Privacy Policy
Last revised: August 19, 2026
This Privacy Policy explains how Digital Driveline ("Digital Driveline", "we", "us", or "our") collects, uses, stores, shares, and disposes of information in connection with our website and the software and integration services we provide to our business clients (collectively, the "Services").
Digital Driveline is a Canadian software company. We build and operate e-commerce, marketplace, and data integration software on behalf of the businesses that engage us. We act as a service provider: most of the information we handle is processed on behalf of a client and under that client's instructions.
This Privacy Policy does not apply in the following circumstances:
- Third-party sites. Our website or Services may link to sites we do not control. Those sites are governed by their own privacy notices.
- Client data governed by agreement. Where we process information on behalf of a client organization, the agreement between us and that client governs our handling of the information. If you are a customer of one of our clients and wish to exercise rights over your information, please contact that client directly.
1. Information we collect
We collect only the information needed to operate our business and deliver the Services:
- Business contact information you provide directly to us, such as your name, email address, phone number, and company, when you contact us or engage our Services.
- Service data we process on behalf of our clients, such as product, order, inventory, and customer records from the systems and marketplaces our clients authorize us to connect to.
- Operational data generated by running the Services, such as server logs, access logs, and audit records, used for security and reliability.
We do not use third-party advertising, analytics trackers, or marketing cookies on our website.
2. Marketplace data, including Amazon data
When a client authorizes us to connect to a marketplace such as Amazon, we access marketplace data solely through the marketplace's official APIs (for example, the Amazon Selling Partner API) using credentials and roles authorized by the marketplace and the client.
- We collect only the data categories required for the authorized purpose, such as order fulfillment, inventory synchronization, and business reporting.
- We use marketplace data solely to provide the Services to the client whose account it belongs to.
- We never use marketplace data for advertising or marketing, never sell it, and never share it with any party other than the subprocessors listed in section 5.
- Customer personal information obtained from a marketplace (such as buyer names and shipping addresses) is retained only as long as needed to fulfill the order and is permanently deleted within 30 days after order fulfillment, unless a longer retention period is required by law.
3. How we use information
We use the information we collect to:
- provide, maintain, secure, and improve the Services;
- communicate with clients and respond to their requests;
- meet our legal and contractual obligations; and
- detect, investigate, and prevent security incidents and misuse.
We do not sell, rent, or trade any information, and we do not use client or marketplace data for marketing.
4. Storage and security
All Service data is stored in Amazon Web Services facilities in Canada (ca-central-1).
- Data is encrypted at rest using AES-256 and in transit using TLS.
- Databases and file storage reside in private networks with no public access; access is restricted by network controls to the specific systems that need it.
- Administrative access requires a device-authenticated VPN and is limited to individually identified accounts; no shared accounts exist.
- Credentials are stored in a managed secrets service and rotated automatically.
- Access and database activity are logged, and automated alerts notify us of anomalous access.
No transmission or storage system can be guaranteed absolutely secure, but we follow industry standards to protect information against loss, misuse, and unauthorized access, disclosure, alteration, or destruction.
5. When we share information
We share information only as follows:
- Hosting subprocessor. Amazon Web Services provides cloud infrastructure under contractual confidentiality and security obligations.
- Legal requirements. We may disclose information if required by law, regulation, court order, or other legal process, or to protect the rights, property, or safety of Digital Driveline, our clients, or others.
- Business transfer. If Digital Driveline is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.
We do not share information with advertisers, data brokers, or any other third parties.
6. Retention and disposal
We retain information only as long as necessary for the purposes described in this Privacy Policy or as required by law.
- Marketplace customer personal information is deleted within 30 days after order fulfillment, as described in section 2.
- Backups are encrypted and expire automatically on a fixed schedule.
- When information is no longer needed, it is deleted from active systems, and it ages out of backups on that schedule.
7. Your rights
If we hold personal information about you directly (rather than on behalf of a client), you may request access to it or correction of it by contacting us at the address below. We will verify your identity before responding and will reply within 30 days of receiving the information needed to process your request.
Digital Driveline complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.
8. Children
The Services are business tools and are not directed at children. We do not knowingly collect personal information from anyone under 13 years of age.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected in the "Last revised" date above.
10. Contact us
Questions or concerns about this Privacy Policy can be directed to our privacy contact at: