Privacy Policy

This Privacy Policy is published by TechHouseCa Inc. ("TechHouseCa," "we," "our," or "us"), a corporation incorporated under the laws of British Columbia, Canada, with its principal place of business in Kelowna, British Columbia.

TechHouseCa develops and operates the Vectro Airport Operating System — a suite of integrated software modules and platform services (collectively, the "Vectro Platform" or "Platform") designed for airport operators, aviation stakeholders, and their staff.

We are committed to protecting the privacy and security of personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), the BC Personal Information Protection Act (PIPA), and all other applicable Canadian and international privacy laws.

This Policy describes how we collect, use, disclose, and safeguard personal information when you interact with the Vectro marketing website and when airports and organizations ("Customers") deploy the Vectro Platform for their operational needs.

This Privacy Policy applies to:

(a) The Vectro marketing and information website at vectro.ca and all associated pages;

(b) All Vectro subdomain applications, including but not limited to queue.vectro.ca, apron.vectro.ca, command.vectro.ca, boards.vectro.ca, flow.vectro.ca, and any other subdomain operated by TechHouseCa under the vectro.ca domain;

(c) The Vectro Platform services accessed by Customer personnel and authorized end users; and

(d) Any other product, service, or communication from TechHouseCa that links to or references this Policy.

This Policy does not apply to third-party websites, services, or applications that may be linked from Vectro properties. We encourage you to review the privacy policies of any third-party services you access.

We use the personal information we collect for the following purposes:

Responding to inquiries, demo requests, and customer support requests.

Providing, operating, and improving the Vectro Platform and its modules.

Creating and managing user accounts and authentication.

Processing Customer service agreements and fulfilling contractual obligations.

Monitoring platform security, detecting and preventing unauthorized access, fraud, and abuse.

Ensuring the technical performance, reliability, and integrity of Platform services.

Complying with applicable legal obligations, regulatory requirements, and lawful requests from government authorities.

Communicating service updates, security notices, and material changes to agreements or policies to Customers and authorized users.

Conducting internal analytics to improve Platform features and user experience — using only aggregated or anonymized data where possible.

Under PIPEDA and applicable privacy laws, we rely on the following legal bases to process personal information:

Consent: Where required by law, we obtain your express or implied consent before collecting, using, or disclosing your personal information. You may withdraw consent at any time (see Section 11).

Contract Performance: Processing necessary to fulfil a contract with you or a Customer, including providing Platform services, managing accounts, and responding to service requests.

Legitimate Interests: Processing necessary for our legitimate interests where those interests are not overridden by your privacy rights — including platform security, fraud prevention, and service improvement using aggregated data.

Legal Obligation: Processing required to comply with applicable law, court orders, regulatory requirements, or other binding legal obligations.

When TechHouseCa provides the Vectro Platform to an airport operator or aviation organization (a 'Customer'), TechHouseCa acts as a data processor and the Customer acts as the data controller with respect to operational data processed through the Platform.

Airport operational data — including personnel access logs, passenger flow records, flight operational records, maintenance logs, and any other data generated or uploaded by the Customer — is processed solely in accordance with the Customer's instructions and the applicable master service agreement or data processing agreement.

Data isolation: Each Customer's operational data is logically isolated within dedicated tenant environments. TechHouseCa does not combine or share operational data between different Customer environments.

TechHouseCa personnel access to Customer operational data is strictly limited to what is necessary to provide support, maintain platform integrity, and fulfil contractual obligations.

If you are an individual whose personal data is processed within a Customer's Vectro deployment (e.g., airport staff whose access logs are recorded), please direct your privacy rights requests to the airport operator that manages the platform deployment, as they are the data controller for that data.

TechHouseCa does not sell, rent, or trade personal information to third parties.

We may share personal information in the following limited circumstances:

Infrastructure & Cloud Providers: We use reputable cloud infrastructure providers (including services on Amazon Web Services and/or Microsoft Azure) to host and operate the Vectro Platform. These providers act as sub-processors and are contractually bound to protect data in accordance with applicable privacy laws.

Service Providers: We engage carefully selected third-party service providers for functions such as email delivery, security monitoring, and payment processing. All sub-processors are subject to written data processing agreements.

Legal Requirements: We may disclose information to government authorities, law enforcement, or regulatory bodies where required by applicable law, court order, or lawful government request, and only to the extent required.

Business Transfers: In the event of a merger, acquisition, amalgamation, or sale of substantially all assets, personal information may be transferred as part of that transaction. Affected individuals will be notified in accordance with applicable law.

With Consent: We may share information with third parties where you have provided explicit consent.

TechHouseCa stores Customer data and personal information on infrastructure located in Canada and/or the United States (see also Section 10 — International Data Transfers).

We implement industry-standard technical and organizational security measures, including:

Encryption in transit: All data transmitted between clients and Vectro Platform services is encrypted using TLS 1.2 or higher.

Encryption at rest: Sensitive data and databases are encrypted at rest using AES-256 or equivalent standards.

Access controls: Access to production systems and Customer data is restricted to authorized personnel on a need-to-know basis, enforced through role-based access control (RBAC).

Multi-factor authentication (MFA): Required for all TechHouseCa personnel accessing production systems.

Audit logging: All access to and actions within production environments are logged and retained for security review.

Vulnerability management: We conduct periodic security reviews and apply security patches in a timely manner.

While we implement strong security controls, no system is perfectly secure. We encourage Customers and users to use strong, unique passwords and to report any suspected security incidents promptly (see our Security page or email info@techhouseca.com).

We retain personal information for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations.

Contact and inquiry data from the marketing website is retained for a reasonable period to respond to your request and follow up, and is deleted or anonymized thereafter unless you become a Customer.

Platform account and operational data is retained for the duration of the Customer service agreement plus any applicable retention period required by law or agreed in the service agreement.

Upon termination of a service agreement, TechHouseCa will delete or return Customer operational data in accordance with the terms of the applicable agreement, typically within 90 days of termination unless a longer retention period is required by law.

Technical logs and security records may be retained for up to 24 months for security and audit purposes.

TechHouseCa is a Canadian company and we seek to process and store personal information within Canada and North America wherever practicable.

Some of our infrastructure and sub-processor services may process data in the United States or other jurisdictions. When personal information is transferred outside Canada, we ensure appropriate safeguards are in place, including contractual clauses that provide protections equivalent to those required under Canadian privacy law.

By using the Vectro Platform, Customers and users acknowledge that their data may be transferred to and processed in Canada and, where necessary, the United States, in accordance with this Policy and applicable service agreements.

Subject to applicable law, you have the following rights with respect to your personal information:

Right of Access: You may request confirmation of whether we hold personal information about you and a copy of that information.

Right of Correction: You may request that we correct inaccurate or incomplete personal information we hold about you.

Right of Deletion: You may request deletion of your personal information where we no longer have a legitimate or legal basis to retain it.

Right to Data Portability: You may request a copy of your personal information in a structured, machine-readable format where technically feasible.

Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

Right to Lodge a Complaint: If you believe your privacy rights have been violated, you may lodge a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or the BC Office of the Information and Privacy Commissioner (www.oipc.bc.ca).

To exercise your rights, please contact us at info@techhouseca.com with the subject line 'Privacy Rights Request.' We will respond within 30 calendar days. In some cases, we may need to verify your identity before processing a request.

Note: For personal data processed within a Customer's Vectro deployment, please direct your request to the Customer (airport operator) as the data controller.

Vectro Marketing Website (vectro.ca): The marketing website uses only essential, first-party session cookies required for basic website functionality. We do not place advertising trackers, behavioural analytics scripts, social media pixels, or any third-party marketing tracking technologies on the marketing site.

Vectro Platform Applications (subdomain apps): Platform applications use essential session and authentication cookies required to maintain secure login sessions. These cookies are strictly necessary for the operation of the service and are not used for advertising or behavioural profiling.

You may configure your browser to refuse cookies; however, disabling essential cookies will prevent you from logging in to and using Vectro Platform applications.

We do not use Google Analytics, Meta Pixel, or similar third-party analytics or advertising tools on any Vectro property.

The Vectro Platform and marketing website are not directed at, and are not intended for use by, individuals under the age of 16.

We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a person under 16, we will take prompt steps to delete that information.

If you believe we have inadvertently collected information from a child under 16, please contact us immediately at info@techhouseca.com.

TechHouseCa may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or Platform services.

When we make material changes, we will update the 'Effective Date' at the top of this Policy and, where appropriate, notify Customers via email or in-platform notice.

We encourage you to review this Policy periodically. Your continued use of the Vectro Platform or website after the posting of an updated Policy constitutes acceptance of the changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or TechHouseCa's privacy practices, please contact us:

TechHouseCa Inc.

Kelowna, British Columbia, Canada

Email: info@techhouseca.com

Subject line: 'Privacy Inquiry' or 'Privacy Rights Request'

We are committed to working with you to resolve any privacy concerns in a fair, timely, and transparent manner.