Privacy Policy

Effective October 2, 2026. Last updated October 2, 2026.

Othermile is operated by Nagi Consulting Group Inc. of Calgary, Alberta ("we", "us"). This policy explains what personal information we collect through othermile.com and the Othermile app, API and MCP server, why, how we protect it, and the choices and rights you have. It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA) and Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25).

Our role

For people who visit the site, create an account, sign in or contact us, we decide how their information is used and we are responsible for it.
For information a business puts into Othermile about its own customers (for example, order details), we act on that business's behalf as its service provider under our Data Processing Addendum. The business is responsible for informing its customers. If you bought from a store that uses Othermile, please contact the store about your information; we will help it answer.

What we collect

Account information: your name, work email, business name, account type and role, and business details you enter. If you continue with Google, Google shares your name, email address and a Google account identifier with us.
Sign in and security information: one time sign in links, session identifiers, passkey public keys and device names, browser notification addresses if you turn on alerts, and IP addresses and browser details in security logs. Face, fingerprint and device lock data never leave your device; we only receive a signature.
Order and product data from businesses: order numbers, products, tariff codes, origins, prices, costs, destination province or state and postal code where provided, the routes compared and the decisions made. We do not need customer names, street addresses or payment details, and we ask businesses not to send them. When a connected store or printer sends a whole order, the names, street addresses, emails and phone numbers in it are discarded as it arrives.
Product lists from manufacturers and importers: SKUs, descriptions, tariff codes, origins, volumes and values. We treat these as confidential business information and use them only to produce that business's scans, what ifs and alerts.
Connection secrets, such as a Printify token, which we encrypt before storing.
Messages: what you send through the contact form, a broker partner application or email, with your name and email address.
Shopper reports from the public checker: countries, province or state, delivery type, carrier, value declared, amount charged, delivery days and the first digits of a tariff code. We do not ask for names, emails or addresses with these reports.
Our own website statistics: the pages viewed, the site that sent you, campaign tags, your country, and which buttons were used. We do not use cookies for this. To count visitors, we combine your IP address and browser details with a random value that changes every day and keep only a short fingerprint of the result, so we cannot recognize you from one day to the next or identify you. If your browser sends a Do Not Track or Global Privacy Control signal, we record nothing.
Google Analytics, only if you accept it: if you click Accept on the cookie notice on our website, Google Analytics records the pages you view, how you arrived, your approximate location (worked out from your IP address), your device and browser, and which buttons you use, linked to a random identifier kept in its cookies. If you decline, or your browser sends a Global Privacy Control or Do Not Track signal, it never loads.
Billing: card payments are handled by our payment provider. We keep a customer reference, your plan and invoices, never card numbers.

Cookies and browser storage

We use one cookie to keep you signed in to the app and a short lived one while you continue with Google. Both are strictly necessary for the service.

On our website, Google Analytics cookies are used only if you accept them on the cookie notice. They are named _ga and _ga_ followed by an identifier, last up to two years, and let us count visits and see which pages people find useful. We have turned off Google's advertising features (Google signals and ad personalization), and we do not use Google Analytics in the Othermile app. Google states that Google Analytics does not log or store IP addresses, and it deletes the detailed records after 14 months at most; after that only combined totals remain. You can change your choice at any time with Cookie settings at the bottom of the website's pages; declining deletes these cookies. Google explains how it uses information from sites that use its services.

The app remembers which workspace you chose, and the site remembers your cookie choice and display choices such as reduced motion, in your browser's local storage. We do not use advertising cookies, and no other company tracks you on our site unless you accept Google Analytics. To show the site, your browser loads fonts from Google Fonts and animation code from jsDelivr, which receive your IP address and browser details in order to deliver those files.

Why we use it

To provide Othermile: check orders and parcels, compare routes, hold orders for approval, send alerts, keep signed records, and support you.
To secure the service and prevent fraud and abuse, for example by limiting how many sign in links an email address can receive.
To improve estimates, using reports and outcomes only in combined form. We show combined figures for a route only once at least five reports exist, so no single report can be singled out.
To bill, keep business records and meet our legal obligations.
To send service messages. We send marketing email only with your consent, and every marketing email lets you unsubscribe.

We do not sell or rent personal information, we do not use it for targeted advertising, and we do not use order data to train AI models.

Consent

We collect, use and share personal information with your consent, except where the law allows otherwise. By using Othermile you consent to the uses described in this policy; where the law requires express consent, we ask for it separately. You may withdraw consent at any time, subject to legal and contractual limits, by writing to us. Some features may then stop working.

Automated decisions

Othermile decides automatically whether to release, switch, hold or block an order, using rules the business sets. These decisions are about orders and are made for the business. If a decision affects you, contact the business: it can review the decision, and we will help it explain the information and factors that were used.

Who we share it with

Service providers that host the service, send email and notifications, process payments and, if you accept, measure website use for us, listed on our subprocessors page. They work under contracts that limit their use of the information and require them to protect it.
A licensed customs broker, only when you ask us to introduce you.
Services a business connects, such as its printer, on that business's instructions.
Authorities and others when the law requires it, or when needed to protect the rights, safety and security of our customers, the public or us.
A buyer or successor if our business is reorganized, merged or sold, who must keep using the information under this policy.

Where it is stored

Our app and database run in Canada (Fly.io, Toronto). Some service providers process information in the United States or elsewhere, for example to deliver email or, if you accept, to measure website use. Information processed outside Canada is subject to the laws of that country and may be accessed by its courts, law enforcement and national security authorities. Before information about Quebec residents is communicated outside Quebec, we assess whether it will receive adequate protection.

How long we keep it

Readable order details: deleted after the retention period of the business's plan, from 30 days to 7 years.
Signed decision records: hold fingerprints (hashes) rather than readable details, and are kept for the life of the account.
Account information: deleted within 90 days after an account closes, except what the law requires us to keep longer, such as billing records for tax purposes.
Sign in links and security logs: kept for short periods, generally no more than 90 days.
Messages and applications: kept while needed to answer them and for our business records.

When we no longer need personal information, we delete it or make it anonymous.

How we protect it

We use safeguards suited to the sensitivity of the information: encryption in transit, encryption of connection secrets, separation of each business's data inside the database, passkeys for approvals, hashed API keys, limited staff access, logging, and security reviews every month (see our Security page). No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission.

If there is a breach

If a breach of security safeguards involving personal information under our control creates a real risk of significant harm, we will notify the people affected and the Privacy Commissioner of Canada, and the Alberta or Quebec commissioner where required, as soon as feasible. We keep a record of every breach. If the information belongs to a business's customers, we notify the business promptly so it can meet its own obligations.

Your rights

You may ask to see the personal information we hold about you, to correct it, to withdraw consent, or to have it deleted where the law allows. Quebec residents may also ask for their information in a structured, commonly used technological format and ask about decisions made by automated processing. Write to info@othermile.com; we answer within 30 days, and we may need to confirm your identity first. If your request concerns information a business put into Othermile, we will pass it to that business and help it answer.

Children

Othermile is a business service and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, write to us and we will delete it.

Changes to this policy

We post updates on this page with a new date, and tell account owners by email about material changes before they take effect.

Contact and complaints

Our Privacy Officer is responsible for this policy and for our compliance with privacy law: Privacy Officer, Nagi Consulting Group Inc., Calgary, Alberta, Canada, info@othermile.com.

If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, or, in Quebec, the Commission d'accès à l'information.