PRIVACY

Privacy Notice

Last updated: October 5, 2026

About this notice

CelesWave Solutions is an Ontario business based in Toronto, Canada. This notice covers our website, business inquiries, consulting services and LeaseCanvas bug reports.

Privacy contact: hello@celeswave.com. Use “Privacy” in the subject line for questions, complaints or requests concerning personal information.

Website visits and analytics

Our website hosting and security providers may process IP addresses, browser information and request logs to operate and protect the site.

With your consent, we use Google Analytics 4 to understand page views, scrolling, outbound links, downloads and contact-link clicks. Google processes usage information such as pages visited, referral sources, timestamps, browser/device details, approximate location and cookie-generated identifiers. Analytics does not receive your email message contents. We do not enable advertising features or remarketing. See how Google uses information from sites using its services.

Google Analytics loads only after you accept analytics. If you decline, its tracking tags do not load and we do not send analytics measurements to Google. You can change or withdraw consent through Cookie settings in the footer without losing access to the website. Withdrawal stops future collection; it does not automatically delete information already collected lawfully.

When accepted, Google Analytics uses first-party cookies to distinguish browsers and maintain session information. The _ga and _ga_… cookies have a default lifetime of up to two years, which may be refreshed on later visits; browsers may apply shorter limits. Necessary local browser storage remembers your preferences for 180 days. Cookie settings explains the purposes and lifetimes of our cookies and browser storage, and links to Microsoft’s information for the embedded demo.

Power BI demo and LeaseCanvas

The public Power BI demo uses sample data. Loading it connects your browser to Microsoft, which may process technical information and use cookies or similar technologies under its Privacy Statement. Where consent is required, the demo loads only when your relevant preferences permit it. Do not submit confidential information through the demo.

In your own reports, LeaseCanvas uses the fields supplied by Power BI to render the visual. The visual does not transmit report data, usage telemetry or error information to CelesWave or another external service. Installing it does not give CelesWave access to your reports. This statement concerns the visual itself; Microsoft Power BI, Marketplace and the website demo operate separately under their own privacy practices.

Microsoft handles relevant accounts, purchases and licensing. Customer or transaction information it makes available to CelesWave is used for product administration, accounting and defect investigation; it does not provide access to report contents.

Email, booking and client information

Contact is by email. We receive the contact details, messages and attachments you choose to send, and use them to respond, investigate reported defects, provide agreed services and maintain necessary business records. Business-email providers process messages to deliver and store them.

If we offer Calendly booking and you use it, Calendly processes your booking details and may process technical information through its booking tool. See Calendly's Privacy Notice. Any non-exempt embedded booking technology requires the relevant consent.

Do not send credentials, full production datasets or unredacted tenant information. Use redacted screenshots or synthetic examples for bug reports. Contact us before sending report files so we can agree on the necessary information and a suitable transfer method.

Client-data access, permitted uses and return/deletion arrangements are governed by the consulting engagement. When we process information on a client's instructions, requests concerning that information should normally go to the client.

Purposes, sharing and international processing

We use information for the activities above, website security and legal obligations. Where EU or UK GDPR applies, our legal bases are consent for analytics and optional processing requiring consent; contract or requested pre-contractual steps where you are personally a party; legitimate interests in business communications, service delivery, security and administration otherwise; and applicable legal obligations for required records. Providing inquiry details is voluntary, but we may be unable to respond without the necessary information.

We use website hosting/security and business-email providers, Google Analytics, and Microsoft or Calendly where relevant. Information may also be disclosed for agreed client work or where legally required. We do not sell contact lists or client datasets or use inquiries and bug reports for targeted advertising.

Providers may process information in Canada, the United States or other countries with different privacy laws. Information abroad may be accessible to authorities under local law. Where EU or UK transfer rules apply, we use applicable adequacy decisions or approved contractual safeguards. Email our privacy contact for relevant transfer details or a copy of applicable safeguards.

Retention and security

Google Analytics user-level and event-level retention is set to 14 months, with reset on new activity disabled. This does not limit the availability of standard aggregated reports, which may remain available longer. Cookie lifetimes are separate from this retention setting.

We keep correspondence and diagnostic information while needed to handle a request and for necessary follow-up, agreed work, relevant claims or legal record-keeping. Client records follow the engagement and applicable law; provider logs, stored copies and backups follow the relevant service arrangements. Information is removed or anonymised when it is no longer needed. Access is restricted to those who need it for the relevant work, with safeguards appropriate to the information.

Your rights and updates

Email our privacy contact to request access, correction or information about data we hold concerning you. Where applicable law provides them, you may also request deletion, restriction or a portable copy, or withdraw consent. We may need to verify your identity; legal obligations and applicable exceptions may limit a request.

Right to object: where EU or UK GDPR applies, you may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time.

Where applicable US-state law grants opt-out or appeal rights, you may exercise them by email; use “Privacy appeal” to challenge a response. We do not discriminate against people for exercising legally protected rights. You may complain to the Office of the Privacy Commissioner of Canada, the UK ICO, your relevant EEA supervisory authority or another authority with jurisdiction.

We update this notice when our practices change and show the updated date above.