rojiRoji films Inc.
Privacy notice
Roji films Inc. 4388 Rue Saint-Denis, Suite 200 #301, Montreal, Quebec H2J 2L1, Canada [email protected]
Last updated: 24 September 2026
Roji films Inc. ("Roji", "we") operates rojiresearch.com and the Roji beta programme. This notice says what personal information we collect, how and why, where it is kept, how long we keep it, and what you can ask us to do with it. It is written to meet Quebec's Act respecting the protection of personal information in the private sector, as amended by Law 25, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). If you write to us from the European Union or the United Kingdom, we will handle your requests on the same terms. How we manage personal information inside the company is described in our governance policy.
Person in charge of the protection of personal information
Rabia Rahou, President, Roji films Inc. [email protected], or the postal address above. Write to this person for any question, request or complaint about your personal information or this notice.
How we collect it
We collect personal information in three ways only: from what you type into the studio registration form, from what our server records when you visit the site or submit the form, and from a Roji beta build if you turn diagnostics on or send a bug report. We do not buy personal information and we do not collect it from other sources.
Between July and September 2026 we also wrote to a number of artists at the professional email address they publish on their portfolio pages. That campaign has ended. We have deleted the profiles we gathered for it, and we keep only a record of each message sent (its date, its subject, where the address was published, and the address in a form that cannot be read back), to show that we complied with Canada's Anti-Spam Legislation. We delete that record in September 2029.
What we collect, and why
1. When you register your studio
We collect what you type in the form: your studio's name and size band, your name, your role, your work email address, the country where the studio is based, the shows, films or games you choose to mention, the systems, software and render engines you work with, and any notes you add. We record that you ticked the consent box.
Our server also records, with the submission: the approximate location Cloudflare derives from your IP address (country, region and time zone), your browser language, the page you submitted from and the page that referred you. We do not store your IP address or your browser's identification string with a registration. To stop the form from being used to flood inboxes, we count submissions per network address for a short time using a one-way fingerprint of that address, never the address itself, and delete the count within two days.
We use this to decide who joins the beta, to plan a test with you, to contact you about it, and to keep proof of your consent. A person, not a program, decides who joins. A copy of each registration is emailed to us so we can review it.
Registration is a double opt-in: we email you a link and a code, and nothing is confirmed until you use them. The link and code are stored only as hashes. An unconfirmed registration is deleted automatically when its link expires, after seven days.
2. When you visit the site
Our server records each page view: the country derived from your IP address, the page and its title, the referring page, your browser language, screen and window size and pixel density, whether the page was visible and how long it was open, and a score that estimates whether the visit was automated. A visit identifier, placed in the page by our server, links the events of one page view. We do not store your IP address, your city or region, your network operator or your browser's identification string.
We use this to understand how the site is read, to keep automated traffic out of our counts, and to check that the site works. The site sets no cookies and stores nothing on your device.
3. When you run a Roji beta build
If you consent inside the application, the build sends diagnostics: your beta user name and studio, a hashed installation identifier, a session identifier, the consent version and time, active and idle time, the country derived from your IP address, operating system, CPU architecture, memory band, GPU model and driver, error categories, crash and render-success flags, and the technical payload of the event. If you send a bug report, it carries what you write plus any screenshot and context you agree to attach.
We use this to find and fix faults, to prioritise them, and to tell you when a fix ships. Diagnostics are off until you turn them on. You can refuse them, or turn them off later, and keep using the build.
Location
We work out your approximate location from your IP address: the country only for site visits and diagnostics, and the country and region with a registration. We do not store the city, and we do not use GPS or your precise position. We use location only to understand where our readers and testers are and to plan tests across time zones.
What we do not do
We do not sell personal information. We do not use it for advertising. We do not build profiles of you, and we make no decision about you based only on automated processing. The automated-visit score is used only to filter our statistics.
Our basis for using it
For the registration form, diagnostics and bug reports: your consent, given when you tick the box on the form, when you turn diagnostics on in the application, or when you send a report or write to us. You can withdraw consent at any time, as described below. Withdrawing does not undo what we did before, but we stop from then on.
For site visit records: we do not ask for separate consent. We tell you about them here, record nothing that locates you beyond your country, collect only what we need to run and improve the site, and keep them for a limited time. You can ask us to delete the records about you.
We also keep records where a law requires it, such as proof of consent for commercial email under Canada's Anti-Spam Legislation (CASL).
Who else sees it
Within Roji, only the person in charge named above has access. We use three suppliers, which process data only to provide their service to us:
- Cloudflare, Inc. hosts the site and the database behind it, and derives the approximate location from your IP address.
- Resend (Plus Five Five, Inc.) sends our email.
- Zoho Corporation hosts our mailboxes, which receive the copy of each registration and your messages to us.
All three are based in the United States, and your information may be stored or processed there, outside Quebec and outside Canada, where it may be accessible to authorities under local law. Before communicating personal information outside Quebec, we assessed, for each supplier, the sensitivity of the information, why it is needed, the protection it receives and the legal framework where it goes, and we concluded that it is adequately protected. We review that assessment when a supplier or what we send it changes. We send each supplier only what its service needs, and each is bound by its data processing terms with us.
We will also disclose information if a law or a court requires it.
How long we keep it
- Unconfirmed registrations: deleted when the confirmation link expires, after 7 days.
- Confirmed registrations: for as long as the beta programme runs, and up to 24 months after the last email between you and us.
- Site visit records: 12 months.
- Application diagnostics and bug reports: 24 months.
- Records of the emails we send, including proof of consent: 3 years.
- Counts used to limit abuse of the form: at most 2 days.
- The list of addresses that asked not to receive our emails: for as long as we send email, so that we never write to them again.
A job deletes records automatically every day once their period has passed.
What you can ask for
- To see the personal information we hold about you, where it came from, and who has access to it.
- To correct anything inaccurate, incomplete or out of date.
- To withdraw consent, which stops the emails and the diagnostics.
- To have it deleted, when it is no longer needed for the purpose you gave it for, or was collected without your consent or against the law.
- To stop publication or de-index: if we ever publish information about you, you can ask us to stop or to remove a link to it.
- To receive it, for information you gave us, in a structured, commonly used technical format, or to have it sent to another organisation.
- To complain, to us first, then to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or the Office of the Privacy Commissioner of Canada (priv.gc.ca). In the European Union or the United Kingdom, you can also complain to your local data protection authority.
Write to [email protected]. Requests are free. We answer in writing within 30 days of receiving your request. If we refuse, we say why and tell you how to challenge the refusal. We may ask you to confirm your identity before we act, so that we do not hand your information to someone else.
Email from us
We send commercial email, such as news about the beta or about Roji, only to people who have given express consent and confirmed it through the double opt-in. Every such email identifies Roji films Inc., gives our postal address and a way to reach us, and has a working way to unsubscribe. We act on an unsubscribe request without delay, and always within 10 business days, as CASL requires. Unsubscribing stops our emails; if you also want your registration deleted, write to [email protected]. Messages you need for a test you agreed to, or replies to you, may still be sent.
Keeping it safe
Access to the database is limited to the person in charge, over authenticated connections. Registration tokens and confirmation codes are stored as hashes, never in the clear. Installation identifiers are hashed. Bug reports and screenshots are collected only through a flow you agree to first. No system is perfectly secure, and we cannot promise that information will never be exposed.
If a confidentiality incident happens, we act to reduce the risk of harm and we record it in our register of incidents. If it presents a risk of serious injury, we notify the Commission d'accès à l'information, the people affected and, where PIPEDA applies, the Office of the Privacy Commissioner of Canada.
Children
The site and the beta are for people working in studios. We do not collect personal information from anyone under 14 without the consent of a parent or tutor. If we learn that we have, we delete it.
Changes
If we change this notice we will update the date at the top and, when the change matters, tell registered beta participants by email before it applies.