PrivacyPolicy
Effective July 23, 2026
Your privacy matters to us. This policy explains what we collect through our website, how we use it, and the choices you have. In short: we only collect what you send us through the contact form, and we never sell your data.
About this policy
This Privacy Policy explains how XY Space Inc. ("XY Space", "we", "us", or "our") — a company incorporated federally in Canada — collects, uses, and protects personal information you share through this website (the "Site"). We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law. The Site keeps things deliberately simple: the only information you actively give us comes through our contact form.
Information we collect
Information you give us. When you submit our contact form, we collect the details you enter — typically your name, email address, and the message or inquiry you write. You choose what to include.
Information collected automatically. To keep the Site secure and working, limited technical data (such as your IP address, browser type, and interactions with our on-site chat) may be processed by the anti-spam and site-service providers described below. We do not run advertising or cross-site tracking, and we do not build marketing profiles about you.
How we use your information
We use the information you provide to:
- respond to your inquiry and communicate with you about it;
- provide, maintain, and improve the Site and our services;
- protect the Site against spam, abuse, and security threats; and
- meet our legal and record-keeping obligations.
We rely on your consent — given when you submit the contact form — to use your information for these purposes. You may withdraw your consent at any time by contacting us (see below).
Service providers we share with
We do not sell, rent, or trade your personal information. We share it only with the service providers that help us operate the Site, and only as needed for them to perform their function on our behalf:
- cite-met.com — processes our contact-form submissions and powers the on-site chat widget;
- Cloudflare — hosts the Site and provides the anti-bot check (Turnstile) on our form.
We may also disclose information where required by law, or to protect our rights, safety, or property.
Cookies and local storage
The Site uses only the storage needed to function: the anti-bot check and chat widget above may set cookies or similar identifiers, and your browser stores your "plan builder" selections locally on your own device so the Site can remember them. We do not use advertising or analytics cookies to track you across other websites. You can clear this storage at any time through your browser settings.
How long we keep it
We retain contact-form submissions for up to 12 months after your last contact with us, after which we delete them — unless we need to keep them longer to meet a legal obligation or resolve a dispute. You can ask us to delete your information sooner at any time.
Where your information is processed
Our service providers may store and process your information on servers located outside Canada, including in the United States. Where that happens, your information is subject to the laws of those jurisdictions, and we take reasonable steps to ensure it receives a comparable level of protection.
How we protect it
We use reasonable administrative, technical, and physical safeguards — appropriate to the limited data we collect — to protect your information against loss, theft, and unauthorized access or disclosure. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.
Your privacy rights
Under PIPEDA, you have the right to:
- access the personal information we hold about you and ask how it has been used;
- request correction of information that is inaccurate or incomplete;
- withdraw your consent to our use of your information; and
- ask us to delete your information, subject to any legal retention requirements.
To exercise any of these rights, email us at hello@xyspace.dev. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Children's privacy
The Site is intended for businesses and adults. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes will be reflected here, and your continued use of the Site means you accept the updated policy.
Contact us
Questions about your privacy or this policy? Email us at hello@xyspace.dev.
Book a discovery call.Leave with a plan you can act on.
Start with your people or with the work. One job at a time, on probation, measured in hours and money. Everything we build stays yours.