Privacy Policy

Effective date: April 28, 2026

CCX Productions Ltd. ("CCX", "we", "us") operates the CCX website and CCX mobile application (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this Policy.

1. Who we are

CCX Productions Ltd. is based in Suite 1100, 1631 Dickson Avenue, Kelowna, BC V1Y 0B5, Canada. For privacy questions contact nath@ccxitmt.com.

2. Information we collect

  • Account data — name, email, password hash, profile photo, company affiliation. Provided by you on sign-up.
  • Authentication identifiers — when you sign in with Apple or Google we receive your name, email, and a stable user identifier from those providers.
  • Project & content data — projects, inquiries, messages, files you upload, and metadata you create inside the Service.
  • Device & usage data — IP address, device model, OS version, app version, crash logs, and basic usage timestamps. Collected automatically.
  • Push tokens — if you enable notifications we store a device push token to deliver alerts.

We do not collect precise location, contacts, health data, or financial account numbers.

3. How we use information

  • Provide, secure, and operate the Service.
  • Authenticate you and protect your account.
  • Communicate about your account, projects, and support requests.
  • Diagnose crashes and improve reliability.
  • Comply with legal obligations.

We do not sell personal information. We do not use your data to train third-party AI models. We do not run third-party advertising networks inside the Service.

4. Legal bases (GDPR/UK)

Where European data protection law applies, we rely on (a) performance of a contract to operate the Service, (b) legitimate interests for security and reliability, and (c) consent for optional features such as push notifications.

5. Sharing

We share data only with processors needed to run the Service, under written contracts:

  • Google Firebase (Authentication, Firestore, Storage) — Google LLC, USA.
  • Vercel (hosting and serverless compute) — Vercel Inc., USA.
  • Cloudflare R2 (file storage) — Cloudflare Inc., USA.
  • Apple and Google for sign-in and push delivery.

We may also disclose information to comply with law, enforce our terms, or protect rights and safety.

6. International transfers

Data is processed in Canada and the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

7. Retention

We keep account and content data while your account is active. After deletion we remove or anonymize personal data within 30 days, except where law requires longer retention (e.g. tax records).

8. Your rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your data, restrict processing, or object. Exercise rights by emailing nath@ccxitmt.com. Canadian residents may also contact the Office of the Privacy Commissioner of Canada. EEA/UK residents may lodge a complaint with their local supervisory authority.

9. Account deletion

You can delete your account in-app from Profile → Delete account, or by emailing nath@ccxitmt.com. See our account deletion page.

10. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect data from children.

11. Security

We use TLS in transit, encryption at rest via our cloud providers, and access controls. No system is perfectly secure; report suspected issues to nath@ccxitmt.com.

12. Changes

We may update this Policy. Material changes will be notified in-app or by email. Continued use after the effective date means acceptance.

13. Contact

CCX Productions Ltd., Suite 1100, 1631 Dickson Avenue, Kelowna, BC V1Y 0B5, Canada — nath@ccxitmt.com.