Privacy Policy

Taberna Technology Inc. · Last updated: 25 August 2026

This policy covers our website (taberna.tech) and our Hadrian product. It explains what we collect, why, where it lives, how long we keep it, and the choices you have. It describes our practices and how we approach our responsibilities under PIPEDA, the Canadian federal privacy law that applies to us.

The short version

• We collect the minimum we need: what you type into our forms, and what the product needs to run.
• We never sell personal information and we never use it for advertising.
• We do not train AI models on your content.
• Hadrian is hosted in Canada by default: the server running Hadrian for each customer, and that customer's backups, sit on infrastructure dedicated to them.

Who is responsible

Taberna Technology Inc., a Canadian corporation based in Toronto, Ontario, is responsible for personal information under its control. Our privacy contact is Tyler Miller, at info@taberna.tech, for any question, request, or concern about this policy or your information.

Part 1 — Website visitors

We collect information on the website when you give it to us through our forms, and our hosting infrastructure records basic technical logs automatically, as described below. Our forms:

• Contact form: your email address, company, and message, so we can respond to your enquiry.
• Hadrian beta signup: your name, work email, organization, and the technical details you provide about your environment and intended use, so we can evaluate and run the closed beta.

You consent to this processing by submitting a form. You can withdraw consent at any time by contacting us; if you do, we will stop the related use and delete your submission unless the law requires us to keep it, and we may no longer be able to respond to your enquiry or include you in the beta.

When you submit a form, your submission is stored in our systems and an internal alert is sent to our team's Slack workspace so we can follow up.

Like most websites, our hosting infrastructure records basic technical logs, such as IP address and browser type, for security and reliability. We do not use tracking or advertising cookies. Our forms include automated measures to prevent spam and abuse, which process your submission only to confirm it is a genuine request.

Part 2 — Hadrian customers and users

Hadrian is business software. When an organization uses Hadrian, information falls into four categories, and our role differs for each.

Account information (our responsibility).

We hold a limited account record for each customer: an identifier and the email address associated with the API key issued to the customer, together with operational logs of service activity. We use this only to provide, secure, and support the service and to communicate with the customer about it.

Customer content (processed for the customer).

Customer content means the files, application exports, expressions, instructions, and related material a customer or its users submit to Hadrian, including material we submit on the customer's instructions where we operate the service for them, and the results Hadrian generates for that customer. We process it only to provide the service to that customer, under our agreement with them, including any applicable data processing terms. Each customer's content is processed on infrastructure dedicated to that customer and backed up to storage dedicated to that customer. We do not use customer content for any other purpose, we do not train AI models on it, and we do not disclose it except as our agreement with the customer permits or the law requires.

When Hadrian generates results, the customer's content is processed by the AI model account the customer connects. Customers bring their own model provider. We do not operate a shared model on customer content, and the model provider's terms govern that processing.

If your personal information appears inside a customer's content, for example because you work for one of our customers, the customer controls that information. Direct requests about it to the customer, and we will support the customer in responding, as our agreement with them provides.

Usage data (telemetry).

Hadrian generates operational telemetry so we can keep the service reliable: numeric counters and timings, fixed status labels drawn from a predefined list, structural descriptions of application shapes, and pseudonymous identifiers generated by the software. Telemetry is designed not to carry the contents of your applications or your data. Telemetry derived from customer content leaves a customer's instance only where the customer's agreement with us permits it, and that transmission is off by default.

Supplied credentials (held for the customer).

Some customers supply credentials for their own environment and connected services so we can operate them on the customer's instructions. We hold those credentials only for that purpose, use them only to perform the operations the customer requests, store them encrypted, and delete them when the customer relationship ends.

Where information lives

Hadrian runs on Amazon Web Services, with our primary hosting region in Canada, and customers can be assigned to a specific hosting region. Our service providers include Amazon Web Services (hosting, storage, and related infrastructure), Grafana Cloud (operational monitoring, Canadian region), and Slack (internal alerts about website form submissions). We use these providers only for the roles described here, and our contracts with them require information to be protected.

Some of our providers are foreign companies. Although customer data is hosted in Canada by default unless a different region is agreed with the customer, information handled by a foreign provider may be subject to the laws of the jurisdictions where that provider operates, and authorities there may have a legal right to access it. Contact us for more about how our providers handle information.

How long we keep information

• Website enquiries: up to 2 years after our last exchange with you.
• Beta signups: for the duration of the beta program and up to 2 years after it ends or after our last exchange with you, whichever is earlier.
• Account information and operational logs: for the duration of the customer relationship and up to 2 years afterwards, or longer where the law requires.
• Customer content: for the duration of the service. When a customer relationship ends, we make the customer's content available for export for a short period under our agreement with them, then delete it, and copies in backups expire on our normal backup cycle within 30 days.
• Telemetry: raw event data for up to 12 months; aggregated statistics that do not identify anyone may be kept longer.
• Supplied credentials: for the duration of the customer relationship; deleted when it ends.

How we protect information

We use dedicated per-customer infrastructure, access limited to the people who need it, and logging of service activity. Connections to our website and to Hadrian are encrypted in transit, and customer content and backups are encrypted at rest on the infrastructure we manage. Credentials a customer supplies for their own systems are stored encrypted, used only to perform that customer's operations, and deleted when the relationship ends. No system is perfectly secure and we cannot guarantee absolute security, but we protect information in a way that fits its sensitivity.

Your choices and rights

You can ask what personal information we hold about you, ask us to correct it, ask us to delete it, or withdraw a consent you have given. Write to info@taberna.tech and we will respond within 30 days, subject to any extension the law permits, in which case we will tell you. If we cannot do what you ask, for example because the law requires us to keep something, we will tell you why.

Complaints

If you have a concern about how we have handled your information, contact us first and we will work through it with you. You may also complain to the Office of the Privacy Commissioner of Canada, which oversees PIPEDA, at priv.gc.ca or 1-800-282-1376.

Children

Our website and products are for businesses and are not directed at children.

Changes to this policy

If we make material changes, we will update the date above and post the new version on our website.

Contact

Taberna Technology Inc., Toronto, Ontario, Canada. Privacy contact: Tyler Miller, info@taberna.tech.