Privacy Policy

Last updated: September 30, 2025

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service, and explains your privacy rights and how the law protects you.

We use your personal data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

Words with initial capital letters have meanings defined below. These definitions have the same meaning whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Account means a unique account created for you to access our Service or parts of our Service.
Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
Company (referred to as either “the Company,” “we,” “us,” or “our”) refers to MD Progress Corp, 207 Westdale Road, Oakville, Ontario L6L 4Z7, Canada.
Cookies are small files placed on your device by a website, containing details of your browsing history on that website among other uses.
Country refers to: Canada.
Device means any device that can access the Service, such as a computer, a cell phone, or a digital tablet.
Personal Data is any information that relates to an identified or identifiable individual.
Service refers to the Website and any related applications, interfaces, APIs, and support channels.
Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Service, provide the Service on our behalf, perform services related to the Service, or assist us in analyzing how the Service is used.
Usage Data refers to data collected automatically, generated by your use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
Website refers to MD Progress, accessible from https://mdprogress.ca/
You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data You Provide

While using our Service, we may ask you to provide certain information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

Email address
First and last name
Billing address and contact details (Address, State/Province, ZIP/Postal code, City)
Account credentials (if you create a password; stored in hashed and salted form)
Any other information you choose to provide to us (for example, support requests)

Sign in with Google

You may choose to sign in using your Google account via OAuth (“Google Sign‑In”). If you do so, we receive from Google certain account information such as your name, email address, and profile image. We use this information to create and authenticate your Account and to personalize your experience. We do not receive or store your Google password. You may revoke our access via your Google account settings at any time.

Payment and Subscription Information

If you purchase a subscription, we and/or our payment processor(s) collect billing information (e.g., name, billing address) and payment instrument details (e.g., last four digits of card, card type, expiration month/year). We do not store full payment card numbers; these are processed and stored by our PCI‑compliant payment processor(s).

Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include your device’s Internet Protocol (IP) address, browser type and version, the pages you visit, the time and date of your visit, time spent on pages, unique device identifiers, and other diagnostic data. When you access the Service by or through a mobile device, we may collect information automatically, including (but not limited to) the type of mobile device, your device ID, IP address, mobile operating system, mobile Internet browser type, and other diagnostic data.

Cookies and Similar Technologies

We use Cookies and similar tracking technologies (such as web beacons and pixels) to operate, secure, and improve our Service. Cookies can be “Persistent” (remain after you close your browser) or “Session” (deleted when you close your browser).

We use the following types of Cookies:

Necessary/Essential Cookies (Session; administered by us) – required to provide the Service, authenticate users, and prevent fraudulent use of accounts.
Preference/Functionality Cookies (Persistent; administered by us) – remember your settings and preferences (e.g., language).
Analytics/Performance Cookies (Persistent; administered by us or our service providers) – help us understand how the Service is used so we can improve it.

You can control Cookies through your browser settings. If you disable Cookies, some features of the Service may not function properly.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

To provide and maintain our Service, including to monitor usage and ensure security and integrity.
To manage your Account and provide access to Service features available to registered users.
To perform a contract with you, including provisioning subscriptions and related services you purchase.
To communicate with you about your Account and the Service, including transactional emails (e.g., confirmations, notices, billing, technical and security alerts).
Marketing: to send you information about features, offers, and events we believe may interest you. You can opt out of marketing emails at any time by using the unsubscribe link in the email or contacting us. (Opt‑out does not apply to transactional emails.)
To manage your requests, such as responding to inquiries and providing support.
Business transfers, including evaluating or conducting a merger, financing, or sale of assets.
Other purposes, such as data analysis, identifying usage trends, measuring campaign effectiveness, and improving our Service, products, and user experience.

Sharing of Your Personal Data

With Service Providers who perform services on our behalf (e.g., hosting, analytics, authentication, customer support, email delivery, payment processing). These parties are bound by contractual confidentiality and data-protection obligations.
With Affiliates that are required to honor this Privacy Policy.
In business transfers as described above.
With other users when you choose to share content or interact in public areas of the Service.
With your consent for any other disclosed purpose.
For legal reasons to comply with law, enforce our agreements, protect rights, safety, and prevent fraud.

Subscriptions and Free Trials

We offer access to our platform via paid subscriptions. After any free trial period ends, continued access to the Service requires an active, paid subscription. Billing, renewal, and cancellation details are available within your Account or as otherwise communicated during sign-up. Transactional emails related to your subscription (including renewal and payment notices) are part of the Service.

Retention of Your Personal Data

We retain Personal Data only as long as necessary for the purposes set out in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce agreements. Usage Data is generally retained for a shorter period unless required for security, functionality improvement, or legal compliance.

International Data Transfers

Your information may be processed in countries other than your own. We take steps to ensure transfers are compliant with applicable law, including reliance on adequacy decisions (e.g., for Canadian organizations subject to applicable privacy laws) and/or the execution of Standard Contractual Clauses or other approved transfer mechanisms when required.

Delete or Update Your Personal Data

You may access, update, or delete certain information by signing in to your Account and using account settings. You may also contact us to request access to, correction of, or deletion of Personal Data that you have provided. We may retain certain information where permitted or required by law.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy.

Law Enforcement and Legal Requests

Under certain circumstances, we may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Other Legal Requirements

The Company may disclose your Personal Data in the good-faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Service
Protect the personal safety of users of the Service or the public
Protect against legal liability

Security of Your Personal Data

We use commercially reasonable administrative, technical, and physical safeguards designed to protect your Personal Data. No method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Children’s Privacy

Our Service is not directed to anyone under the age of 13, and we do not knowingly collect Personal Data from children under 13. If you are a parent or guardian and believe your child provided Personal Data to us, please contact us so we can delete it.

Links to Other Websites

Our Service may contain links to other websites not operated by us. If you click a third-party link, you will be directed to that site. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of third-party sites or services.

GDPR Notice (EU/EEA/UK Users)

Controller: MD Progress Corp, 207 Westdale Road, Oakville, Ontario L6L 4Z7, Canada. Contact: support@mdprogress.ca.

We process Personal Data under the following legal bases (as applicable):

Contract: to provide the Service you request (including subscriptions).
Legitimate interests: e.g., securing and improving the Service, preventing fraud, internal analytics (not overridden by your rights and interests).
Consent: e.g., for certain cookies/marketing where required. You can withdraw consent at any time.
Legal obligations: to comply with applicable laws (e.g., tax, accounting).

Your rights (subject to conditions/exceptions under applicable law): access, rectification, erasure, restriction, objection (including to direct marketing), data portability, and withdrawal of consent. You also have the right to lodge a complaint with your local supervisory authority.

International transfers: Where we transfer EU/EEA/UK Personal Data outside your jurisdiction, we rely on appropriate safeguards such as adequacy decisions and/or Standard Contractual Clauses, and implement supplementary measures where necessary.

California Privacy Notice (CCPA/CPRA)

This section applies to “consumers” resident in California and supplements the information elsewhere in this Privacy Policy. It describes our practices during the 12 months preceding the “Last updated” date above and going forward.

Notice at Collection – Categories, Sources, and Purposes

We collect the following categories of Personal Information (as defined by the CCPA/CPRA):

Identifiers (e.g., name, email address, IP address, device identifiers).
Customer records (e.g., billing address and limited payment/billing details processed via our payment processor).
Commercial information (e.g., subscription purchases and interaction history).
Internet or other electronic network activity (e.g., usage analytics, logs, cookie data).
Geolocation data (approximate, derived from IP address).
Inferences (limited to understanding product feature usage; we do not profile for sensitive characteristics).
Sensitive personal information (account login if you create credentials; limited billing details handled by processors). We do not use or disclose sensitive personal information for purposes other than those permitted by CPRA §1798.121(a).

Sources include: you (directly), your devices and browsers (automatically), third-party sign-in providers (e.g., Google), and our service providers (e.g., payment, analytics).

Purposes include: to provide the Service; authenticate users; process payments; maintain security; perform analytics; provide customer support; send transactional communications; and send marketing communications (which you may opt out of).

Disclosures, “Sale,” and “Sharing”

We disclose Personal Information to service providers and contractors for business purposes (e.g., hosting, analytics, authentication, support, email delivery, payment processing). We do not sellPersonal Information and we do not share Personal Information for cross‑context behavioral advertising as those terms are defined by the CPRA.

Your California Rights

Right to Know/Access the categories and specific pieces of Personal Information we collected about you.
Right to Delete Personal Information (subject to legal exceptions).
Right to Correct inaccurate Personal Information.
Right to Non‑Discrimination for exercising your rights.

To exercise your rights, contact us at support@mdprogress.ca with the subject line “California Privacy Request.” We will verify your request using information associated with your Account. You may designate an authorized agent to make a request on your behalf by providing written authorization and verifying your identity.

Retention

We retain Personal Information consistent with the purposes described above and our retention practices in this Privacy Policy.

CalOPPA Disclosure (California Online Privacy Protection Act)

Do Not Track (DNT): Because there is no industry standard for DNT signals, we currently do not respond to DNT browser signals.
Changes: We will post any changes to this Privacy Policy on this page and update the “Last updated” date. Material changes may also be communicated by email or in‑Service notice.
Access/Changes: You can review and update certain Personal Data by signing into your Account or contacting us.

Your Choices

Marketing communications: You can opt out at any time using the unsubscribe link in our emails or by contacting us. We may still send transactional or service-related communications.
Cookies: Control cookies via your browser settings. Some features may not function if cookies are disabled.
Google Sign‑In: Revoke our access through your Google account permissions if you no longer wish to use Google Sign‑In with our Service.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of changes by posting the new Privacy Policy on this page and updating the “Last updated” date above. Where required by law, we will notify you via email and/or a prominent notice on our Service prior to the change becoming effective.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us:

By email: support@mdprogress.ca
By mail: MD Progress Corp, 207 Westdale Road, Oakville, Ontario L6L 4Z7, Canada