Last updated: October 22, 2026
CoreNode Software Development (“CoreNode”, “we”, “us”) is based in Halifax, Nova Scotia, Canada. This policy explains how we handle personal information collected through this website and through the software products and services we provide (together, our “Services”). We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
Information we collect
We collect only the information we need to provide our Services:
- Contact information you give us, such as your name, email address, company name and the details of your inquiry when you use our contact form or email us.
- Account and customer information needed to deliver our products, such as your name, email address, business name and billing address.
- Payment information, such as your credit card number, expiry date and security code. Card details are entered directly into forms provided by our payment processor, Stripe, and are sent straight to Stripe. CoreNode never receives or stores your full card number. We keep only limited records Stripe returns to us, such as the card brand, last four digits, transaction amount and date.
- Technical information our servers record automatically when you visit, such as your IP address, browser type and the pages requested. This is used for security and troubleshooting.
This website does not use advertising or tracking cookies, and we do not use third-party analytics on it.
How we use your information
- To respond to your inquiries and provide quotes.
- To deliver, operate and support the products and services you have purchased.
- To process payments, issue receipts and invoices, and manage subscriptions.
- To send transactional emails, such as account notices, receipts, password resets and service updates.
- To protect our Services against fraud, abuse and security threats.
- To meet our legal, tax and accounting obligations.
We do not sell, rent or trade your personal information, and we do not use it for purposes other than those described here without your consent.
Who we disclose it to
We share personal information only with the service providers we rely on to run our Services, and only the information each one needs:
- Stripe, Inc. processes credit card payments for all of our products. Stripe receives your payment details and the information needed to complete a transaction, such as your name, email and billing address. Stripe’s handling of that information is described in the Stripe Privacy Policy.
- Mailgun Technologies, Inc. delivers email for our website and all of our products, including contact form submissions and transactional emails. Mailgun receives the recipient’s email address and the content of each message. See the Mailgun Privacy Policy.
- Cloud hosting providers that run the servers and databases for our website and products. They store data on our behalf and may not use it for their own purposes.
We may also disclose information if required by law, such as in response to a valid court order, or to protect the rights, property or safety of CoreNode, our customers or others.
How information is disclosed
Information is shared with our service providers electronically, through their secure application programming interfaces (APIs) over encrypted HTTPS (TLS) connections. Payment card details are submitted from your browser directly to Stripe and do not pass through our servers. We do not send personal information by unencrypted email or other insecure channels.
Some of our service providers are located in, or store data in, the United States and other countries. Information processed outside Canada is subject to the laws of those countries and may be accessible to their courts and authorities.
How we protect your information
- Encryption in transit. All traffic to our website and products is served over HTTPS using TLS.
- No stored card data. Card payments are handled by Stripe, a PCI DSS Level 1 certified payment processor, so full card numbers never reach our systems.
- Access controls. Access to customer data and production systems is restricted to authorized personnel who need it to provide the Services, and is protected by strong passwords and multi-factor authentication where available.
- Secure credentials. API keys and other secrets are kept in protected environment configuration, never in source code.
- Secure development. Every release is reviewed before it ships, and we keep software dependencies up to date to address known vulnerabilities.
- Trusted providers. We use established providers that maintain their own security programs and certifications.
No method of transmission or storage is completely secure, but we work to protect your information and will notify affected individuals and authorities of a breach as required by law.
How long we keep it
We keep personal information only as long as needed for the purposes described above, or as required by law (for example, financial records kept for tax purposes). When it is no longer needed, we delete it or make it anonymous.
Your rights
You may ask to access the personal information we hold about you, correct it if it is inaccurate, or withdraw consent to its use, subject to legal and contractual limits. You can unsubscribe from non-essential emails at any time. To make a request or ask a question about this policy, contact us. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
Changes to this policy
We may update this policy from time to time. The “Last updated” date above shows when it last changed. Significant changes will be posted on this page.