Service | Performance of a contract (Art. 6(1)(b)) |
| Authentication and access control | Contract / Legitimate interest (Art. 6(1)(b)(f)) |
| Security monitoring and fraud prevention | Legitimate interests (Art. 6(1)(f)) |
| Billing and payment processing | Contract / Legal obligation (Art. 6(1)(b)(c)) |
| Product improvement and analytics | Legitimate interests (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Sending service and security notices | Contract / Legitimate interests (Art. 6(1)(b)(f)) |
We do not sell personal data. We may share data with trusted sub-processors that help us deliver the Service, including cloud infrastructure providers (e.g., AWS, Cloudflare), database providers (e.g., Neon), and email delivery services. All sub-processors are bound by appropriate data-processing agreements.
We may disclose personal data where required by applicable law, court order, or regulatory authority, or to protect the rights, property, or safety of CANOPY.INC, our users, or the public.
Our infrastructure is hosted in AWS regions including Australia (ap-southeast-2), Europe (eu-west-1/2/3), and the United States (us-east-1). Transfers of personal data outside the UK or EEA are subject to appropriate safeguards, including Standard Contractual Clauses (SCCs) or equivalent mechanisms recognised under UK GDPR.
We retain personal data for as long as your account is active or as necessary to provide the Service. Account data is deleted within 90 days of account closure. Aggregated, anonymised analytics data may be retained indefinitely. We retain logs for security purposes for up to 12 months. Customer-uploaded operational data (telemetry, images, detection results) follows the retention settings configured by your organisation administrator.
We implement industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These include encryption in transit (TLS 1.2+) and at rest, role-based access controls, JWT-based authentication, and audit logging. However, no system is completely secure and we cannot guarantee absolute security.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and affected individuals without undue delay, in accordance with applicable law.
Canopy Observe uses session storage and local storage to maintain authentication tokens. We do not use third-party tracking cookies for advertising. Where we use analytics tooling, it is configured to anonymise IP addresses and avoid cross-site tracking.
If you are located in the European Economic Area or United Kingdom, you have the following rights in relation to your personal data:
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (e.g., ICO in the UK, or your national DPA in the EU).
The Service is intended for enterprise professional use only and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. The effective date at the top of this page will always reflect the most recent revision.
For privacy-related queries, requests, or complaints, please contact:
CANOPY.INC — Privacy Team
Northern Edge Software, Queensland, Australia
Email: [email protected]