Privacy policy

Nexcona LTD operates the MaxTrack website and learning platform. This policy explains how we handle personal information for visitors, account holders, and customers. We handle personal information in line with Canadian privacy law, including PIPEDA.

We collect only what we need to run the platform:

• Account information: your name, email address, and password, which is stored only as a secure hash and is never visible to us.
• Purchase records: what you bought, the amount, currency, invoice number, and the payment reference. Card numbers are handled by Stripe and never reach our systems.
• Learning activity: courses and cohorts you have access to, and progress through lessons.
• Enquiries: what you send us through contact and lead forms, including the page you submitted from.
• Usage data: pages viewed and basic technical details such as referring page and campaign parameters, used to understand which content is useful.

• to create and secure your account and give you the access you paid for;
• to take payment and send you a receipt and tax invoice;
• to send service messages such as confirmation, password reset, and purchase receipts;
• to answer enquiries and provide support;
• to understand which content helps people, and to improve it;
• to meet our tax, accounting, and other legal obligations.

We do not sell your personal information, and we do not share it for other organisations to advertise to you.

We use a small number of established providers to run the service. Each one handles data only to provide its part of the platform:

• Supabase for the database and account authentication.
• Stripe for payment processing. Stripe handles your card details directly.
• Resend for sending transactional email such as receipts and password resets.
• Cloudflare for hosting, delivery, and protection of the site.

Some of these providers store or process data outside Canada, including in the United States. Where that happens, the information is protected by the provider's contractual and security commitments, and it may be subject to the laws of that country.

Service emails, such as receipts, confirmations, and password resets, are part of holding an account and are not marketing. If we send optional updates, every message includes a way to unsubscribe, and unsubscribing never affects your access to what you have purchased.

We use cookies that are necessary for the site to work, principally to keep you signed in. We also record basic page-view analytics to see which material is useful. You can block cookies in your browser, but you will not be able to stay signed in.

Account and learning records are kept while your account is open. Purchase and invoice records are kept for as long as tax and accounting rules require, normally seven years, even if you close your account. Enquiries are kept only as long as needed to deal with them and to keep a record of what was agreed.

You can ask us to:

• tell you what personal information we hold about you;
• correct anything that is wrong;
• delete your account and personal information, except records we must keep by law, such as invoices;
• withdraw consent for anything you previously agreed to.

Email support@nexcona.ca and we will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

Access to personal information is restricted to what is needed to run the service. Data is encrypted in transit, passwords are stored only as hashes, and payment card details never reach our systems. No service can promise perfect security, but if a breach affects you we will tell you and the relevant authority as the law requires.

MaxTrack is intended for working professionals and is not directed at children. We do not knowingly collect information from anyone under 16.

We will update this page when our practices change. The date at the top shows the current version, and we will tell account holders by email about any change that materially affects them.