Privacy
Policy
Who We Are
Silent Hero Technologies Inc. ("Silent Hero", "we", "us") operates an anonymous student safety reporting platform for schools. We are based in Toronto, Ontario, Canada.
Questions about this policy can be directed to: privacy@silenthero.ca
What Information We Collect
From Students
- Student number
- A password (hashed — we cannot recover it)
- Incident reports you submit, including description, incident type, urgency, and approximate time and location
- Messages you send through the anonymous messaging thread
We do not collect your name, email address, phone number, or any other identifying information. We never store your precise GPS location.
From School Administrators
- School name and board
- Administrator email address (used only for report notifications)
How We Use Your Information
We use the information collected to:
- Allow students to submit anonymous safety reports
- Deliver those reports to the appropriate school administrator
- Facilitate anonymous two-way messaging between students and administrators
- Send email notifications to administrators when new reports or messages are submitted
We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described in Section 5.
Anonymity
Silent Hero is designed so that school administrators cannot identify which student submitted a report. Your student number is never included in any report or message visible to your school.
The only parties who could theoretically link a student number to a report are Silent Hero staff with direct database access, and only in exceptional legal circumstances as described in Section 6.
Third-Party Services
Silent Hero uses the following third-party services to operate the platform:
- Amazon Web Services (AWS) — Canadian hosting infrastructure (ca-central-1, Montréal)
- Supabase — database and backend infrastructure, hosted on AWS ca-central-1
- Resend — email delivery for administrator notifications
- Netlify — web hosting for silenthero.ca marketing pages
- Vanta — continuous security and compliance monitoring
- Google Analytics — anonymous marketing site analytics (silenthero.ca only; not used inside the reporting app)
These services may process data as part of delivering the platform. We select providers with strong security and privacy practices. A current, live list of our subprocessors is maintained at trust.silenthero.ca.
Legal Disclosure
We may disclose information if required by law, court order, or where we believe in good faith that disclosure is necessary to prevent imminent harm to a person. We will notify affected users where legally permitted to do so.
Data Retention
Report and message data is retained for as long as the school remains an active Silent Hero customer. Upon school offboarding, data associated with that school will be deleted within 30 days unless retention is required by law.
Data Storage, Security, and Canadian Residency
All Silent Hero data is stored on Canadian servers hosted on AWS ca-central-1 (Montréal, Quebec), with replication across multiple availability zones within the Montréal region and continuous point-in-time recovery. Data is encrypted at rest (AES-256) and in transit (TLS 1.2 or higher). Student numbers and administrator passwords are stored as one-way, irreversible hashes. School data is fully isolated at the database layer through row-level security. Student data does not leave Canada.
We are committed to compliance with applicable Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA), Alberta's Protection of Privacy Act (POPA), Ontario's Municipal Freedom of Information and Protection of Privacy Act (MFIPPA), British Columbia's Personal Information Protection Act, and Quebec's Law 25, as each applies.
Silent Hero is enrolled with Vanta for continuous security monitoring and is pursuing SOC 2 attestation. Our current security posture, subprocessor list, and live compliance controls are publicly available at trust.silenthero.ca.
Your Rights
Students and administrators may request deletion of their data by contacting privacy@silenthero.ca. Student accounts can also be reset by a school administrator using the student number.
Changes to This Policy
We may update this policy as the platform evolves. Material changes will be communicated to school administrators by email. The current version will always be available at silenthero.ca/privacy.