← Back to Home

Privacy Policy

Last updated: October 26, 2026

Zero Day IT Solutions Inc. ("Zero Day IT," "we," "us," or "our") is a Vancouver-based managed security and IT services provider. We protect personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia's Personal Information Protection Act (PIPA), and other applicable Canadian privacy laws. This policy explains what we collect through this website, why, who we share it with, and the choices you have.

1. Information We Collect

  • Contact details you give usname, email address, phone number, company name, and the message you write when you use our contact or consultation forms, or when you email or call us.
  • Messages to our AI Security Advisor ("ZeroBot")the text you type into the chat widget. See section 3.
  • Inputs to our free security toolsfor example a company domain you enter into the dark-web exposure check, or answers you give in a self-assessment. See section 4.
  • Technical datayour IP address, browser type, device type, pages requested, and timestamps, recorded automatically in standard web-server logs when you visit.
  • Service datainformation generated while we deliver managed IT, cybersecurity, cloud, or professional services to you under a separate service agreement. That agreement governs how service data is handled.

2. How We Use Your Information

  • To respond to your enquiries and schedule assessments or consultations
  • To provide the ZeroBot answers and tool results you request
  • To deliver, operate, support, and improve our services
  • To send service communications and, only with your consent, occasional updates about our offerings (you can opt out at any time)
  • To prevent abuse of our website, such as automated form spam or excessive chat requests
  • To meet legal, regulatory, and contractual obligations

3. ZeroBot: Our AI Security Advisor

ZeroBot answers security and IT questions using an AI language model that runs on infrastructure owned and operated by Zero Day IT in Canada. Your messages are not sent to a public AI service and are not used to train any model.

  • Retention: the conversation exists only in your browser while the chat window is open. Message content is not stored on our servers after the reply is generated. Our servers log technical errors (for example, a timeout) without the message text.
  • Abuse prevention: to keep the service available, we keep a short-lived counter of chat requests per IP address. It expires automatically within minutes.
  • Please do not enter passwords, credentials, personal health or financial details, or confidential client information into the chat. If you believe you are experiencing an active security incident, call us at +1 (866) SOS-GEEK (767-4335) instead.
  • ZeroBot's answers are general information, not professional advice. See our Terms and Conditions.

4. Free Security Tools

  • Calculators and self-assessments (security score, breach-cost estimate, compliance checklist, vendor-risk questionnaire) run in your browser. Your answers are not transmitted to us unless you choose to submit a form.
  • Dark-web exposure check: the domain you enter is compared on our server against the public breach catalogue published by Have I Been Pwned. The domain you enter is not sent to Have I Been Pwned or any other third party, and we do not keep it.
  • "Your public IP" panel: to show your approximate location and internet provider, your public IP address is sent to the geolocation service ip-api.com. That service's own privacy policy applies to that lookup. We do not store the result.
  • CVE and threat feeds are fetched from public sources (such as CISA) by our server; no information about you is sent to those sources.

5. Who We Share Information With

We do not sell or rent personal information. We share it only with the providers below, to the extent needed to run this website, and with others only as described.

  • Hostingthis website is hosted on Vercel, whose infrastructure is located primarily in the United States. Standard request logs (including IP addresses) are processed there.
  • Email deliverycontact-form submissions are delivered to our team by email through Google Workspace, or through automation running on our own infrastructure.
  • Abuse preventionshort-lived rate-limit counters (keyed to an IP address or, for forms, the submitted email address) are held by Upstash, a managed database service, and expire automatically within 24 hours.
  • IP geolocationip-api.com, only when you use the public-IP panel (section 4).
  • Legal requirementswhen required by law, court order, or a government authority with jurisdiction.
  • Business transfersin connection with a merger, acquisition, or sale of assets, subject to equivalent confidentiality protections.
  • With your consentfor any other purpose you expressly authorize.

Where personal information is processed outside Canada, it may be subject to the laws of that jurisdiction. We use providers that commit to appropriate contractual and technical safeguards.

6. Cookies and Tracking

This website does not use advertising cookies, analytics cookies, or third-party tracking scripts. We do not build visitor profiles. If we introduce strictly necessary cookies or analytics in future, we will update this page before doing so and, where required, ask for your consent.

7. How We Protect Information

We apply the same discipline to our own website that we bring to client environments: encryption in transit, encryption at rest for stored data, multi-factor authentication and least-privilege access for our staff, mutually authenticated connections between our website and our AI infrastructure, and continuous monitoring. No method of transmission or storage is completely secure, but we work to keep our safeguards current.

8. How Long We Keep Information

  • Enquiries and form submissionskept as business records for as long as needed to respond and to maintain our relationship with you, then securely deleted.
  • ZeroBot messagesnot retained after the reply is generated.
  • Tool inputsnot retained.
  • Rate-limit countersexpire automatically within 24 hours.
  • Server logsretained for a limited period for security and troubleshooting under our hosting provider's standard retention.
  • Service dataas set out in your service agreement and applicable law.

9. Your Rights

Under PIPEDA and PIPA you may:

  • Ask what personal information we hold about you and how it has been used or disclosed
  • Ask us to correct inaccurate or incomplete information
  • Withdraw consent to uses that are not required by law or contract
  • Make a complaint to the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada

To exercise these rights, contact our Privacy Officer at ask@zerodayit.ca. We respond within 30 days as the law requires.

10. Minors

Our website and services are intended for businesses and are not directed at individuals under the age of majority. We do not knowingly collect personal information from minors.

11. Third-Party Websites

Our website links to third-party sites, including vendor partners. We are not responsible for their content or privacy practices, and we encourage you to read their policies.

12. Changes to This Policy

We update this policy when our practices or the law change. The revised policy is posted here with a new "last updated" date. Material changes affecting how we handle information you have already given us will be communicated where practical.

13. Contact Our Privacy Officer