Privacy Policy

1. Who We Are and How to Reach Us

Pandacat Inc. is a Canadian corporation and the organisation responsible for personal information collected through the Service. For privacy inquiries, requests, or complaints, contact our Privacy Officer, who is also the person in charge of the protection of personal information for the purposes of Quebec law.

Privacy Officer, Pandacat Inc. Email: privacy@pandacat.ca. Website: tutituti.ca.

We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5, and to applicable provincial privacy legislation in Canada, including Quebec's Act respecting the protection of personal information in the private sector as amended by Law 25, and, where applicable, the private-sector privacy statutes of British Columbia and Alberta. Where you access the Service from outside Canada, we honour the rights described in Section 9 to the extent your local law requires.

2. The Short Version

Your recordings never leave your computer. Scripts, tutorials, generated narration, settings, and exported videos are stored in your browser and in your Downloads folder. We do not receive them.

Our servers hold your account. That means your sign-in details, your plan, a count of the seconds of video you have exported, the setup choices you make, and a reference to your billing customer if you subscribe. Nothing else.

Everything we hold is stored in Canada, except what is described in Section 7.

3. Information We Collect

3.1 Information you give us.

• Account information: your email address, your name, and your sign-in method (Google, or a one-time code sent to your email). We do not use or store passwords.
• Setup choices: your role and what you plan to make, if you choose to tell us during setup. Both are optional and shape only the tips you see.
• Billing information: if you subscribe, our payment processor collects your payment card and billing address. We never see your card number. We receive and store a customer reference, a subscription reference, its status, the plan and currency you chose, and the dates of the paid period.
• Support correspondence: what you write to us, and the email address you write from.

3.2 Information collected automatically.

• Usage of the export feature: the number of seconds of video exported, when, and from which copy of the extension, so that the plan rules can be applied.
• Technical records: our hosting provider keeps standard server logs (IP address, request time, user agent) for security and operation, retained for a short period.

3.3 Information we do not collect. We do not collect analytics, telemetry, crash reports, advertising identifiers, or any content of the web pages you use the extension on. The extension reads the page you are rehearsing or playing on in order to act on it, entirely within your browser; none of that reaches us.

3.4 Information processed by services you choose. The extension can use third-party services with keys you provide and keep in your browser. When you use them, the extension sends them what the feature needs, directly from your browser, under their terms: ElevenLabs receives the sentences of your script for narration; Google Gemini receives sentences, a description of the controls on the page, and, when a pick is ambiguous, a screenshot of the tab. Chrome's built-in model runs on your device and sends nothing. These transmissions do not pass through Pandacat.

3.5 The MCP server. When an AI tool connects to our MCP endpoint, it may send a script to be parsed or checked. Scripts are processed in memory and returned; they are not stored or logged.

4. How We Use Your Information

We use personal information only for the purposes identified here:

• To create and operate your account and to sign you in, including signing the extension in as you.
• To apply the plan rules: the free preview and the trial stamp, or clean playback and export on Pro.
• To process payments, send receipts and invoices, and manage your subscription.
• To answer your questions and provide support.
• To send transactional messages about your account, such as a receipt, a payment problem, or a material change to these terms.
• To protect the Service and its users against fraud, abuse, and misuse, including enforcing the no-resale rule.
• To comply with legal obligations, including tax and accounting rules.

We do not use your personal information for advertising, profiling, or automated decisions that produce legal or similarly significant effects on you, and we do not sell it.

5. Legal Bases for Processing

Under PIPEDA and Quebec law, we collect and use personal information with your knowledge and consent, which you give by creating an account and using the Service, and only for purposes a reasonable person would consider appropriate in the circumstances. Where another legal basis applies, it is one of the following: performance of our contract with you (operating your account, processing your payment), compliance with a legal obligation (tax records), or our legitimate interest in keeping the Service secure and preventing abuse, balanced against your rights.

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us or by deleting your account. Withdrawing consent for information we need to operate your account means we can no longer provide the Service to you.

Where the GDPR or the UK GDPR applies to you, the corresponding bases are: performance of a contract (Article 6(1)(b)) for operating your account and processing payments; compliance with a legal obligation (Article 6(1)(c)) for tax and accounting records; our legitimate interests (Article 6(1)(f)) in keeping the Service secure and preventing abuse; and consent (Article 6(1)(a)) for marketing, which you may withdraw at any time without affecting earlier processing.

6. Data Sharing and Third-Party Processors

We do not sell, rent, or trade personal information. We share it only with service providers who process it on our behalf, under contracts that limit their use to our instructions, and only as needed:

• Google LLC (Google Cloud): hosting and storage of account records in Canada. If you choose Sign in with Google, Google also confirms your identity to us under its own privacy policy.
• Stripe, Inc.: payment processing, subscription management, invoices, and receipts.
• Email delivery providers: to send transactional messages.

We may also disclose personal information where the law requires it, to respond to lawful requests from public authorities, to enforce our terms, to protect the rights, property, or safety of Pandacat, our users, or others, or in connection with a merger, acquisition, or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.

Services you choose to connect with your own keys (such as ElevenLabs or Google Gemini) receive data directly from your browser under their own policies; they are not our processors.

This section is our current list of service providers. We will give at least thirty days' notice by email before adding a provider that processes personal information, and this page is updated at the same time.

7. Where Your Information Is Stored and International Transfers

Data residency commitment. Account records are stored and processed in the Montréal region of our cloud provider and are replicated across multiple data centres within that region. Connections to tutituti.ca are received and terminated in Canada. We will give at least thirty days' notice before changing the country in which account records are stored.

Account records, plan and usage information, and the services that read and write them are hosted in Canada.

Your account record, including your email address, name, and sign-in method, is held in Canada by us. Two categories of information are processed outside Canada: (a) if you choose Sign in with Google, the confirmation of your identity, which Google LLC processes in the United States; and (b) payment information, which Stripe, Inc. processes in the United States and other countries where it operates. These providers are bound by contractual safeguards and, in Google's case, by the standard terms of its cloud services.

For residents of Quebec: in accordance with Law 25, we have assessed these transfers and concluded that the information receives adequate protection, taking into account its sensitivity, the purposes, the safeguards applied, and the legal regime of the destination. We communicate personal information outside Quebec only as described in this section.

8. Data Retention

We keep personal information only as long as needed for the purposes described here or as the law requires:

• Account information, setup choices, plan, and usage records: for as long as your account exists. They are deleted when you delete your account.
• Billing records, invoices, and receipts: for the period required by Canadian tax law (generally seven years), held by our payment processor and in our accounting records.
• Support correspondence: for up to two years after the matter is closed.
• Server logs: for a short period, generally no more than thirty days.

Information that is no longer needed is deleted or irreversibly anonymised.

9. Your Privacy Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you, and to be told how it is used and to whom it has been disclosed.
• Correct information that is inaccurate or incomplete. Your name and email can be changed from your account page.
• Delete your account and the information we hold about you. You can do this yourself from your account page, or by writing to us; we complete it within thirty days.
• Withdraw consent as described in Section 5.
• Portability: for residents of Quebec, to receive the computerised personal information we hold about you in a structured, commonly used technological format.
• Complain: to us first, at privacy@pandacat.ca. If you are not satisfied, you may complain to the Office of the Privacy Commissioner of Canada, or, in Quebec, to the Commission d'accès à l'information du Québec, or to your provincial commissioner.

To exercise a right, write to the Privacy Officer from the email address on your account. We respond within thirty days. We may ask for information needed to confirm your identity before acting on a request.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the rights of access, rectification, erasure, restriction, portability, and objection under the GDPR or UK GDPR, and the right to lodge a complaint with your supervisory authority. We respond within thirty days.

If you are in the United States, residents of California and of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, and Texas) have the rights to know, delete, correct, and not be discriminated against, and to opt out of sales or sharing, which we do not do. Write to privacy@pandacat.ca; we respond within forty-five days.

We may decline requests that are manifestly unfounded or repetitive, or that would conflict with a legal obligation, and will explain why.

10. Cookies and Tracking Technologies

The website uses only the storage needed to keep you signed in and to remember your language and preferences in your own browser. The extension stores your tutorials, settings, and keys in your browser's extension storage, on your computer.

We do not use advertising cookies, analytics trackers, pixels, or fingerprinting. Our payment processor may set cookies on its own pages during checkout, under its own policy.

11. Children's Privacy

The Service is intended for people who make software and its documentation. It is not directed to children, and we do not knowingly collect personal information from anyone under 14, or under the age of majority where consent of a parent is required. If you believe a child has provided us with personal information, contact us and we will delete it.

For users in the United States, we comply with the Children's Online Privacy Protection Act (COPPA). If we learn that we have collected information from a child, we delete it as quickly as practicable.

12. Communications and Marketing

We send transactional messages that are part of the Service: receipts, payment problems, security notices, and material changes to our terms or this policy. You cannot opt out of these while you have an account.

We send marketing messages only with your consent, in compliance with Canada's Anti-Spam Legislation (CASL). Every marketing message includes an unsubscribe link, and we honour unsubscribe requests within ten business days.

13. Data Security

We protect personal information with safeguards appropriate to its sensitivity, aligned with recognised industry practice:

• Infrastructure: hosted on cloud infrastructure that is independently audited under ISO 27001, SOC 1, SOC 2, and SOC 3, in Canada.
• Encryption: in transit with TLS 1.2 or higher, and at rest with AES-256 on every storage volume and replica.
• Resilience: account records are replicated across multiple data centres within the same Canadian region.
• Sign-in without passwords: you sign in with Google or with a one-time code sent to your email. There is no password database to steal. Codes expire in ten minutes, are single-use, and are stored only as a hash. Sessions expire, and signing out of a device ends them.
• Access control: access to production systems is limited to named personnel, protected by multi-factor authentication, logged, and reviewed. No one at Pandacat can read your tutorials, because they never leave your browser.
• Secrets and code: credentials are kept in a managed secret store, never in code or in the browser, and dependencies are monitored for known vulnerabilities.
• Payments: card data is handled entirely by our payment processor, which is certified under PCI DSS; we never see your card number.
• Deletion: when you delete your account, your record and usage history are removed at once from the live database, and from the provider's replicas and backups within its documented deletion window.
• People: everyone who operates the Service is bound by confidentiality obligations and trained on privacy and security.

No method of transmission or storage is perfectly secure. If a confidentiality incident involving your personal information presents a real risk of significant harm, or a risk of serious injury within the meaning of Quebec law, we will notify you and the relevant authorities without undue delay and within the time the law requires, describing what we know about the incident, the information affected, and the steps taken. We record every incident in our register of confidentiality incidents.

14. The Extension's Permissions

To perform a tutorial on a web page, the extension needs certain browser permissions. Here is what each one is for:

• Access to websites you open it on: to find the controls your script names, to click and type as the narration plays, and to draw the cursor, spotlight, captions, trial stamp, and privacy blur on top of the page. It acts only when you press Rehearse, Play, Point, or Export, and only on that tab.
• Tab capture and downloads: to record the video when you press Export, after you allow it on that tab, and to save the file to your Downloads folder.
• Storage: to keep your tutorials, settings, generated narration, and keys on your computer.
• Side panel, tabs, scripting, context menu: to show the editor beside the page, to talk to the page you have open, and to offer the recording permission in the page's right-click menu.

None of these permissions sends information to Pandacat.

15. Do Not Sell or Share My Personal Information

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the privacy laws of California and other U.S. states. Residents of those states have the rights of access, deletion, correction, and non-discrimination described in Section 9.

16. Changes to This Privacy Policy

We may update this policy from time to time. The date at the top changes with it, and the current version is always published at tutituti.ca/privacy. For material changes, we will notify you by email or in the Service before they take effect. Continued use of the Service after a change means you accept the updated policy.

Previous versions are available on request at privacy@pandacat.ca.