Privacy Policy
This policy explains what personal information Embark Innovations Inc. collects through embarkinnovations.com and the Prodesy platform, why we collect it, who we share it with and the choices you have.
1. Who we are
Embark Innovations Inc. (“Embark”, “we”, “us”) is a Canadian software company founded in Calgary, Alberta in 2015. We build Prodesy, a production chemical program management platform used by oil and gas producers and chemical vendors across Canada and the United States.
Embark is the organization responsible for personal information collected through this website. For most data inside Prodesy, our customers are the responsible organization and Embark processes that data on their instructions (see section 6).
Embark Innovations Inc.Calgary, Alberta, Canada
(403) 744-5346 · Toll-free 844-505-5010
Email: info [at] embarkinnovations.com
2. What this policy covers
This policy applies to:
- The website at embarkinnovations.com, including demo requests, pricing enquiries, resource downloads and the contact form.
- Prodesy Web, the browser application our customers log in to.
- Prodesy Mobile, the field app available through the Apple App Store and Google Play.
- Business communications with Embark by email, phone or online meeting.
It does not apply to websites or services we link to but do not operate, or to the privacy practices of our customers.
3. Information we collect
3.1 Information you give us
| When | What we collect |
|---|---|
| You request a demo, pricing or a quote | First and last name, work email, company, role, whether you are a producer or chemical vendor, approximate number of chemical injection points, and anything you type in the message field |
| You book a meeting after submitting a form | Name, email, meeting time and time zone |
| Your organization becomes a Prodesy customer | Account holder name, work email, phone, job title, billing contact and agreement details |
| You use Prodesy Web or Prodesy Mobile | Login credentials (passwords are stored hashed), user profile, and the operational records you create (see section 6) |
| You contact support | Name, contact details and the content of your request |
3.2 Information collected automatically
- Device and browser data: IP address, browser type, operating system, screen size, language and referring page.
- Usage data: pages viewed, time on page, links clicked, form interactions and approximate location derived from IP address (city or region level).
- Cookies and similar technologies: described in section 5. Analytics and marketing cookies are set only after you consent where consent is required.
- Server logs: standard web-server and application logs used for security and troubleshooting.
3.3 Information from other sources
- Your employer or the Prodesy account holder, who creates user accounts for its staff and may supply your name, email and role.
- Business contact databases and professional networks such as LinkedIn, used to confirm the company and title on a sales enquiry.
- Telemetry and integration partners configured by a customer (tank-level sensors, SCADA, production accounting systems). These supply operational data, not personal information, except for the names of users who configured them.
4. How we use personal information
| Purpose | Examples | Basis |
|---|---|---|
| Respond to enquiries and run demos | Replying to a form submission, scheduling a demo, preparing a quote | Your request; our legitimate business interest |
| Deliver and support Prodesy | Creating user accounts, authenticating logins, syncing mobile data, producing reports, answering support tickets | Performance of the customer agreement |
| Billing and account administration | Invoicing per treatment site, managing user counts, renewal notices | Performance of the customer agreement |
| Improve the website and product | Understanding which pages and features are used, fixing errors, testing changes | Consent (analytics cookies) or legitimate interest for aggregated, de-identified data |
| Marketing to business contacts | Sending product updates and case studies to people who requested a demo or opted in | Consent, or existing business relationship under Canada’s Anti-Spam Legislation (CASL); you can unsubscribe at any time |
| Security and fraud prevention | Spam filtering on forms, reCAPTCHA, monitoring for unauthorized access | Legitimate interest; legal obligation |
| Legal compliance | Responding to lawful requests, keeping tax and accounting records | Legal obligation |
We do not sell personal information, and we do not use it for automated decisions that have legal or similarly significant effects on you.
5. Cookies and consent
We use cookies and similar technologies through Google Tag Manager. A consent banner, managed by Termly, appears on your first visit. Analytics and marketing cookies are off by default for visitors from Canada and the European Economic Area until you accept them; you can change your choice at any time by reopening the consent banner.
| Category | Purpose | Providers | Can you turn it off? |
|---|---|---|---|
| Strictly necessary | Form submission, spam protection, remembering your consent choice, security | Embark, HubSpot, Google reCAPTCHA, Termly | No; the site will not function without them |
| Analytics | Measuring page views, traffic sources and feature use so we can improve the site | Google Analytics 4 | Yes, via the consent banner |
| Marketing and CRM | Linking a form submission to your visit history so our team has context when replying; measuring campaign effectiveness | HubSpot | Yes, via the consent banner |
Google Analytics is configured with IP anonymization and Google Consent Mode. We honour the Global Privacy Control (GPC) browser signal as an opt-out of analytics and marketing cookies. Most browsers also let you block or delete cookies in their settings.
6. Prodesy platform and mobile app
6.1 Our role
When you use Prodesy as an employee or contractor of a customer, that customer decides what data is entered and who can see it. Embark stores and processes the data on the customer’s behalf under our customer agreement. If you have questions about how your employer uses Prodesy data, contact your employer first; we will assist them in responding.
6.2 What Prodesy processes
The bulk of Prodesy data is operational, not personal: chemical injection rates, tank inventory levels, delivery tickets, lab results (water, bacteria, corrosion, residuals), production volumes and telemetry readings. Personal information in the platform is limited to:
- User account details (name, work email, phone, role, employer).
- The name of the user who created or edited a record, with a timestamp.
- Field notes and photographs attached to site visits, which may incidentally include people or vehicles.
- Location data from Prodesy Mobile, described below.
6.3 Prodesy Mobile permissions
| Permission | Why the app asks for it | Required? |
|---|---|---|
| Location (while using the app) | To stamp site visits, pump-rate readings and inventory counts with the location where they were captured, and to help field staff find the correct treatment site | Optional; captured only when a record is saved, never continuously in the background |
| Camera and photo library | To attach photographs of equipment, tank gauges, samples or tickets to a field record | Optional |
| Storage | To keep records on the device while offline and sync them when a connection returns | Required for offline use |
| Notifications | Schedule reminders and treatment alerts on Pro plans | Optional |
Data stored on the device while offline is encrypted by the operating system and removed when you sign out. We do not collect your contacts, messages or precise location when the app is not in use.
6.4 Customer data and benchmarking
We may produce aggregated, de-identified statistics (for example, average treatment variance across all customers) to improve Prodesy and to publish industry benchmarks. These statistics never identify a customer, well, site or individual. Case studies that name a customer are published only with that customer’s written approval.
7. Who we share personal information with
We share personal information only as described here. We do not sell it or rent it.
| Recipient | What they receive | Why |
|---|---|---|
| HubSpot | Form submissions, meeting bookings, email engagement, website activity (with consent) | Customer relationship management, form hosting, spam filtering, meeting scheduling, email |
| Google (Workspace, Analytics, Tag Manager, reCAPTCHA) | Email correspondence; analytics and usage data (with consent); form-protection signals | Business email, website analytics, tag management, bot detection |
| Termly | Your cookie consent choice and a pseudonymous ID | Consent management and record keeping |
| Microsoft (Azure, Power BI) | Prodesy user accounts and operational data; dashboard viewer identities | Cloud hosting and customer dashboards |
| Apple App Store and Google Play | App download and crash diagnostics under their own policies | Distribution of Prodesy Mobile |
| Website hosting and content delivery provider | IP address and request logs | Serving the website securely |
| Telemetry and data-integration partners selected by a customer | Operational data the customer configures; integration user names | Importing sensor, SCADA and production data into Prodesy |
| Professional advisers | Information needed for the engagement | Legal, accounting and insurance services |
| Authorities and courts | Information required by a lawful order | Legal compliance, protection of rights and safety |
| A buyer or successor | Business records including customer and contact data | Merger, acquisition or sale of assets, subject to this policy |
Each service provider is bound by contract to use personal information only to provide its service to us and to protect it appropriately.
8. Where your information is stored
Embark is based in Alberta, Canada. Our service providers operate data centres in Canada and the United States, and some, such as HubSpot and Google, may process data in other countries where they or their sub-processors operate. When personal information leaves Canada it may be subject to the laws of the country where it is held, including lawful access by government authorities there.
Customers who require Prodesy data to remain in a specific region can ask about regional hosting options when signing their agreement.
9. How long we keep it
| Information | Retention |
|---|---|
| Demo and sales enquiries that do not become customers | 24 months after our last contact with you |
| Customer account and user records | Duration of the agreement, then 90 days to allow data export, then deleted or de-identified except as required for tax and accounting records (7 years) |
| Prodesy operational data | As instructed by the customer; exported or deleted within 90 days of termination on request |
| Website analytics | 14 months (Google Analytics default), then aggregated |
| Support correspondence | 3 years after the ticket is closed |
| Server and security logs | 12 months |
10. Security
We protect personal information with measures proportionate to its sensitivity, including encryption in transit (TLS) and at rest, hashed passwords, role-based access within Prodesy so users see only the sites and programs assigned to them, multi-factor authentication for Embark staff and administrators, logged access to production systems, and regular backups. No method of transmission or storage is completely secure; if we become aware of a breach that creates a real risk of significant harm, we will notify affected individuals and the relevant privacy regulator as the law requires.
11. Your rights and choices
11.1 Everyone
- Access and correction: ask what personal information we hold about you and request that inaccurate information be corrected.
- Withdraw consent: change your cookie choices at any time, unsubscribe from marketing emails using the link in any message, or ask us to stop a use that relies on your consent. Withdrawal may limit the services we can provide.
- Deletion: ask us to delete personal information we no longer need for the purposes above or as required by law.
- Complaint: raise a concern with our Privacy Officer (section 15). We respond to requests within 30 days, or tell you if we need longer and why.
11.2 Canada
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).
11.3 United States
Residents of states with comprehensive privacy laws, including California (CCPA/CPRA), Texas (TDPSA), Colorado, Virginia and others, may have rights to know, access, correct, delete and port their personal information, to opt out of the sale or sharing of personal information and of targeted advertising, and not to be discriminated against for exercising those rights. Embark does not sell personal information or share it for cross-context behavioural advertising. Most of the personal information we hold about US individuals is business contact data collected in a business-to-business context, which several state laws exempt; we honour requests regardless. You may authorize an agent to submit a request on your behalf; we will verify the request using the email address on file.
11.4 How to make a request
Email our Privacy Officer at the address in section 15 with “Privacy request” in the subject line, or call (403) 744-5346. We will verify your identity before releasing or changing information. There is no fee for a reasonable request.
12. Children
Our website and Prodesy are intended for business users. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.
13. Third-party links
Our website links to third-party sites such as LinkedIn, the Apple App Store and Google Play. Those sites have their own privacy policies, and we are not responsible for their practices.
14. Changes to this policy
We review this policy at least annually and whenever our practices change. Updates are posted on this page with a new effective date. For material changes affecting Prodesy customers, we will notify the account holder by email at least 30 days before the change takes effect.
15. Contact our Privacy Officer
Privacy Officer, Embark Innovations Inc.
Calgary, Alberta, Canada
Email: info [at] embarkinnovations.com (subject: Privacy request)
Phone: (403) 744-5346 · Toll-free 844-505-5010
Already a customer with a question about your Prodesy data? Sign in and open a support request, or contact us.