Privacy Policy

This Privacy Policy explains what AI HALO ("we", "us") collects, why, and your rights. We collect the minimum a working service needs, in line with PIPEDA (Canada's federal privacy law) and, where it applies, comparable rules. Operated as a sole proprietorship in Alberta, Canada; reach our privacy contact at privacy@aihalo.ca.

1. What we collect

Free reading: the website URL you submit, the email you provide, and the public-web signals our audit reads about that site. Purchases: your name, email, business/website and order details. Payments: card numbers never touch our servers — Stripe processes payments and we receive only a token and status. Usage: first-party, cookie-light product analytics on our own domain, plus basic server logs (IP, user-agent) for security and reliability. Engagement access: for white-glove work, any hosting/DNS access you choose to grant, used only for the agreed work and never stored in plaintext.

2. How we use it

To produce your reading, deliver your engagement, take payment, provide support, keep the Service secure, meet legal/tax obligations, and — where the law allows — to write to you about your own results. Every marketing email identifies us, includes our mailing address, and carries a working one-click unsubscribe (CASL). We do not sell or rent your information. Ever.

3. Cookies & tracking

We use a small number of first-party cookies/local storage for essentials (your language choice, an admin/customer session where applicable) and privacy-respecting, first-party analytics served from our own domain. We do not use third-party advertising cookies or cross-site ad trackers. Email links may include a per-recipient click/open marker so we can measure our own outreach; you can ignore or unsubscribe at any time.

4. Who we share with (processors)

We rely on a short list of service providers who process data on our behalf under their own terms: Cloudflare (hosting, storage, security), Stripe (payments), and our email provider (transactional + outreach delivery). We share only what each needs to do its job, and never for their own marketing.

5. Where it lives & how long

Data is stored on Cloudflare infrastructure and with Stripe (payments), which may process data in Canada, the United States or other regions under appropriate safeguards. We keep personal data only as long as needed to serve you and to satisfy legal/tax record-keeping, then delete or anonymise it.

6. Security

We use encryption in transit, access controls, secret management, and the principle of least privilege. No system is perfectly secure, but we work to protect your information and to fix issues promptly.

7. Your rights

You can ask us any time what we hold about you, ask us to correct it, ask us to delete it, or withdraw consent to marketing — one email to privacy@aihalo.ca and it's done within 30 days (except records the law requires us to keep). You may also contact the Office of the Privacy Commissioner of Canada.

8. Children

The Service is for businesses and is not directed to children; we do not knowingly collect data from anyone under 16.

9. Changes

We may update this policy; material changes take effect when posted here with a new "last updated" date.