Privacy Policy — Intelia Sentinel

Last Updated: July 21, 2026

Introduction

Intelia Technologies Inc. ("Intelia," "we," "us," or "our") is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use Intelia Sentinel, our web application for highly pathogenic avian influenza (HPAI) biosecurity early warning, together with its related services (collectively, the "Services").

SCOPE AND APPLICATION

This Privacy Policy applies to all users of the Intelia Sentinel platform, including administrators, managers, and any other individuals who access or use the Services.

By using our Services, you agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

1. INFORMATION WE COLLECT

We collect information in the following ways:

1.1 Information You Provide to Us

Account Information: When your account is created (by you or by your organization's administrator), we collect information such as your name, email address, password, preferred language, country, and role within your organization.

Registered Farm Information: Through the use of our Services, you register the farms you wish to monitor. For each farm we collect a name and an address or geographic location (which may include latitude and longitude coordinates), along with your alert preferences. These farm details are used to compute the regional risk score, to position the farm on the confirmed-case map, and to determine when to send early-warning alerts.

1.2 Information We Collect Automatically

Device Information: We collect information about the device you use to access our Services, including device type, operating system, browser type, and general location information derived from your IP address.

Usage Data: We collect information about how you use our Services, including dates and times of access, features used, pages visited, interactions with the platform, and usage patterns.

Log Information: We maintain system logs that record interactions with our Services, including error reports, performance data, API request metadata, and other technical information for operation and maintenance purposes. Email addresses in logs are automatically masked (e.g., "j***n@e***.com").

1.3 Risk Scores and Early-Warning Content

Our platform computes a regional avian-influenza risk score for each farm you register from official public animal-health surveillance data published by recognised authorities, and combines it with seasonal and migration context to generate early-warning alerts. These outputs are derived from the location you provide and from third-party surveillance data. They are intended as decision-support tools, not as definitive veterinary diagnoses, predictions, or guarantees of safety. The identity, selection, and configuration of the underlying data sources are treated as Intelia's confidential information.

2. HOW WE USE YOUR INFORMATION

We use your personal information for the following purposes:

2.1 Service Provision

2.2 Biosecurity Early-Warning Support

2.3 Service Improvement

2.4 Communication

2.5 Marketing Communications

By creating an account with Intelia, you may receive marketing communications, product updates, feature announcements, and newsletters about our Services.

Legal Basis: Our marketing communications are based on your consent (GDPR Article 6(1)(a)) where required by applicable law; legitimate interest (GDPR Article 6(1)(f)) to inform existing customers about similar products and services; and implied consent under Canadian Anti-Spam Legislation (CASL) for existing business relationships (valid for up to 2 years after the last transaction or interaction).

2.6 SMS / Text Message Alerts

If you choose SMS as an alert channel, we use your mobile phone number to send you the animal-disease biosecurity early-warning alerts that are the core function of the Services (for example, a notification that official public animal-health surveillance data reports a confirmed case near your registered farm). SMS is never the default channel — email is — and text alerts are enabled only when you explicitly select "SMS" in your account settings (Settings > Alerts) and provide a mobile number. You may switch back to email at any time in the same settings screen.

Message frequency varies and depends on the risk level near your registered farms. Message and data rates may apply. You can reply STOP to any message to unsubscribe from SMS alerts at any time, and HELP for assistance. Opting out of SMS does not delete your account; alerts simply revert to email.

2.7 Legal and Safety

2.8 Model Improvement

3. HOW WE SHARE YOUR INFORMATION

We may share your personal information in the following circumstances:

3.1 Within Your Organization

Your data is accessible to authorized users within your organization according to the role-based access control (RBAC) system configured by your organization's administrator.

3.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our Services, such as cloud hosting and data storage providers, authentication services, email delivery services (used to send early-warning alerts), SMS delivery providers (used to send text-message alerts to users who opt in), and mapping services. These service providers are contractually obligated to protect your information and use it only for the purposes specified by us. A complete list of our sub-processors, including their locations and the data they process, is available in our Data Processing Addendum (DPA) on request.

Text messaging originator opt-in data and consent are excluded from the sharing described in this Section 3: no mobile information will be shared with third parties or affiliates for marketing or promotional purposes (see Section 2.6).

3.3 Legal Requirements

We may disclose your information when required by law or in response to:

3.4 Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new entity, subject to the same level of protection for your privacy.

3.5 Third-Party Data Responsibility

If you input personal data of third parties into the platform, you are responsible for having obtained the necessary consent or authorization to provide such data to us.

3.6 Consent

We may share your information with your explicit consent or as directed by you or your organization's administrator.

4. DATA RETENTION

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy, in accordance with GDPR Article 5(1)(e) — Storage Limitation Principle. Each category of data has a specific retention period based on its legal basis and purpose.

Specific Retention Periods

Registered Farm Information (name, location, alert preferences)

Account Information (Profile Data)

Session Data

Application Logs

Anonymized Data

Extended Retention

We may retain personal data beyond the standard periods when you or your organization has given explicit consent; when required by law or upon order of a regulatory authority; when necessary for the establishment, exercise, or defense of legal claims; or when necessary to protect the vital interests of you or another person.

Your Control Over Data Retention

5. YOUR PRIVACY RIGHTS

Depending on your location, you may have certain rights regarding your personal information:

5.1 Access and Portability

You can access your personal information through your account settings. You can also request a full export of your data (profile, preferences, and registered farms) in a structured, machine-readable format by contacting us at [email protected].

5.2 Correction

You can update or correct your personal information through your account settings or by contacting us.

5.3 Account Deletion / Right to Erasure

You can request the deletion of your account at any time. Account deletion permanently and irreversibly removes all your personal identifiers (name, email), deletes your authentication credentials, and deactivates the account. To request deletion, contact us at [email protected]. Account deletion is subject to certain exceptions for legal compliance (see Section 4, Extended Retention).

5.4 Restriction of Processing

You have the right to request the restriction of processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.

5.5 Object to Processing

You have the right to object to the processing of your data, particularly when processing is based on legitimate interests. You can object at any time, without needing to justify the reason, to processing for direct marketing purposes.

5.6 Lodge a Complaint

You have the right to bring a claim before your competent data protection authority.

5.7 Exercise Your Rights

To exercise these rights, please contact us at [email protected] or visit https://intelia.com/contact-2/. Any requests to exercise your rights can be made free of charge and will be addressed as early as possible and always within one month, as required by applicable law.

6. DATA SECURITY

We implement appropriate technical, administrative, and physical security measures to protect your personal information against unauthorized access, disclosure, alteration, and destruction. These measures include:

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. INTERNATIONAL DATA TRANSFERS

Our Services are provided from Canada, and your personal information may be processed and stored in Canada or other countries where we or our service providers operate. This includes cloud hosting providers and third-party services that may process data in jurisdictions outside your country of residence.

For users in the European Economic Area (EEA), Switzerland, or the United Kingdom, we ensure that any international transfers of personal information are conducted with appropriate safeguards, such as:

8. CHILDREN'S PRIVACY

Our Services are designed for professional use in agricultural operations and are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or applicable law. We will notify you of material changes by posting the updated policy on our website, through platform notifications, and/or by email. We encourage you to review this Privacy Policy periodically.

10. CANADIAN PRIVACY LAW COMPLIANCE

For users in Canada, we comply with applicable Canadian privacy laws, including:

10.1 Consent

We obtain your consent for the collection, use, and disclosure of your personal information as required by law. You may withdraw your consent at any time, subject to any applicable legal or contractual restrictions.

10.2 Privacy Officer

We have appointed a Privacy Officer who is responsible for ensuring compliance with privacy laws and handling privacy-related inquiries.

11. AGRICULTURAL AND INDUSTRY-SPECIFIC CONSIDERATIONS

11.1 Animal Health Data

The surveillance data and risk information handled through our platform relates to animal health, not human health. This data is not subject to health data regulations applicable to human medical records (such as HIPAA or equivalent). However, we treat all operational data with the same level of care and security.

11.2 Regulatory Reporting

In certain jurisdictions, specific animal health conditions (such as notifiable diseases) may require mandatory reporting to agricultural authorities. If your organization is subject to such requirements, you are responsible for ensuring compliance. Intelia does not automatically report animal health data to any government authority, and the Services do not replace your obligation to report any suspicion of disease to your competent authority.

11.3 Biosecurity Data

Registered farm information and the risk scores derived from it are treated as confidential business information. Access to this data is restricted to authorized users within your organization based on role-based access controls.

12. CONTACT US

If you have questions, concerns, or complaints about this Privacy Policy or our privacy practices, please get in touch with us:

Intelia Technologies Inc.
839 Rue Papineau
Joliette, QC J6E 2L6
Canada

Legal Information: This privacy statement has been prepared in accordance with the provisions of multiple legislations, including Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation) and applicable Canadian privacy laws.

This Privacy Policy is effective as of July 21, 2026, and supersedes all prior privacy agreements and understandings, whether written or oral, between the parties.