Last updated: July 31, 2026
This Privacy Policy explains how Ruby Industries Inc. (operating as CityViz) (“CityViz”, “we”, “us”, or “our”) collects, uses, discloses, retains, and protects personal information in connection with the CityViz data platform, including client-specific data portals, administrative interfaces, embedded widgets, Report Studio, email notification services, and related websites and services (collectively, the “Platform”).
A client organization may provide additional privacy notices for its own CityViz instance or for a particular form, dataset, program, or service. Those notices should be read together with this Privacy Policy. A separate privacy policy applies to the Supply Chain Analysis intake form.
CityViz provides the Platform to municipalities, economic development organizations, regional partnerships, and other client organizations.
Depending on the circumstances:
Questions about information submitted to a specific client program may need to be directed to the Client Organization. CityViz will assist the Client Organization in responding where appropriate.
The information we collect depends on how you use the Platform.
When you subscribe to notifications about data updates or other requested Platform notices, we collect:
Report Studio requires an email address. You may also choose to provide:
We also process the report selections, parameters, files, and delivery information required to generate, provide, troubleshoot, or support the requested output.
For users who receive an account or administrative access, we may collect:
We do not store passwords in plain text.
When you contact CityViz or a Client Organization through the Platform, we may collect your contact information and the contents of your inquiry, including any files or information you choose to provide.
When you use the Platform, CityViz and its service providers may automatically collect information such as:
This information is used to operate, secure, diagnose, and improve the Platform.
A Client Organization may upload, configure, or collect additional information through its CityViz instance. The Client Organization is responsible for identifying the purposes for that collection and for providing any additional notice or obtaining any consent required by applicable law.
The Platform may use cookies, local storage, and similar technologies.
Essential technologies support functions such as session management, authentication, security, load balancing, and preservation of user preferences. Disabling them may prevent parts of the Platform from working correctly.
CityViz uses Google Analytics to understand how the Platform is used, evaluate performance, identify usability issues, and improve services. Google Analytics may process device and browser information, online identifiers, usage events, and approximate location information derived from an IP address.
Google Analytics is intended to measure Platform usage, not the content you enter into forms, reports, or free-text fields. CityViz does not use Google Analytics data to make decisions that produce legal or similarly significant effects about individuals.
You may limit analytics cookies through available cookie controls, browser settings, or compatible browser privacy tools. Some Client Organizations may configure analytics or consent controls differently on their own instances.
CityViz may use personal information to:
CityViz will not use personal information for a materially different purpose without providing appropriate notice and obtaining consent where required.
Where consent is required, CityViz or the applicable Client Organization will seek consent in a form appropriate to the sensitivity of the information and the reasonable expectations of the individual.
You may:
Withdrawing consent does not affect processing that occurred lawfully before withdrawal. CityViz may retain a minimal suppression record to ensure that an unsubscribe request continues to be respected.
CityViz does not treat a subscription to operational data-update notices as consent to unrelated marketing communications. Any commercial electronic messages will be managed in accordance with applicable anti-spam requirements.
CityViz does not sell or rent personal information.
We may disclose personal information to:
Service providers are permitted to use personal information only for the services they provide to CityViz or the applicable Client Organization and must protect it through contractual, technical, or organizational safeguards appropriate to the information.
CityViz seeks to host primary Platform data in Canada unless a client agreement or service configuration specifies otherwise. Some service providers, including analytics, email, security, and support providers, may process information in other provinces or countries.
When personal information is processed outside the jurisdiction where it was collected, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, or national-security authorities in accordance with those laws.
CityViz uses contractual and other safeguards designed to require service providers to protect personal information to a level appropriate to the information and applicable law.
CityViz retains personal information only for as long as reasonably necessary for the identified purposes, including service delivery, security, legal compliance, dispute resolution, and enforcement of agreements.
Retention may vary by information category and Client Organization configuration. In general:
When personal information is no longer required, CityViz deletes it, anonymizes it, or renders it inaccessible, subject to technical and legal limitations.
CityViz uses administrative, technical, and physical safeguards appropriate to the sensitivity, volume, format, and use of the information. Measures may include:
No system can guarantee absolute security. If a privacy or security incident occurs, CityViz will investigate, mitigate harm, maintain required records, and notify the affected Client Organization, individuals, regulators, or other parties where required by law or contract.
CityViz and Client Organizations take reasonable steps to keep personal information accurate, complete, and up to date for the purposes for which it is used.
Subject to applicable law, you may request:
CityViz may need to verify your identity before responding. Certain information may be withheld where permitted or required by law, including information that would reveal another person’s personal information, confidential commercial information, or security-sensitive details.
Where CityViz processes information solely on behalf of a Client Organization, we may direct your request to that organization or assist it in responding.
CityViz handles personal information in accordance with applicable Canadian privacy laws. Depending on the organization, jurisdiction, and activity, these may include the Personal Information Protection and Electronic Documents Act (PIPEDA), substantially similar provincial private-sector privacy laws, and provincial or territorial public-sector privacy laws that apply to a Client Organization.
You may raise a concern with CityViz’s Privacy Coordinator or with the Client Organization responsible for the relevant instance. CityViz will investigate privacy complaints and explain the outcome or next steps.
You may also have the right to complain to the Office of the Privacy Commissioner of Canada or the applicable provincial or territorial privacy commissioner.
Individuals in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction may have additional rights under local privacy law, including rights to object, restrict processing, request deletion, or receive portable data.
Where applicable, CityViz relies on an appropriate legal basis for processing, such as consent, performance of a contract, compliance with a legal obligation, or legitimate interests that are not overridden by the individual’s rights. International transfers will be handled using safeguards required by applicable law.
The Platform is intended for use by adults, businesses, public-sector organizations, and professionals. It is not directed to children, and CityViz does not knowingly collect personal information from children through Report Studio, administrative functions, or notification subscriptions.
If you believe a child has submitted personal information, contact us so that we can review and take appropriate action.
The Platform may contain links to or embedded content from third-party websites and services. Their privacy practices are governed by their own policies. CityViz is not responsible for the content or privacy practices of unaffiliated third parties.
CityViz may update this Privacy Policy to reflect changes in the Platform, service providers, legal requirements, or privacy practices. The updated policy will be posted with a revised “Last updated” date. Where required, CityViz or the applicable Client Organization will provide additional notice or obtain consent before a material new use of personal information.
For questions, privacy requests, or complaints concerning CityViz’s practices, contact:
Privacy Coordinator
Ruby Industries Inc. (o/a CityViz)
Email: privacy@cityviz.ca
For information controlled by a Client Organization, you may also contact the privacy or program contact identified on that organization’s CityViz instance or website.