Privacy Policy

Effective Date: December 20, 2025

Last Updated: December 20, 2025

This Privacy Policy describes how DRIUS, operated by 1001439781 Ontario Inc. (“DRIUS”, “we”, “us”, or “our”), collects, uses, and protects information when you access or use our website and services (the “Service”).

By using DRIUS, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Introduction

DRIUS is a cloud-based software platform designed to help organizations back up, monitor, and manage identity configuration data from supported identity providers.

We are committed to protecting your privacy and handling your data responsibly.

2. Information We Collect

a) Account Information

When you create an account, we may collect:

Name
Email address
Company name
Authentication credentials

Payment information is handled securely by third-party payment processors (e.g., Stripe). DRIUS does not store full credit card details.

b) Configuration Data from Identity Providers

When you connect an identity provider (such as Okta), DRIUS may access and store configuration metadata, including:

Users (metadata only)
Groups
Policies and rules
Application assignments
Directory and identity configuration settings

Configuration data may include identifiers such as name, username, or email address.

DRIUS does NOT access or store:

Passwords
MFA secrets
End-user credentials
Authentication session data

c) Usage and Technical Data

We may collect limited technical information such as:

Log data
API request metadata
IP address
Browser or device type
Error diagnostics

This data is used solely for security, monitoring, and service improvement, and sensitive values are minimized or redacted where feasible.

3. How We Use Information

We use collected information to:

Provide backup, drift detection, and restore features
Authenticate and manage accounts
Maintain platform security
Improve service performance and reliability
Communicate service updates and support information
Enforce plan limits and prevent abuse

4. Data Storage and Retention

Data retention varies by subscription plan and configuration.

Configuration data is retained only for the duration defined by your plan
Data may be deleted after account cancellation or expiration of retention periods
Customers are responsible for exporting data prior to cancellation, where applicable
You may request deletion or export at any time, subject to legal obligations

5. Data Sharing

DRIUS does not sell customer data.

We may share data only with:

Cloud infrastructure providers (e.g., hosting and storage services)
Payment processors
Service providers necessary to operate the platform (e.g., monitoring, support)
Legal authorities, if required by law

A current list of subprocessors is available upon request at [email protected].

6. Security Measures

We implement reasonable administrative, technical, and organizational safeguards, including:

Encryption in transit
Encryption at rest
Access controls
Monitoring and logging

No method of transmission or storage is 100% secure, but we continually improve our protections.

Additional security information is available on our Security page.

7. International Users

DRIUS is operated from Canada. Your data may be processed or stored in Canada or other jurisdictions where our infrastructure or subprocessors operate.

We follow applicable privacy principles under Canadian PIPEDA and generally accepted international privacy standards.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Request access to your data
Request correction of inaccurate data
Request deletion of data (subject to retention requirements)

Requests can be made by contacting [email protected].

9. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service constitutes acceptance of the updated policy.

10. Contact Information

DRIUS

Operated by 1001439781 Ontario Inc.

Website: https://drius.io

Email: [email protected]

Privacy Contact: [email protected]