Privacy Policy

1. Who we are and how to reach us

Every-Day Computers Inc. is a registered Canadian telecommunications carrier headquartered at Unit B, 4836 McConnell Avenue, Terrace, British Columbia V8G 5M4.

Our Chief Privacy Officer is responsible for compliance with this policy. You can reach them at privacy@evcominc.com or by mail at the address above. We will acknowledge your message within 5 business days and respond substantively within 30 days.

2. Information we collect

To provide mobile and internet service, we collect:

• Identity: full name, date of birth, government ID details (for credit verification where required).
• Contact: mailing address, billing or service-area address, phone number, email.
• Account: account password, security questions, customer reference number, signed contracts.
• Financial: payment method, billing history, credit-check result. Credit card numbers are processed by Stripe and never stored on our servers.
• Device: IMEI, IMSI, ICCID, eSIM EID, device make and model.
• Network: IP addresses, byte counts, attach/detach events, data-session records and cell-site ID.
• Location: approximate network-derived location from the serving cell site where needed to operate or troubleshoot the data service.
• Support: transcripts of interactions with our support team, voicemails to our support line, emails you send us.

3. Why we collect it

• To establish service and verify identity (SIM activation, eSIM profile generation).
• To bill you and detect fraud (credit, charge-backs, usage metering).
• To authenticate your device and route and complete mobile-data sessions.
• To comply with lawful court orders and production orders under the Criminal Code.
• To respond to customer support requests.
• With your explicit opt-in only: to send you marketing offers and service updates.

4. Consent

When you sign up for service, you consent to the collection and use described above. You can withdraw consent for optional uses (marketing, telemetry) at any time from your portal or by emailing privacy@evcominc.com. Withdrawing consent for required uses (billing and network operation) is not possible without terminating service.

5. Third parties we share with

We share only what is necessary for the partner to do its job. We do not sell personal information.

• Stripe, Inc. (Canada / USA) — payment processing; receives payment card details, billing address, amount, and subscription metadata.
• Google LLC (Firebase) (USA) — account authentication and operational databases; receives your email, account password hash, and customer records.
• Flexgroups / SwiftSim (Germany / global) — remote SIM provisioning; receives ICCID, IMSI, eSIM profile metadata and K/OPc keys (which are never exposed to us once generated there).
• Canadian law enforcement — we comply with properly authorized production orders (s.487 Criminal Code) and warrants. We publish an annual transparency report.
• Credit bureaus (Equifax, TransUnion) — we perform a soft credit check on signup and may report delinquent accounts.

Some of these partners store or process information in the United States, the European Union, or elsewhere. Information stored outside Canada is subject to the laws of that country, which may include lawful access by foreign governments.

6. Retention

• Billing records and invoices: 7 years, to meet Canada Revenue Agency requirements.
• Mobile-data session and usage records: 13 months for billing and service disputes; aggregated after 13 months.
• Network signalling logs (registration, bearer setup): 30 days.
• Packet-level traffic: not retained; transit only.
• Customer support transcripts: 2 years.
• Account information: retained while your account is active, plus 24 months after cancellation, after which we delete or anonymize.

7. Your rights under PIPEDA

You have the right to:

• Access a copy of the personal information we hold about you.
• Correct information that is inaccurate or out of date.
• Challenge compliance with this policy, including by filing a complaint with our Chief Privacy Officer and, if unsatisfied, the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.
• Withdraw consent for optional data uses (marketing, analytics).
• Delete your account and request deletion of personal information that is not subject to a regulatory retention obligation.

To exercise any of these rights, email privacy@evcominc.com. We will verify your identity before acting on the request.

8. Security

We protect your information with:

• Encrypted transmission (TLS 1.2+) between your device, our core network, and our partners.
• Mutual-TLS authentication to our SM-DP+ (eSIM) platform.
• Hardened firewalls (default-drop nftables on all core hosts), fail2ban, principle of least privilege.
• Authenticated database access (MySQL and MongoDB on our HSS and S-CSCF require credentials).
• Daily encrypted backups of customer and network state.
• Physical security: core servers are located in a locked facility in Terrace with controlled access.

No system is perfectly secure. If we detect a breach that affects your personal information, we will notify you directly and file a report with the OPC as required by PIPEDA.

9. Minors and family plans

Ev-Com is not presently accepting child-line activations through self-service and does not presently offer portal location sharing. Any future child-line request requires operator review by Ev-Com and confirmation that the service is available. This section states the protections that will apply before Ev-Com activates any such service.

9.1 Consent

• Only a parent or legal guardian may request a child line. A request does not activate service.
• For children 13 and older, we also require that the child has been informed of this service and consents to its terms. The primary account holder confirms this at activation on the child's behalf.
• Children under 13 cannot provide valid consent under Canadian law; the parent/guardian consents for them. We collect only the minimum data needed to operate the line (name, age, MSISDN, IMSI, approximate location if opted in, usage records for billing).
• Consent may be withdrawn at any time by contacting Ev-Com. A child 13+ may also contact our Chief Privacy Officer directly to request withdrawal of their own consent.

9.2 What we collect about a minor

• Name, age, and parent/guardian identity — used only to operate the service and comply with law.
• SIM identifiers (ICCID/EID), subscriber identifier (IMSI), and device identifier (IMEI) — necessary to authenticate the device and route data.
• Usage records (data volume and session metadata) — for billing and network operation. Retention matches the general schedule in section 6.
• Location information — only when location sharing is expressly enabled by the parent. See 9.3 below.

We do not profile minors for advertising, sell their data, or use it for any purpose not listed here.

9.3 Location sharing for child lines

Portal location sharing is not presently available. Ev-Com will not collect or retain location for a customer-facing child-location feature unless that feature is launched, the policy is updated, and express consent is obtained. If such a feature is later offered:

• Location is derived from cell-site registration (which LTE tower the phone is attached to). This is accurate to roughly 1–5 km in rural areas and a few hundred metres in town centres. It is not GPS-precise.
• Any stated retention period will be published and tested before launch.
• Current Ev-Com mobile service is data-only and cannot place voice calls, including 9-1-1 calls. A parent or guardian must provide another working means of reaching emergency services.
• The primary account holder will be notified when location sharing is enabled on a child line.
• A child 13+ may withdraw location-sharing consent by contacting our Chief Privacy Officer.

We recommend parents use purpose-built parental-control apps (Google Family Link, Apple Screen Time / Find My) for precise GPS tracking, internet filtering, and screen-time controls. Those run on the device itself and give far more detail than a cell-site lookup.

9.4 Transitioning from a child line

When a child reaches the age of majority in British Columbia (19), or with the primary account holder's consent at any earlier age, the child line can be transferred to the child's own separate Ev-Com account. At that point the child becomes the primary account holder for their own line and this "Minors and family plans" section no longer applies to them.

9.5 Complaints

Concerns about our handling of a minor's information may be directed to our Chief Privacy Officer at privacy@evcominc.com. If unresolved, you may escalate to the Office of the Privacy Commissioner of Canada (1-800-282-1376, priv.gc.ca).

10. Cookies and site telemetry

Our website uses cookies to keep you logged in and remember preferences. We use privacy-respecting analytics to understand traffic patterns (aggregated, not tied to your identity). We do not use cross-site ad trackers.

11. Marketing communications

We follow Canada's Anti-Spam Legislation (CASL). We only send marketing email after you give us express consent during signup or later through the portal. Every marketing message includes an unsubscribe link. Transactional messages such as billing confirmations, service-outage notices and authentication codes are considered business-critical and may be sent without separate opt-in.

12. Changes to this policy

We will give 30 days' written notice (email and portal announcement) before making material changes to this policy. Minor corrections (typos, broken links) may be made without notice. The "last updated" date at the top always reflects the current version.