Privacy Policy

Version 1.0 · Last updated: July 11, 2026

1. Scope

This Privacy Policy explains how 18055441 Canada Inc., operating as OffloadPro ("OffloadPro," "we," "us," or "our"), collects, uses, discloses, and safeguards personal information in connection with: (a) the OffloadPro desktop application, its background daemon/service, transfer worker, and installers (the "Software"); (b) the offloadpro.io website, documentation, and download services; (c) OffloadPro accounts, licensing, activation, and entitlement services; and (d) support, sales, and other communications with us.

It applies to personal information as defined by applicable law, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).

2. Local-first design: what stays on your machine

The Software is designed to run on your machine. The following data is created and stored locally (in the Software's local database and configuration files) and is not transmitted to us in normal operation:

  • your media files and their contents;
  • transfer jobs, transfer history, and checksums;
  • device registry entries, device labels, and format history;
  • projects, work units, routing rules, and naming conventions;
  • the asset index, thumbnails, proxies, and waveforms;
  • cloud connector tokens and application keys (stored locally using operating-system-protected secure storage where available); and
  • local logs and diagnostic files.

This data leaves your machine only when you move it (for example, by configuring a backup destination) or send it to us (for example, by attaching logs to a support request).

3. Information we collect

A. Account and licensing information

  • Name, email address, and company name (if provided), and sign-in identifiers from the authentication provider you choose.
  • License keys (stored hashed on our servers), plan and entitlement status, activation and deactivation events, and masked key fragments used for support.
  • Records needed to administer trials, promotional codes, courtesy licenses, and educational discounts (including verification materials you send us to qualify).

B. Activation and device information

  • Application version, operating system, platform, and architecture.
  • A derived, hashed machine fingerprint used for activation integrity, trial enforcement, and fraud prevention. Raw hardware identifiers are processed locally; only the derived value reaches our servers.
  • Install identifiers generated by the Software.
  • IP address and timestamps associated with licensing requests, as logged by our server infrastructure. Because this data is linked to a license, we treat it as personal information — we do not describe it as anonymous.
  • Update checks: at most once per rolling day, the Software requests a shared platform-and-architecture channel policy from our download CDN. The request URL does not include the installed application version, account identifier, license token, or machine identifier. A manual “Check for updates” action can make an additional request. Standard CDN logs still record ordinary network metadata such as time, requested path, and IP address.

C. Billing information

  • Purchases are processed by Paddle, our merchant of record. Paddle collects your payment details directly; we do not receive full payment card numbers.
  • We receive transaction records (product, plan, amounts, tax jurisdiction, invoice identifiers, and billing status) needed to provision licenses and handle billing questions.

D. Support and diagnostic information

  • Support emails, attachments, screenshots, and the contents of your messages.
  • Logs, configuration exports, and diagnostic bundles you choose to send us. These may contain file paths, filenames, transfer-job details, device labels, and cloud-provider metadata — send only what you are comfortable sharing, and redact where needed.

E. Website and account portal information

  • Standard server logs (IP address, user-agent, pages requested, timestamps) used for security and operations.
  • Cookies or similar technologies strictly necessary for sign-in, session management, and security. The website does not use third-party advertising or analytics cookies.

F. Cloud connector information (processed locally)

  • When you connect Google Drive, Microsoft OneDrive, Dropbox, Backblaze B2, or another supported provider, the Software processes provider account identifiers, OAuth tokens or application keys, selected folder identifiers, filenames and paths, sizes, timestamps, checksums, quota information, and provider status/error messages — on your machine, to perform the operations you request. This information is not sent to OffloadPro servers.

4. What we do not collect

  • No behavioral analytics or usage telemetry in the Software.
  • No advertising identifiers and no ad networks.
  • No sale or rental of personal information — to anyone.
  • No collection of your media files onto OffloadPro servers.
  • No use of your content or personal information to train artificial-intelligence models.
  • No automatic crash reporting: diagnostic material reaches us only if you choose to send it.

If any of these positions ever changes, we will update this Policy first and provide prominent notice, and, where required by law, obtain consent.

5. Why we process information

  • Creating and administering accounts, licenses, trials, and entitlements, and delivering downloads and updates.
  • Processing purchases, renewals, refunds, tax compliance, and billing support (with Paddle).
  • Authenticating licensing requests and preventing fraud, trial abuse, and unauthorized key use.
  • Providing technical support and investigating issues you report.
  • Sending transactional communications (receipts, license and renewal notices, security notices, and material changes to terms).
  • Securing and operating our infrastructure.
  • Complying with legal obligations and establishing, exercising, or defending legal claims.

We do not use personal information for secondary purposes incompatible with the above without your consent. Marketing email, if any, is sent only with consent consistent with Canada's Anti-Spam Legislation (CASL), and every marketing message includes a working unsubscribe mechanism.

6. Consent and legal bases

We rely on consent (express or implied, as permitted by PIPEDA and PIPA) obtained when you create an account, activate a license, make a purchase, or contact us, and on the other lawful bases recognized where you live. For users in jurisdictions with GDPR-style laws, our processing rests on: performance of a contract (licensing, billing, support), legitimate interests (security, fraud prevention, service operations), consent (where sought), and legal obligation (tax and accounting records). You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; withdrawing consent needed for licensing may limit paid features.

7. Cloud providers and other services you connect

When you authorize a cloud connector, the Software accesses only the provider data and actions needed for the features you request, subject to the permissions you grant. Your use of each provider is governed by that provider's own terms and privacy policy, and providers may log your activity independently of us. You can disconnect a provider in the Software (which removes locally stored credentials) and revoke the Software's access in the provider's own security settings. We are not responsible for the privacy or security practices of third-party services.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

8. Service providers and disclosures

We disclose personal information only:

  • To service providers acting for us under contract, limited to what they need: Paddle (merchant of record: checkout, payments, invoicing, tax); Amazon Web Services (hosting and infrastructure for licensing, downloads, and the website); and authentication and transactional-email providers for sign-in and service communications.
  • Where required or permitted by law: to comply with subpoenas, court orders, lawful regulatory demands, or to protect our rights, property, users, or the public, in each case disclosing the minimum necessary.
  • In a business transaction: in connection with a merger, financing, acquisition, reorganization, or sale of all or part of our business, with safeguards required by applicable law.
  • With your direction or consent.

We do not permit service providers to use personal information for their own marketing or profiling.

9. International processing

Our service providers (including Paddle and Amazon Web Services) may process personal information outside Canada, including in the United States, the United Kingdom, and the European Union. While information is in another jurisdiction, it is subject to the laws of that jurisdiction, and courts, law enforcement, and national-security authorities there may be able to access it. We use contractual and organizational safeguards with providers that offer protection comparable to this Policy. Questions about our transfer practices may be directed to the Privacy Officer.

10. Retention

We keep personal information only as long as needed for the purposes above and to meet legal obligations, then delete or anonymize it. Target retention periods:

  • Account and license records: life of the license plus 2 years (fraud-prevention and dispute window).
  • Activation and licensing server logs (including IP): 12 months.
  • Support correspondence and diagnostic bundles: 24 months after the ticket closes, or earlier on request where feasible.
  • Billing and tax records received from Paddle: 7 years (Canadian tax record-keeping requirements).
  • Discount-verification materials: deleted after the verification decision, retaining only the decision.
  • Website server logs: 90 days.
  • Backups of the above: rotated on a fixed schedule of no more than 35 days after deletion from live systems.

11. Security

We use administrative, technical, and organizational safeguards proportionate to the sensitivity of the information, including encryption in transit, hashed storage of license keys and machine fingerprints, access controls with multi-factor authentication for administrative systems, audit logging, and least-privilege service configuration. No system is perfectly secure; if a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the appropriate regulators as required by law and keep the records those laws require.

12. Your rights and choices

Subject to applicable law, you may:

  • request access to the personal information we hold about you and information about how it has been used and disclosed;
  • request correction of inaccurate or incomplete information;
  • request deletion of information we are not legally required to keep;
  • withdraw consent (Section 6);
  • disconnect cloud providers locally and revoke access at the provider;
  • uninstall the Software, which stops all licensing communications — local data remains on your machine under your control until you delete it;
  • complain to us, and to a regulator: the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, or your local authority.

Send requests to privacy@offloadpro.io. We will respond within the time required by applicable law (generally 30 days in Canada), may need to verify your identity, and will explain any exception we rely on if we cannot fulfil a request.

13. Children

The Software and Services are not directed to children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. If you believe a minor has provided us personal information, contact privacy@offloadpro.io and we will delete it.

14. Changes to this policy

We may update this Policy from time to time. The version and date at the top identify the current Policy. For material changes we will provide prominent notice (in the Software, installer, website, or by email) before the change takes effect and, where required by law, obtain fresh consent. Archived versions are available on request.

15. Contact — Privacy Officer

Privacy Officer
18055441 Canada Inc. (operating as OffloadPro)
250-997 Seymour St, Vancouver, BC V6B 3M1, Canada
privacy@offloadpro.io

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).