Short version: we don't track you, we don't sell anything, the only personal data we ever see is what you type into the contact form, and that goes to one inbox at [email protected].
"Feasibility Inc." (we, us, our) is a Canadian software company incorporated in Ontario, headquartered in Toronto. We operate the website at feasibility.tech.
You can reach us about anything privacy-related at [email protected].
Our contact form asks for: your name, your email, optionally your company, what you're interested in, and a free-text message. When you submit it, those fields are relayed by FormSubmit (formsubmit.co) to our inbox [email protected]. We retain your message for as long as needed to reply, follow up, and conduct business with you.
Like any web server, we record HTTP access logs — IP address, timestamp,
the URL you requested, HTTP status code, user agent, and the
HTTP Referer if your browser sent one. These are stored in
short-lived nginx server logs and aggregated metrics for the purpose of
operating, debugging, and securing the website. They are not joined to
any identity, are not used for advertising, and are deleted on a rolling
basis.
At time of publication, this site does not run Google Analytics, Facebook Pixel, Hotjar, or any third-party advertising / tracking SDK. We may add light, privacy-respecting analytics (e.g. Cloudflare Web Analytics, which is cookieless and IP-anonymizing) in the future. If we do, we'll update this page and note it here.
The site does not set tracking or advertising cookies. The only storage we may write to your browser is small functional state for the UI (e.g. your preference between light/dark accent if you've toggled it). We rely on Cloudflare in front of the site, and Cloudflare sets a small number of operational cookies (`__cf_bm`, `_cfuvid`) for bot management and security; we don't read or use those.
Our origin servers are in Microsoft Azure's Canada Central region. Email lands in inboxes hosted in Canada by Google Workspace. Cloudflare's edge cache spans the global Cloudflare network — your browser is served by whichever edge is closest, but originating fetches return to our Canadian origin.
If you are an individual whose personal information we hold (because you've contacted us, applied for a job, or are a customer), you have rights under Canadian privacy law (PIPEDA federally; Law 25 in Quebec; PIPA in BC and Alberta) and, where applicable, the EU GDPR:
This site isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has submitted information to us, contact us and we'll delete it.
The site is served over HTTPS (TLS 1.2+), with HSTS enabled. Our contact-form pipeline runs over TLS end-to-end. We follow standard operating practices (least-privilege access, encrypted-at-rest cloud storage, audit logging on every secret/credential touch). No system is ever 100% secure — if you discover a vulnerability, please report it to [email protected] (see also our security.txt).
We may update this policy as our products, vendors, or applicable laws change. We'll always post the new version here with the updated date below. For material changes (adding new third parties, new purposes, new data classes), we'll do something more visible than just updating the date — likely an in-product notice or an email if we have your address.