Simple plans, no surprises
Two capabilities you can subscribe to separately or together: consent management (banner + legal proof) and the ARCO+ module to respond to data-subject requests.
Cookie banner, auto-blocking and legal proof. Measured by new consents.
Pay-as-you-go
For microsites and occasional use
$3.90 per 1,000 consents
No minimum, no commitment: you pay only for new consents. The card is charged each time accumulated usage reaches $30. A card is required at sign-up.
- ✓ Cookie banner + auto-blocking
- ✓ HMAC legal proof
- ✓ Google Consent Mode v2
- ✓ Email notification on withdrawal
- ✓ 1 domain
- ✓ 1 user
- ✓ 12-month proof retention
Starter
For small, steady businesses
Flat rate of $15 + tax / month up to 12,000 consents/month; beyond that, $1.80 + tax per 1,000 additional consents. A card is required at sign-up.
- ✓ 1 domain
- ✓ 1 user
- ✓ Banner + auto-blocking + HMAC proof
- ✓ Google Consent Mode v2
- ✓ Email notification on withdrawal
- ✓ 12-month proof retention
Pro
For businesses and e-commerce
Includes 50,000 consents/month; then $1.20 + tax per 1,000 additional consents.
- ✓ 3 domains
- ✓ Own privacy portal (yourcompany.privacity.ca)
- ✓ Published privacy policy with change history
- ✓ Multiple users (up to 10)
- ✓ Everything in Starter
- ✓ Consent SDK for forms
- ✓ Multi-language
- ✓ Banner A/B testing
- ✓ Microsoft UET + GTM
- ✓ Priority support
- ✓ 3-year proof retention
A complete request management system
The tool a privacy officer or compliance team needs to receive, process and respond to every data-subject request on time and with evidence. It adds to any consent plan, or is purchased on its own.
It is management software, not an external DPO service: that role stays with the organization.
ARCO+
The tool the privacy officer needs
A case file per request — access, correction, and withdrawal of consent, plus rectification, deletion and portability workflows — with its status flow from start to finish: intake, identity verification, assessment, reasoned resolution and notification. PIPEDA response deadlines (30 days, extendable) with alerts before the due date and an auditable trail to respond to the authority.
The whole request cycle, in one place
- ✓ Log and inbox of data-subject requests
- ✓ Data-subject identity verification
- ✓ Legal deadlines with alerts before the due date
- ✓ Resolution per right, with legal basis
- ✓ Notification to the data subject: acknowledgment, extension and response
- ✓ Auditable trail and full history
- ✓ Own privacy portal, entry point to the dashboard
- ✓ Published and versioned privacy policy
- ✓ Multiple users (up to 10)
Purchased as a separate module
The tools the team uses every day
Dashboard with statistics
Requests received, resolved and in progress, deadline compliance and load per owner, at a glance.
Pre-built responses
Templates per right type to respond fast and consistently, without starting from scratch.
Automatic responses
Acknowledgment and routine steps the system sends on its own, per the rules you define.
Case routing
Assigns and routes each request to the right owner or team, with full traceability.
Card required on all plans (Square). Pro and ARCO+ offer annual billing (~2 months free).
Your own privacy portal
A microsite at yourcompany.privacity.ca where the privacy policy is published and kept up to date — with its change history — and which serves as the entry point to the ARCO+ module: there, users submit their data-subject requests and they are handled from the dashboard.
A central hub for publishing the policy
A single, stable address for the privacy policy, ready to link from the website, emails, printed materials, social media and wherever needed. One place, always up to date, that everyone points to.
Trust for users
A public, clear and orderly space where they see the policy and exercise their rights. Transparency that shows.
Zero systems to maintain
We operate and secure the portal. The company doesn't stand up new software or have to safeguard the privacy of that data.
Secure and compliant environment
Specialized infrastructure that complies rigorously with PIPEDA, in an environment built to protect personal data.
A signal of commitment
Running a specialized service confirms to data subjects — and to the Office of the Privacy Commissioner of Canada — that the law and respect for their rights are taken seriously.
Policy always current
Published, versioned and with change history, permanently accessible as the law requires.
Single door to ARCO+
From the same portal, data subjects submit their requests and track them; they are resolved from the dashboard.
Professional services, purchased separately
Specialized work that can be added to any plan to accelerate and strengthen compliance.
Personal data inventory
We examine the site with a human inspector and artificial intelligence, and include an interview with whoever administers the site, to identify what personal data is collected, where, for what purpose and under what legal basis. Includes setting up the ARCO+ module to make it operational.
Plugin installation
We install and get the banner running on the site — WordPress, Joomla, Moodle, Magento and any platform — without touching a line of code.
Custom-site installation
For sites without a CMS or with custom code: we integrate Privacity directly into the code, adapting to the architecture.
Privacy policy drafting
We draft the privacy policy with the help of artificial intelligence, taking into account the business context and services. Ready to publish on the portal.
Frequently asked questions
What counts as a consent?
A consent is counted when a visitor makes or changes a decision in the banner. A returning visitor whose consent is still valid is not recounted. As a reference, it usually equals 25-35% of monthly visits.
What is the ARCO+ module and do I need a consent plan to use it?
ARCO+ is the capability to log and respond to data-subject requests — access, correction, and withdrawal of consent, plus rectification, deletion and portability workflows — within PIPEDA response deadlines (30 days, extendable). It is independent: it can be added to a consent plan (Pay-as-you-go, Starter or Pro) or purchased on its own, without a cookie banner.
How is it billed?
Billing depends on the plan. On Pay-as-you-go the card is charged each time accumulated usage reaches $30. On Starter and Pro billing is monthly. On all plans a card is kept on file at sign-up.
Can I change plans at any time?
Yes. You can upgrade or downgrade at any time. The change applies on the next billing cycle.
Does it work with any website?
Yes. Privacity works with WordPress, WooCommerce, Shopify, Moodle, custom sites and any platform that lets you add a script to the HTML.
Do consent records serve as legal proof?
Each consent is recorded with an HMAC-SHA256 cryptographic token, timestamp and context. This constitutes verifiable evidence supporting PIPEDA's accountability and meaningful-consent principles.