Privacy Policy (U.S. and Canada)

Overview

IGM US Holdings Inc. (“Gravity”) is committed to protecting your privacy. This Privacy Policy applies to all visitors and users of www.onegravity.com.

Information We Collect

• Personal Data: name, email, phone, organization, title
• Usage Data: IP address, browser, device info, pages visited
• Form Submissions: data entered into forms, including documents

How We Use It

• To operate and improve our services
• To respond to inquiries and support
• For internal analytics and user behavior trends
• To meet regulatory and legal requirements

Third-Party Processors

Under binding agreements, we may share data with subprocessors who support analytics, CRM, support, or marketing.

Data Breach Notification

In the event of a data breach involving your personal information, Gravity will notify affected individuals and appropriate government authorities in accordance with applicable federal, state, and provincial laws. Notification may occur via email, public posting, or direct communication, depending on legal requirements and the nature of the breach.

We maintain administrative, technical, and physical safeguards designed to protect your data. However, no system is 100% secure, and we encourage users to follow good data hygiene practices.

State Law Compliance

We comply with applicable state laws, including:

CCPA/CPRA (California): You have the right to know, correct, delete, and opt out
Texas Privacy Protection Act: Enhanced security and notification requirements
New York SHIELD Act: Reasonable safeguards for private data

Public Records

If you are a government user, the information you submit may be subject to state-level public records laws.

Children’s Privacy

Gravity’s services are designed for use by adults in professional or public sector contexts. We do not knowingly collect or store personal data from individuals under the age of 13. If we become aware that a minor has submitted personal information, we will delete it promptly.

Automated Decision-Making Disclosure

Gravity does not currently use personal data for automated decision-making that produces legal or similarly significant effects.

Data Residency

All data is hosted in the United States, unless otherwise agreed upon in writing.

U.S. Tribal Data Acknowledgement

Gravity recognizes the sovereign status of Tribal Nations in the United States. Any data submitted by Tribal governments or affiliated users will be treated in accordance with the requesting Nation’s preferred governance, subject to a separate agreement if needed.

Contact Us

To exercise your privacy rights or ask questions, contact:
Email: privacy@onegravity.com

Canadian Privacy Rights

If you are a Canadian resident, your personal information is handled in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial privacy laws.

Canadian users have the right to:

• Request access to their personal data
• Correct or update inaccurate information
• Withdraw consent to processing (subject to contractual and legal restrictions)
• Lodge complaints with the Office of the Privacy Commissioner of Canada

Québec Privacy Rights (Loi 25 Compliance)

If you reside in Québec, Gravity complies with the Act to Modernize Legislative Provisions Respecting the Protection of Personal Information (“Law 25”). As a Québec user, you have enhanced privacy rights, including:

• The right to access, correct, or delete your personal information
• The right to request data portability (in a structured, commonly used format)
• The right to be informed of and object to any automated decision-making
• The right to know the names of any third parties with whom your data is shared

A Privacy Officer has been appointed to oversee compliance. To contact our Privacy Officer:
Email: privacy@onegravity.com
Subject line: Québec Privacy Inquiry

We do not sell personal information. All personal data is stored and processed in accordance with strict safeguards, and may be transferred to the United States or other jurisdictions where Gravity or its service providers operate.

If you have questions or concerns, or wish to exercise your privacy rights, contact us at:
Email: privacy@onegravity.com

Indigenous Data Sovereignty (Canada)

If you are an Indigenous government or representative, we recognize your rights to data sovereignty and governance in accordance with the OCAP® principles (Ownership, Control, Access, and Possession). Upon request, Gravity will provide options for data residency, access controls, and collaborative governance for any information collected through our platform.

We respect the unique rights of Indigenous Nations and communities and are open to establishing data-sharing agreements that align with OCAP® and relevant community protocols.