Skip to main content

Privacy Policy

Last updated: 2026-05-13 · v1.0.0

Important Notice About Language

The English version of this Privacy Policy is the single authoritative document. Translations are for convenience only. In any inconsistency, the English text governs.

1. Introduction

AIOCANA Technologies Inc. (“we,” “us,” “our”) is committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5), Quebec’s Act respecting the protection of personal information in the private sector (CQLR c. P-39.1, “Law 25”), and applicable federal and provincial privacy legislation. This Privacy Policy explains how we collect, use, disclose, retain, and protect your personal information when you use the AIOCANA Platform.

2. Information We Collect

We collect the following categories of personal information:

  • Account Information: Name, email address, company name, phone number, and business details provided during registration, intake, or subscription.
  • Website Content: Text, images, videos, configurations, and other content you provide or upload for your website.
  • Customer Data: End-user information processed through your website, including booking data, contact form submissions, AIBOT chat interactions, and analytics events.
  • Technical Data: IP address, browser type, device information, access timestamps, and usage metadata collected automatically through our Platform.
  • Payment Information: Payment method details are processed exclusively by Stripe, our third-party payment processor. AIOCANA does not store full credit card numbers.
  • Communication Records: Email correspondence, chat logs, intake form submissions, and support tickets.

3. Data Storage & Residency

AIOCANA Technologies Inc. is registered in Ottawa, Ontario, Canada. All personal data is stored exclusively within Canada:

  • Primary storage: Montreal, Quebec, Canada (GCP northamerica-northeast1)
  • Disaster recovery backup: Toronto, Ontario, Canada (GCP northamerica-northeast2)

We do not transfer personal data outside of Canada without your express written consent, except where required by law or court order.

4. Use of Artificial Intelligence

Our Platform uses artificial intelligence (AI) technologies, including large language models and machine learning pipelines, to provide the following functions:

  • Generate website content, designs, layouts, and SEO recommendations;
  • Power the AIBOT Q&A assistant that answers visitor questions about your website content;
  • Draft and send automated communications via email, PWA push notification, or SMS;
  • Analyze intake form submissions and generate architecture proposals;
  • Process booking requests, reminders, and follow-ups;
  • Generate operations reports and business insights.

Important: AI-generated content is intended as a starting point for human review. You are responsible for reviewing all AI-generated content before publication. AI-generated communications may contain errors or inaccuracies. By using the Platform, you acknowledge and accept this risk. See our Terms of Service for complete limitations of liability related to AI.

AI processing of personal information occurs on Google Cloud infrastructure located exclusively in Canada (Montreal, Quebec, Canada (GCP northamerica-northeast1)). We do not use your personal data to train third-party AI models.

5. How We Use Your Information

We use personal information for the following purposes:

  • To provide, maintain, and improve the AIOCANA Platform;
  • To process your subscription payments and manage your account;
  • To generate, host, and serve your website and related services;
  • To send transactional communications (account notifications, billing receipts, service updates);
  • To send marketing communications (with your express consent, unsubscribe anytime);
  • To provide customer support and respond to inquiries;
  • To comply with legal obligations and enforce our Terms of Service;
  • To detect, prevent, and address fraud, security, or technical issues.

We do not sell, rent, or trade your personal information to third parties.

6. Data Retention & Deletion

6.1 Retention Periods. We retain personal information only as long as necessary to fulfill the purposes for which it was collected, or as required by law:

  • Account data: retained for the duration of your active subscription plus 90 days after cancellation;
  • Website content: retained for 60 days after subscription cancellation, then permanently deleted;
  • Booking and transaction records: retained for 7 years (Canada Revenue Agency requirement);
  • Consent records: retained for the duration of the consent period plus 3 years (CASL requirement);
  • Marketing communication lists: retained until you unsubscribe.

6.2 Deletion Request. You may request deletion of your personal information by contacting privacy@aiocana.com. We will respond within 30 days. Deletion is subject to legal retention obligations (e.g., tax records, court orders). After deletion, residual copies may persist in encrypted backups for up to 90 days.

7. Disclosure to Third Parties

We may share personal information with the following categories of third parties:

  • Service Providers: Google Cloud Platform (hosting, AI model serving), Stripe (payment processing), Zoho (email delivery), Plausible (analytics), and similar infrastructure providers. These providers are contractually bound to process data only on our instructions.
  • Legal Obligations: We may disclose information if required by law, court order, or governmental authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of the transaction.

We do not share your email address or contact information with third parties for their marketing purposes without your explicit express consent.

8. Your Rights Under Canadian Privacy Law

Under PIPEDA, Quebec Law 25, and applicable provincial legislation, you have the following rights:

  • Access: Request a copy of your personal information we hold.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal information (subject to legal retention obligations).
  • Withdraw Consent: Withdraw consent at any time, subject to legal or contractual restrictions.
  • Data Portability: Request your data in a structured, commonly used format.
  • Complaint: File a complaint with the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec.

To exercise any of these rights, contact our Privacy Officer at privacy@aiocana.com. We will respond within 30 days as required by law. We may require identity verification before processing your request.

9. Cookies & Tracking Technologies

AIOCANA uses Plausible Analytics, a privacy-first, cookie-less analytics platform that does not track individual users across the web. We do not use third-party advertising cookies, tracking pixels, or behavioral profiling technologies. Essential session cookies may be used for authentication, security, and Platform functionality. No cookie consent banner is required because we do not deploy non-essential cookies.

10. Security Safeguards

We implement appropriate technical and organizational measures to protect personal information, including: encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, multi-factor authentication, regular security assessments, intrusion detection, and secure development practices. However, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

11. Contact & Complaints

Privacy Officer — AIOCANA Technologies Inc.
Ottawa, Ontario, Canada
privacy@aiocana.com

You also have the right to file a complaint with:

  • Office of the Privacy Commissioner of Canada — www.priv.gc.ca
  • Commission d’accès à l’information du Québec — www.cai.gouv.qc.ca

Version: v1.0.0 — Effective: 2026-05-01 — English is the single authoritative language.