Last Updated: April 28th, 2026 

INTRODUCTION 

Vivid Reports, Inc. (“Vivid”, “we”, “us”, or “our”) take our obligations under data protection laws seriously. This Privacy Policy (“Policy”) outlines our continued commitment towards respecting your privacy and complying with applicable laws governing how and when your personal information is collected, used, and disclosed while accessing our website and services. 

It is important that you read this Policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we collect or process personal information about you so that you are fully aware of how and why we are using your information. This Policy supplements other notices and is not intended to override them. 

ABOUT 

Vivid Reports, Inc. is a software company that develops financial and operational reporting solutions for organizations. The company’s platform enables finance teams to access, model, and analyze data from enterprise systems such as ERP and CRM applications, helping organizations produce accurate reports and gain insight into business performance. 

For the purposes of applicable data protection law, when communicating with you directly or operating our website and marketing activities, Vivid is responsible for this Policy and, to the extent relevant to applicable data protection law, acts as the controller of your personal information. 

In certain circumstances, Vivid may act as a processor on behalf of a Client in connection with the provision of our software and related services. In those situations, the Client determines the purposes and means of processing personal information and the Client’s privacy policy will apply to such processing. 

U.S. Residents: If you reside in the United States, please also see our US Annex below for your rights under applicable U.S. privacy laws, including but not limited to the California Consumer Privacy Act. 

DEFINITIONS 

We will use the following terms regularly in this Policy. 

Client 
means the business or individual to whom the services are being provided. 

Personal Information 
means any information that: 

(i) identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked directly or indirectly with a particular individual or household; or 
(ii) relates to an identified or identifiable natural person. 

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to the physical, physiological, mental, economic, cultural, or social identity of that natural person. 

 

HOW WE COLLECT INFORMATION 

We use different methods to collect information from and about you including through: 

Information you give us 

This is information that you provide by accessing our website and/or services, or by corresponding with us (for example by email or through a contact form). It includes information such as your name, mailing address, email address, company name, or telephone number when you register for services, request information, download materials, subscribe to communications, or otherwise interact with us. 

If you contact us, we will keep a record of that correspondence. 

 

Information we collect about you and your device 

Each time you visit our website we automatically collect personal information including device, content and usage data using cookies and similar technologies such as Google Analytics and the LinkedIn Insight Tag. 

As you interact with our website, we will automatically collect information including: 

• Internet protocol (IP) address 

• browser type and version 

• date and time of visit 

• time zone setting 

• browser plug-in types and versions 

• operating system and platform 

• device identifiers 

• page response times 

• length of visits to pages 

• page interaction information such as scrolling, clicks and mouse-overs 

• navigation paths and referring URLs 

 

Information we receive from other sources 

We receive information about you from various third parties including: 

• analytics providers 

• advertising networks 

• search information providers 

• technical service providers 

• marketing service providers 

This includes information about your interactions with our advertisements or website content. 

 

Aggregated Information 

We also collect, use and share aggregated or anonymized data such as statistical or demographic data for any purpose. 

Aggregated data may be derived from your personal information but is not considered personal information if it does not directly or indirectly reveal your identity. However, where we are able to combine or connect aggregated data with your personal information so that it can still directly or indirectly identify you, the combined data remains personal information which will be used in accordance with this Policy.   

 

 

TYPES OF INFORMATION WE COLLECT 

The amount and type of information we collect depends on the nature of your interaction with our website and services. 

Categories of information include: 

Profile and Identity Information: Such as your first name, last name, username, title, company, or other identifying information. 

Contact Information: Such as your postal address, email address and telephone numbers. 

Transaction Information: Details about products or services you have purchased or requested. 

Device Information: Information about the computer, mobile device, or other technology used to access our website. 

Technical Information: Internet protocol (IP) address, browser type and version, time zone setting, operating system, platform and other technology on the devices you use. 

Usage Information: Information about how you use our website and services, including browsing activity and interactions with website content. 

Marketing and Communications Information: Your preferences in receiving marketing communications from us and your communication preferences. 

Aggregated Data: Statistical or demographic data derived from other information. 

 

HOW WE USE THE INFORMATION WE COLLECT 

We use customer relationship management (CRM) systems to manage communications with customers and prospective customers, track engagement with our services or communications, and support our sales and marketing activities. We will only use your Personal Information when the law allows us to do so. 

Purpose	Lawful Basis
Administration and security	Legitimate interest – ensuring the security and integrity of our website and services
Maintenance	Legitimate interest – maintaining and improving our systems and services
Registration	Legitimate interest – enabling the provision of services
Performance of a contract with you	Contract
Data analysis	Legitimate interest – understanding how our website and services are used.
Marketing	Consent – where required by law for direct marketing communications, in which case you have the right to withdraw that consent at any time by contacting us using the details under the Contact Us section.  Legitimate Interest – Where consent is not required under applicable law, we rely on the interest of advertising our services.
Optimisation	Legitimate interest – improving the operation and effectiveness of the website and services

 

In particular, we use your information to: 

• respond to inquiries and requests 

• provide information about our products and services 

• manage customer and prospect relationships 

• operate and improve our website 

• measure marketing effectiveness 

• analyze visitor engagement with website content 

• identify interest in our products and services 

• support sales and customer relationship management activities 

• comply with legal obligations 

 

AUTOMATED PROCESSING AND DECISION MAKING 

We use advertising and analytics technologies that rely on automated processing to measure advertising performance and determine whether particular advertisements should be displayed to users. 

These technologies include advertising platforms such as: 

• Google Ads and specifically Google Analytics and Google Ad Manager 

• LinkedIn Ads and specifically LinkedIn Insight Tag 

• Meta Ads 

• other marketing or advertising partners 

These platforms use cookies or similar technologies to analyze interactions with our website, measure campaign effectiveness, and deliver advertisements that may be relevant to users based on prior interactions with our website. 

These technologies may involve limited forms of automated profiling related to advertising effectiveness and marketing analytics.  Automated processing (including profiling) is a form of automated processing of personal data to evaluate certain aspects relating to you, in particular to analyse or predict aspects concerning your personal preferences, interests, behaviour, location or movements. We only do this in the context of advertising shown in connection with the above platforms, with the practical effect being whether or not an advert is shown to you as opposed to a different advertisement. 

 

OPTING OUT 

Visitors can control advertising preferences through tools provided by advertising networks, including: 

• Google Ad Settings 

• Network Advertising Initiative opt-out tools 

• browser privacy settings (such as Global Privacy Control) 

Users may also opt out of marketing communications by following unsubscribe instructions in emails or contacting using the detail in the Contact Us section of this policy. 

 

HOW WE SHARE INFORMATION 

We disclose personal information to fulfill the purposes identified in this Policy and to operate our services, including with: 

• service providers who assist in operating our website or business 

• marketing and analytics providers 

• cloud hosting providers 

• business partners involved in providing services 

• professional advisors 

• regulatory authorities where required by law 

We also disclose personal information if required to comply with legal obligations or to protect the rights, property or safety of Vivid or others. 

 

RETENTION OF PERSONAL INFORMATION 

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, contractual, and reporting obligations. 

Retention periods vary depending on the nature of the information and the context in which it was collected. 

For example: 

• Cookies are retained as described in our cookie policy (https://www.vividreports.com/cookie-policy/) 

• Web server logs may be retained for approximately 30 days for operational monitoring and troubleshooting. 

• Security and system logs may be retained for up to one year to support security monitoring and incident investigation. 

• Customer account records and related contractual information may be retained for up to seven (7) years in accordance with legal, financial, and contractual recordkeeping requirements. 

• Marketing and CRM contact information may be retained while an individual or organization remains engaged with our communications or services and for a reasonable period thereafter, taking into account the nature of the relationship and legitimate business needs. 

We periodically review the information we hold and securely delete or anonymize personal information when it is no longer required. 

 

INTERNATIONAL DATA TRANSFERS 

Personal information may be processed and stored in countries outside your jurisdiction, including Canada and the United States. 

Where required by law, we implement appropriate safeguards for international transfers of personal information, including contractual safeguards such as Standard Contractual Clauses or other legally recognized transfer mechanisms. 

SECURITY OF PERSONAL INFORMATION 

We have implemented appropriate technical and organizational measures designed to protect personal information from unauthorized access, loss, misuse, alteration or disclosure. 

Security measures include: 

• encrypted communications using TLS 

• network security protections 

• access controls and authentication safeguards 

• monitoring and logging of system activity 

Despite these measures, no system can guarantee absolute security. 

MINORS 

Our website and services are not designed for use by minors. If you believe that a minor has provided personal information to us, please contact us at: 

[email protected] 

If we become aware that personal information has been collected from a minor without appropriate authorization, we will take steps to delete that information. 

 

COOKIES 

We use cookies and similar technologies to operate our website, understand how visitors interact with it, and support our marketing and analytics activities. 

Cookies are small files stored on your device that allow a website to recognize your browser and remember certain information. 

We use the following categories of cookies: 

Strictly Necessary Cookies 

These cookies are required for the operation of our website and cannot be disabled in our systems. 

Analytics Cookies 

These cookies help us understand how visitors use our website so we can improve performance and usability. We use analytics tools such as Google Analytics and Microsoft Clarity to analyze website traffic and user interactions. 

Functionality Cookies 

These cookies allow the website to remember preferences and improve the functionality of the website. 

Targeting or Advertising Cookies 

These cookies are used by advertising platforms to deliver relevant advertisements and measure the effectiveness of marketing campaigns. These include cookies set by Google Ads Google Tags, Google Analytics, LinkedIn Ads LinkedIn Insight Tag, Meta Ads Meta Pixel, or other advertising partners. 

We use a consent management platform to allow visitors to manage cookie preferences. Non-essential cookies and tracking technologies are only activated after consent is provided through our cookie consent manager, which allows visitors to manage and update their preferences at any time. 

Visitors may also manage cookie preferences through their browser settings. 

THIRD PARTY LINKS 

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties and encourage users to review their privacy policies. 

CONSENT UNDER CANADIAN PRIVACY LAWS 

If you are located in Canada, we will collect, use, or disclose personal information only with your consent unless otherwise permitted by law. 

Consent may be express or implied depending on the circumstances. You may expressly give your consent in writing, verbally or through any electronic means. In certain circumstances, your consent may be implied by your actions. For example, providing us with Personal Information to use our services is implied consent to use such information. We will assume that you have consented to its reasonable collection and use of Personal Information consistent with the purposes for which the information was given.  

YOUR RIGHTS 

Depending on applicable data protection laws, you may have rights including: 

• Access 

• Rectification 

• Erasure 

• Restriction of processing 

• Data portability 

• Withdrawal of consent 

• Objection to processing 

• Right to lodge a complaint with a supervisory authority 

Requests can be submitted using the contact information below. 

Your rights under other data protection laws may be similar or different to those above. If you ask to exercise these rights from a jurisdiction where you do not have the applicable right, we will consider the request at our discretion. 

However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide our services to you. We will advise you if this is the case at the time you withdraw your consent. Please note that even after you have chosen to withdraw your consent we may be able to continue to process your Personal Information to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.   

CONTACT US 

If you have any questions about this Policy or wish to exercise your rights, please contact us at: 

Privacy Officer 
Vivid Reports, Inc. 
[email protected] 

1700-242 HARGRAVE STREET 
WINNIPEG, MB 
CANADA, R3C 0V1 

Toll-Free: 1-866-975-9409 

 

CHANGES TO THIS POLICY 

We review this Policy regularly and will update it from time to time. 

Updates will be posted on this page with an updated “Last Updated” date. 

Your continued use of the website after any updates constitutes acceptance of the updated Policy. 

 

US Annex – If you are in the United States   

The US Annex of this Policy has been compiled for the benefit of those visitors to our website and/or customers who are concerned with how their Personally Identifiable Information (“PII”) is being used online. PII, as used in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read the Policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle the PII which we obtain from your visits to our website and/or use of our products.   

1. What PII do we collect from the people that access our website and/or services?   

This is set out at Section 2 of the Policy. 

2. When do we collect PII?   

This is set out at Section 1 of the Policy 

3. How do we use the PII which is collected?   

This is set out at Section 3 of the Policy 

4. How do we protect PII?   

This is set out at Section 8 of the Policy.  

5. California Privacy Rights – For California Residents   

The following table explains as required by California privacy laws whether we have collected, disclosed or sold certain categories of PII in the past 12 months. We do not sell PII in the dictionary definition of the word (i.e. we do not receive money from any party in exchange for providing them with PII).  

However, certain data collection on our website and via our services by third parties for purposes of interest-based advertising and social media tools may be a “sale” or “sharing” under California privacy law.  

Where the table below says we have sold or shared categories of PII, we will have only have done so in the context of data collection for the purposes of interest-based advertising, as set out at Section 3 of the Policy 

Category	Examples	Collected	Disclosed	Sold and/or Shared
Identifiers	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers.	YES	YES	SHARED
Personal information categories listed in the California Customer Records statute.	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver’s license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information.  Some personal information included in this category may overlap with other categories.	YES	YES	NO
Protected classification characteristics under California or federal law.	Age, race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).  Some personal information included in this category may overlap with other categories.	NO	NO	N/A
Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.	YES	YES	SHARED
Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.	NO	NO	N/A
Internet or other similar network activity.	Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.	YES	YES	SHARED
Geolocation data.	Physical location or movements;
Audio, electronic, visual, thermal, olfactory, or similar information.	Photographs, video recordings (including security camera footage and recordings of video calls), voice recordings (including call recordings).	NO	NO	N/A
Professional or employment-related information.	Current or past job history or performance evaluations.	NO	NO	N/A
Non-public education information (per the Family Educational Rights and Privacy Act).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.	NO	NO	N/A
Inferences drawn from other personal information.	Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.	YES	YES	SHARED
Sensitive Personal Information.	(1) Social Security number, driver’s license number, state identification number, passport number; (2) account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (3) precise geolocation information; (4) racial or ethnic origin, religious, or philosophical beliefs, or union membership; (5) contents of mail, email, and text messages unless the business is the intended recipient of the communication; (6) genetic data; (7) biometric data for the purposes of uniquely identifying a consumer; (8) health information; (9) sex life or sexual orientation information.  Some personal information included in this category may overlap with other categories.	NO	NO	N/A

 

Your Rights: You have the right to request that we disclose to you what information we collect, use, disclose, and sell.  You also have the right to request that a business delete any PII about you which the business has collected about you.  To submit either of the above requests, you may call us toll-free  at 866-484-8778. You may also submit via email at [email protected].  Please note for your protection, any request sent to us to delete your PII will be subject to the following verification procedure:  

– On intake, the request will be logged in our compliance management system. 

– If your request is related to a known customer, then the customer admin will be contacted to verify the request. 

– If the request is not associated with a known customer, the request will be logged, you will be contacted via the information submitted to verify.  We must have and must confirm your email address and your ownership of this address to be able to delete records in our systems, and we can only delete the records associated with an authenticated personal email address. 

– We will log the resolution in our compliance management system. 

You have the right to direct us to not sell your information.   

If you opt to exercise your privacy rights, we are required to verify your identity in order to prevent unauthorized access of your data. This may require us to ask you certain questions to confirm your identity or require you to provide state-issued identification. Requests to exercise these rights may be granted in whole, in part, or not at all, depending on the scope and nature of the request and applicable law. Where required by applicable law, we will notify you if we reject your request and notify you of the reasons we are unable to honor your request. 

Right to Know and Access Information: You may access information we maintain about you using the methods provided below. If we grant your request, we will provide you with a copy of the PII we maintain about you in the ordinary course of business. This may include what PII we collect, use, or disclose about you. We may not fulfill some or all of your request to access as permitted by applicable law. 

Deletion of Information: You may request that we delete your PII. Depending on the scope of your request, we may refrain from granting your request, as permitted by applicable law. For example, we may be legally required to retain your information in ours business records. You may submit a deletion request using the methods provided below. 

We shall not discriminate against you for exercising any of your above rights. 

You may designate an authorized agent to make a request to exercise your rights on your behalf.   For your protection, we reserve the right to deny any request from an agent who does not submit proof that they have been authorized to act on your behalf.   

6. Do you disclose the PII you collect to Third-Parties?   

Yes, this is set out at Section 4 of the Policy. 

7. Does our website allow third party behavioural tracking?   

We do allow third-party behavioural tracking for Data Analysis and Optimisation as set out in Section 3 above. By default, this is done on the basis of aggregated or anonymised data   

8. COPPA (Children Online Privacy Protection Act)   

When it comes to the collection of PII from children under 13, the Children’s Online Privacy Protection Act (“COPPA”) puts parents in control. The Federal Trade Commission, the United States of America’s consumer protection agency, enforces the COPPA Rule which spells out what operators of websites and online services must do to protect children’s privacy and safety online.   

In compliance with the provisions of COPPA, we do not specifically market our products to children under the age of 13.   

Fair Information Practices Principles  
The Fair Information Practices Principles form the backbone of privacy law in the United States of America and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect PII.   

In order to be in line with the Fair Information Practices Principles, should a data breach occur we will notify the affected parties of such data breach via email within seven business days of such data breach occurring.   

We also agree to the Individual Redress Principle which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.   

9. CAN-SPAM Act  

The CAN-SPAM Act is a law that:   

• sets the rules for commercial email;  

• establishes requirements for commercial messages;  

• gives recipients the right to have emails stopped from being sent to them; and  

• spells out tough penalties for violations.  

To be in accordance with the CAN-SPAM Act we agree to the following:  

• we will NOT use false or misleading subject lines or email addresses in any communications with you;  

• in the event that our message to you is an advertisement, we will identify the message as an advertisement in some reasonable way;  

• we will include the physical address of our business or site headquarters in all communications with you; we will monitor third party email marketing services for compliance with the CAN-SPAM Act, if such third party email marketing service is used;  

• we will honour opt-out/unsubscribe requests quickly; and we will allow users to unsubscribe by using the link at the bottom of each email.  
   

If at any time you would like to unsubscribe from receiving future emails from us, you can email us at [email protected] and we will promptly remove you from ALL correspondence.