DropQ is a Canadian agricultural logistics platform. We collect your location and usage data to power real-time and predictive queue estimates at grain terminals. We do not sell your personal information. We do not share individual location data with third parties. We use aggregated, anonymized data to improve our prediction model. You can request deletion of your data at any time. This is a summary only. Please read the full policy for complete details.
Who We Are
DropQ is operated by 0Studio Inc., a corporation incorporated under the laws of Saskatchewan, Canada. In this policy, "DropQ," "we," "us," and "our" refer to 0Studio Inc. and the DropQ platform.
We operate a mobile application and web platform (dropq.ca) that provides real-time and AI-generated predictive wait-time information for grain elevator terminals across Saskatchewan and Manitoba. Our service serves grain drivers, farmers, and elevator facility managers.
This Privacy Policy governs all personal information we collect through the DropQ mobile application, the website at dropq.ca, and any related services (collectively, the "Service").
Scope & Applicability
This policy applies to all users of the DropQ Service, including participants in our pilot program. DropQ is committed to compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law, as well as Saskatchewan's Personal Information Protection Act (PIPA).
By using the Service, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described in this policy. If you do not agree, please do not use the Service.
DropQ is currently operating in a pre-commercial pilot phase. Practices, data structures, and this policy may be updated as the product develops. We will notify active users of material changes as described in Section 14. During the pilot phase we may collect additional test data. All such data will be deleted at pilot conclusion unless you consent to its continued use.
Information We Collect
We collect information in the following categories:
| Category | Examples | How Collected |
|---|---|---|
| Account & Registration | Name, email address, role (driver, farmer, manager), operating region, primary terminal | Provided by you at sign-up or through our beta registration form |
| Location Data | GPS coordinates, direction of travel, approximate speed, proximity to grain terminals | Collected passively from the DropQ app while you are travelling to a terminal (see Section 5) |
| Usage Data | Pages viewed, features accessed, terminal searches, session duration, app version | Automatically collected via app and web analytics |
| Device Information | Device model, operating system version, unique device identifiers, network type | Automatically collected when you use the app |
| Communications | Messages sent through in-app broadcast features (managers only), support correspondence | Provided by you when using broadcast or support tools |
| Aggregated & Derived Data | Anonymized queue patterns, terminal throughput estimates, network density metrics | Derived by our AI model from anonymized location contributions across the driver network |
We do not knowingly collect sensitive personal information such as financial account numbers, government identification numbers, or health information.
How We Use Your Information
We use the information collected for the following identified purposes:
- Providing the Service. Generating real-time and predictive wait-time estimates for grain terminals; powering the inbound traffic view for elevator managers; delivering broadcast alerts to drivers approaching a facility.
- Improving Prediction Accuracy. Contributing your anonymized location signal to the collective model that powers wait-time forecasts for all users. No individual user's raw location is surfaced to other users.
- Account Management. Creating and managing your account, authenticating your identity, and communicating service-related information.
- Product Development. Analysing aggregated usage patterns to improve features, fix bugs, and prioritize development work during the pilot phase.
- Safety & Security. Detecting and preventing fraud, abuse, or misuse of the Service.
- Legal Compliance. Meeting our obligations under applicable Canadian law, including responding to lawful requests from regulators or courts.
- Communications. Sending service updates, pilot program notifications, and — with your consent — product news. You may unsubscribe from non-essential communications at any time.
We will not use your personal information for any purpose other than those identified above without first obtaining your consent, unless required by law.
Location Data
Location data is the core technical input that powers DropQ's prediction engine. We handle it with corresponding care.
When you use the DropQ app while driving toward a grain terminal, the app contributes your anonymized movement data to a shared network model. This signal — anonymized to the best of our ability using industry-standard techniques before any network transmission — allows the AI model to estimate how many trucks are approaching a facility and predict queue build-up accordingly.
What we collect: GPS coordinates, heading, approximate speed, and timestamp while the app is active in the foreground. We do not run continuous background tracking when you are not en route to a terminal.
Anonymization: Raw GPS coordinates are anonymized to the best of our ability using industry-standard techniques before being used in the prediction model. Your individual route is not stored or associated with your identity in model training data.
Manager Inbound View: Elevator managers using the DropQ dashboard see a count and estimated arrival windows of approaching trucks. Managers do not see individual driver names, phone numbers, or exact GPS coordinates. Inbound truck identifiers displayed in the dashboard are session-scoped tokens, not permanent or personally identifying.
Location Permissions: The app will request location permission from your device's operating system. You may revoke this permission at any time through your device settings; doing so will limit certain app functionality but will not affect your account.
Retention of Raw Location: Raw location points are held in transient processing memory only and are not persisted to long-term storage. Aggregated, anonymized derivative outputs (queue density estimates) are retained for model improvement purposes on the schedule described in Section 7.
How We Share Information
We do not sell, rent, or trade your personal information. We do not otherwise disclose personal information for commercial consideration to third parties.
We may share information in the following limited circumstances:
- Service Providers. We engage trusted third-party vendors to help us operate the Service (e.g., cloud infrastructure, analytics, crash reporting). These vendors are contractually bound to use data only to perform services for us and are prohibited from using it for their own purposes.
- Aggregated & Anonymous Research Data. We may share anonymized, aggregated datasets — from which no individual can be identified — with academic partners (e.g., University of Saskatchewan AgTech research), government bodies, or grant funders for the purpose of validating our emission reduction and logistics efficiency models.
- Enterprise Partners. If you are an employee or contractor of an elevator operating company (e.g., P&H, Viterra, Richardson), your employer may receive aggregated facility-level analytics as part of an enterprise agreement — only with your explicit consent or where required under an enterprise agreement that you have separately authorized. We will notify you of any such arrangement.
- Legal Requirements. We may disclose information if required to do so by law, regulation, court order, or in response to a lawful request by a public authority, including for national security or law enforcement purposes.
- Business Transfers. In the event of a merger, acquisition, or sale of all or substantially all of our assets, personal information may be transferred as part of the transaction. We will notify affected users and, where required, obtain consent before personal information is subject to a materially different privacy policy.
- Safety. We may share information where we believe in good faith that disclosure is necessary to prevent imminent harm to a person or to investigate a suspected breach of our Terms of Service.
Data Retention
We retain personal information only as long as necessary to fulfil the purposes for which it was collected, or as required by law.
| Data Type | Retention Period |
|---|---|
| Account & registration data | Duration of your account, plus 12 months following account closure |
| Raw location points | Not persisted to long-term storage; discarded from processing memory after model contribution |
| Anonymized location aggregates | Up to 36 months, for model training and backtesting purposes |
| Usage & analytics data | 24 months from collection, then aggregated and de-identified |
| Manager broadcast messages | 90 days from dispatch, then permanently deleted |
| Support correspondence | 3 years from resolution of the support matter |
| Complaints & access requests | 6 years from resolution (as required by PIPEDA) |
| Beta sign-up records | Duration of the pilot program, plus 24 months |
Upon account deletion or a verified erasure request, we will delete or de-identify your personal information within 30 days, except where retention is required by law or necessary to resolve disputes or enforce our agreements.
Security
We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption of data in transit (TLS 1.3 or higher) and at rest, using secure Canadian hosting where feasible
- Access controls limiting employee access to personal data on a need-to-know basis
- Regular security assessments during the development and pilot phase
- Anonymization of location data before use in the shared prediction model
No method of transmission over the internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. In the event of a data breach that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA's mandatory breach reporting obligations.
Your Rights
Under PIPEDA and applicable provincial law, you have the following rights with respect to your personal information:
- Right of Access. You may request confirmation of whether we hold personal information about you and, if so, access to that information in an intelligible format.
- Right of Correction. You may request that we correct inaccurate or incomplete personal information we hold about you.
- Right of Erasure. You may request deletion of your personal information. We will comply within 30 days subject to legal retention obligations.
- Right to Withdraw Consent. Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
- Right to Opt Out of Non-Essential Communications. You may unsubscribe from marketing or product communications at any time using the unsubscribe link in any such message, or by contacting us directly.
- Right to Lodge a Complaint. You have the right to file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe we have not handled your information in accordance with applicable law.
To exercise any of these rights, contact us at privacy@dropq.ca. We will respond within 30 days of receiving a verifiable request, free of charge unless the request is complex or repetitive, in which case we will advise you in advance. We may need to verify your identity before processing your request.
Cookies & Analytics
The DropQ web platform (dropq.ca) may use cookies and similar tracking technologies to maintain session state, remember preferences, and collect aggregate analytics data.
- Essential Cookies: Required for core functionality (e.g., session management). Cannot be disabled without affecting the Service.
- Analytics Cookies: Used to understand how visitors interact with the site (e.g., pages viewed, session length) via Google Analytics or similar tools. Data is aggregated and anonymized. You may opt out by disabling cookies in your browser settings.
We do not use targeted advertising cookies or share web analytics data with ad networks.
Beta sign-up data entered on the website is stored locally in your browser's
localStorage
to ensure no leads are lost during events with unreliable connectivity. This
data is not transmitted to third parties.
Children's Privacy
DropQ is a professional tool intended solely for use by adults engaged in agricultural commerce. We do not knowingly collect personal information from individuals under the age of 13. If we become aware that we have inadvertently collected information from a minor, we will promptly delete it. If you believe a minor has provided us with personal information, please contact us at privacy@dropq.ca.
Third-Party Services
The Service may integrate with or link to third-party services (such as mapping providers or device operating system location services). These third parties have their own privacy policies, and we are not responsible for their practices. We encourage you to review the privacy policies of any third-party service you use in connection with DropQ.
We vet third-party service providers for privacy and security practices before engagement and require them to comply with applicable Canadian privacy law through contractual data processing agreements.
Cross-Border Data Transfers
DropQ operates primarily within Canada. Where we use cloud infrastructure or service providers with servers located outside Canada (including the United States), personal information may be subject to the laws of those jurisdictions, including laws that may permit access by foreign governments.
We take steps to ensure that personal information transferred outside Canada is afforded a comparable level of protection, including through contractual safeguards (such as standard contractual clauses) with our service providers. By using the Service, you acknowledge and consent to such transfers as necessary to provide the Service.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make material changes, we will:
- Update the "Last Revised" date at the top of this page;
- Notify active users via email (where we hold your address) or via an in-app notice; and
- Where required by law, obtain your renewed consent before the change takes effect.
Your continued use of the Service after the effective date of any revision constitutes your acceptance of the updated policy. We encourage you to review this page periodically.
This policy is governed by the laws of Saskatchewan and Canada.
Contact & Complaints
Questions, access requests, and complaints relating to this Privacy Policy or our handling of personal information should be directed to our Privacy Officer:
We will investigate all complaints within 30 days and respond in writing with our findings and any remedial steps taken.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or toll-free at 1-800-282-1376. Saskatchewan residents may also contact the Office of the Saskatchewan Information and Privacy Commissioner at oipc.sk.ca.