Privacy Policy

Last updated: October 3, 2026

1. About this Policy

Erisian Group Inc. (“Erisian”, “we”, “us” or “our”) collects, uses and discloses personal information in connection with erisian.tech, enquiries and business communications. This Policy covers visitors, prospective customers, investors, partners and, where offered, publication subscribers, event participants and job applicants. Personal information means information about an identifiable individual.

This Policy also covers contact details used to arrange platform access. Customer-uploaded documents and analytical source datasets are outside the scope of this website policy. Our Founder is responsible for privacy matters and can be contacted at legal@erisian.tech.

2. Information we collect and why

Enquiries. Our access-request form asks for your name, organization, role, email and the decision or question you are working on. When you submit it, we store your request in our access-request records and send a confirmation to the email address you provide. We use your message, any attachments and related correspondence to assess and respond to your request and conduct related follow-up. Please do not include sensitive personal information or confidential documents in an initial enquiry.

Business relationships. You or your organization may provide your name, organization, work email, role and country to arrange and administer platform access. We may consult relevant public professional profiles or organizational websites to understand your role or enquiry, subject to applicable law.

Publications, events and recruitment. Where offered, we use contact details and preferences to deliver requested reports, email newsletters or printed publications and administer events. Postal delivery requires a recipient name and mailing address. When you apply for a role, we use the application materials you provide to assess and respond to your application.

Administration and security. We may use relevant information to maintain necessary business records, operate and protect our website and communications, investigate misuse, handle privacy requests and meet legal obligations.

3. Consent and marketing

We obtain consent where required or handle information as otherwise permitted or required by law. Providing information for an enquiry does not constitute consent to unrelated uses. We seek additional consent where required for a new purpose.

Email marketing subscriptions are optional and separate from requesting access. We send promotional messages only with the consent or other authority required by law. We may organize contacts into relevant categories, such as prospective customers or investors; categorization is not itself permission to send marketing. Email and print subscription choices are separate.

4. AI-assisted correspondence

We may use LLM’s to process or summarize correspondence and help prepare replies. This can involve Anthropic, Google or OpenAI processing message content and attachments. Erisian does not use website enquiries, related correspondence or attachments to train its own models or add them to its analytical datasets or public research.

5. Sharing of personal information

Personnel and service providers. Information may be accessed by authorized employees and contractors who need it for their responsibilities, and by providers supporting hosting, email, recordkeeping and communications. We use Google Workspace for email, Notion for business records, Vercel for website hosting and analytics, Supabase for platform and access-request records, and Resend to deliver the emails we send. AI providers are described above. A provider distributing requested printed publications may receive the necessary delivery details. We remain accountable under applicable law for information processed on our behalf.

Erisian Institute. Relevant contact details and correspondence may be shared with Erisian Institute to route enquiries, coordinate requested reports or events, and manage relevant institutional or partnership discussions, subject to the required consent or other legal authority. This Policy describes Erisian Group Inc.’s practices, not all independent Institute activities. Sharing does not automatically authorize separate Institute marketing.

Other disclosures. We may disclose information as required or permitted by law, including to respond to valid legal demands, protect legal rights or support a business transfer subject to appropriate confidentiality and purpose restrictions. We do not sell, rent or trade personal information or provide it for another organization’s independent marketing.

6. Processing outside Canada

Our service providers may store or process information outside Canada, including in the United States and, for people in Quebec, outside Quebec. Information processed abroad may be subject to the laws and lawful access powers of those jurisdictions. Erisian remains responsible for its obligations under applicable privacy law.

7. Website technology

You can read our public pages without submitting an enquiry. The public-page code does not place cookies or include advertising, retargeting or visitor-session recording tools. We use Vercel Web Analytics to measure page views and how the website is used in aggregate; it does not place cookies and is not used to identify individual visitors. Emails we send about access requests and accounts may tell us whether a message was delivered or opened and whether a link in it was clicked, so we can confirm that important messages arrive. Hosting and delivery services may separately process IP addresses and technical request or security information to deliver and protect the website. If additional cookies or tracking features are introduced, we will explain them and obtain any consent required before use.

Your email application and independent services have their own privacy practices. Once we receive your message, our handling is subject to this Policy. This does not remove our responsibilities for providers processing information on our behalf.

8. Safeguards and retention

Our safeguards include restricted access, multifactor authentication and confidentiality obligations for contractors. No internet transmission or storage system can be guaranteed completely secure.

Our retention standard is to keep personal information only as long as reasonably necessary for the identified purpose, related follow-up and applicable legal recordkeeping or claims requirements. Information no longer needed for a permitted purpose is to be securely deleted or otherwise disposed of as permitted by law. Limited records may be retained to honour an unsubscribe request, demonstrate consent or meet legal requirements.

9. Your choices and rights

You may decline optional collection and withdraw consent where applicable. Unsubscribe from email marketing using the mechanism in the message, or contact legal@erisian.tech to stop email or printed publications. Unsubscribing does not necessarily stop requested replies or necessary account, event or security communications. We will explain any effect of withdrawing consent on a requested activity.

You may request access to or correction of your personal information. Other rights, including deletion, restriction, portability or objection, may apply depending on the law. Requests are subject to legal exceptions and reasonable identity verification. We address requests within applicable legal timeframes. You may raise concerns with us or complain to the appropriate privacy authority.

10. Updates and contact

We may update this Policy as our practices change and will provide additional notice or obtain consent where required. Publishing a revised policy does not replace consent required by law.

For privacy questions, requests or complaints, contact our Founder, responsible for privacy matters, at legal@erisian.tech, or write to Erisian Group Inc., Attention: Privacy, 100 King Street West, Suite 6200, 1 First Canadian Place, Toronto, Ontario M5X 1B8, Canada.