Privacy Policy

xCan IT Services Inc. ("we," "us," "our," or the "Company"), the operator of cjavacode.com (the "Service"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your Personal Information when you use our Service. This Policy is incorporated by reference into our Terms of Service.

This Policy is intended to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, provincial privacy legislation such as Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25), and British Columbia's or Alberta's Personal Information Protection Act.

1. Who We Are

xCan IT Services Inc. is incorporated under the laws of Canada, with its registered office at Ontario, Canada. Our designated Privacy Officer can be reached at clientprivacy@cjavacode.com.

2. Personal Information We Collect

We collect the following categories of Personal Information:

We do not collect government identification numbers, financial account numbers, or full payment card details. Your password is never stored in readable form — we store only a one-way cryptographic hash and cannot recover your original password.

3. How We Use Your Personal Information

We use your Personal Information to:

• create and administer your Account;
• provide, operate, and maintain the Service, including storing and displaying your exercises, practice work, and progress;
• authenticate your identity and secure your Account (via hashed password verification);
• process payments by redirecting you to Square (Section 5);
• communicate with you about your Account, Service updates, or support requests;
• monitor, troubleshoot, and improve the Service, including analyzing aggregate usage trends;
• detect, prevent, and respond to fraud, abuse, or security incidents;
• comply with legal obligations.

We only use your Personal Information for the purposes for which it was collected, or for a compatible purpose, unless we obtain your consent or are permitted or required by law to do otherwise.

4. Legal Basis and Consent

By creating an Account, you consent to the collection, use, and disclosure of your Personal Information as described in this Policy. Where required by law, we will obtain express consent for any new or materially different use of your Personal Information. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us — though withdrawing consent for certain core uses (e.g., account authentication) may mean we can no longer provide you the Service.

5. Payment Processing via Square

We use Square, Inc. and/or its Canadian affiliate ("Square") to process payments. When you make a payment, you are redirected to Square's own payment interface. Square collects your payment card and billing details directly and processes that information under its own privacy policy and security standards (including PCI-DSS compliance). We do not receive, store, or have access to your full card number or payment credentials — we only receive confirmation of payment status and a transaction reference from Square. We encourage you to review Square's Privacy Policy to understand how it handles your information.

6. How We Store and Protect Your Information

1. Your Content and Account information are stored on servers operated by us or by our hosting providers, hostinger.com.
2. We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including:
   • encryption of passwords using a one-way cryptographic hash;
   • encryption of data in transit (e.g., HTTPS/TLS);
   • access controls limiting internal access to Personal Information on a need-to-know basis.
3. No method of transmission or storage is completely secure. While we strive to protect your Personal Information, we cannot guarantee absolute security.

7. Retention

We retain your Personal Information and Content for as long as your Account is active, or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. If you delete your Account, we will delete or anonymize your Personal Information within 7 days, except where retention is required by law or for legitimate business records (e.g., financial/transaction records related to payments processed via Square).

8. Disclosure of Personal Information

We do not sell your Personal Information. We may disclose it to:

• Service providers who help us operate the Service (e.g., cloud hosting providers, email delivery providers), under contractual obligations to protect your information and use it only for the purposes we specify;
• Square, solely for the purpose of processing your payments (Section 5);
• Instructors or authorized administrators, where applicable, if you are enrolled through an educational institution or program that has legitimate access to your progress and submissions;
• Legal or regulatory authorities, where required by law, court order, or to protect our rights, safety, or property, or that of our Users;
• A successor entity, in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

9. Cross-Border Data Transfers

Some of our service providers, including hostinger.com and Square, may store or process Personal Information outside Canada, including in the United States. As a result, your information may be subject to the laws of those jurisdictions, including lawful access requests by foreign government authorities. By using the Service, you acknowledge this possibility. We take steps to ensure any such third parties provide a comparable level of protection through contractual safeguards.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling cookies may affect your ability to use the Service.

11. Children's Privacy

The Service is not directed at children under the age of [13/applicable age]. If our Users may include minors (e.g., students under the age of majority), we rely on consent from a parent, guardian, or educational institution acting on their behalf, as described in our Terms of Service.

12. Your Privacy Rights

Subject to applicable law, you have the right to:

• access the Personal Information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your Personal Information, subject to legal or legitimate business retention needs;
• withdraw consent to certain uses, subject to Section 4;
• file a complaint with us or with the Office of the Privacy Commissioner of Canada (or your applicable provincial privacy regulator, e.g., the Commission d'accès à l'information in Quebec).

To exercise these rights, contact our Privacy Officer at clientprivacy@cjavacode.com. We will respond within the time required by applicable law.

13. Breach Notification

In the event of a breach of security safeguards involving Personal Information that creates a real risk of significant harm, we will notify affected individuals and the applicable privacy regulator(s) as required by PIPEDA and any applicable provincial law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised Policy on the Platform and update the "Last Updated" date. Material changes will be communicated to you through the Service or by direct notice, where required by law.

15. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact: