Privacy Policy

Effective date: October 8, 2026

This Privacy Policy explains how Canada.id, operating under the Alberta registered trade name CANADA.ID (registration no. TN18562140), also written “Canada ID” (“Canada.id”, “we”, “us”, or “our”), collects, uses, shares, and protects personal information.

It applies to our website canadadotid.com (the “Site”), to our services, including AI Messaging Services and CAX Services (the “Services”), and to information we collect offline, such as through sales calls and business transactions.

We handle personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA), as applicable.

1. Who Is Responsible for Your Information

Our team is responsible for Canada.id’s compliance with this Privacy Policy and applicable privacy law.

Privacy contact:
Email: privacy@canadadotid.com
Mail: Privacy, Canada.id, 14 Springbluff Blvd SW, Calgary, AB T3H 4V6, Canada

2. Information We Collect

2.1 Information you give us

• Contact and enquiry details: name, email, phone number, company name, and your message when you use our contact or consultation forms, subscribe to emails, or contact us.
• Customer and account details: name, business details, email address, and account credentials for our Services.
• Billing details: name, email, amount paid, date, and payment method type. Payments are processed by Airwallex. We do not receive or store full card numbers.

2.2 Information from your use of CAX Services

• Account email, API key identifiers (not the secret key itself in readable form), and account balance.
• Usage records: date and time, model and provider used, tokens processed, cost, and request status.
• Request content: the instructions you give, and the source code, configuration, logs, and other project context that CAX processes to answer a request.
• Technical traces of agent actions, used for reliability, security, and support.

2.3 Information processed through AI Messaging Services
When we provide AI Messaging Services (for example, WhatsApp-based agents) to a business client, we process messages and contact details of that client’s End-Users on the client’s behalf. In that case, the client is responsible for that information and for obtaining any required consents. We act as its service provider and use the information only to provide the service to the client.

2.4 Information collected automatically on the Site
IP address, browser and device type, pages visited, referring site, and date and time of visits, collected through cookies and similar technologies (see section 7).

3. How We Use Information

We use personal information to:

• respond to enquiries and provide quotes and consultations;
• create and manage accounts and provide the Services;
• process payments, add prepaid credits, issue receipts, and keep business records;
• provide support and communicate with you about the Services, including service and billing notices;
• maintain the security of the Site and Services and prevent fraud and misuse;
• improve the Site and Services using aggregated or de-identified information;
• send marketing emails where you have consented, which you can withdraw at any time; and
• comply with legal obligations.

We do not sell personal information.

4. AI Processing in CAX Services

4.1 To answer a CAX request, the relevant instructions and project context are sent to the third-party AI model provider selected for that request. Currently these are OpenAI, Anthropic, and DeepSeek.
4.2 Where a provider offers a setting that prevents customer data from being used to train its models, we use that setting. Each provider also processes data under its own terms and privacy policy.
4.3 Do not include personal information, passwords, or secrets in code or context you send through CAX unless it is necessary. Where it is necessary, you are responsible for having the right to share it.
4.4 We do not use your source code to train our own models.
4.5 Contact us if you want to discuss restricting which providers are used for your account.

5. How We Share Information

We share personal information only with service providers who need it to perform services for us, and only as necessary:

• payment processing: Airwallex;
• website and server hosting, and email delivery;
• AI model providers for CAX Services: OpenAI, Anthropic, DeepSeek;
• messaging platforms for AI Messaging Services: Meta (WhatsApp);
• website tools such as analytics, review widgets, and advertising platforms.

We require our service providers to protect personal information and to use it only for the services they provide to us.

We may also disclose personal information:

• where required by law, court order, or a lawful request from authorities;
• to protect our rights, property, or safety, or that of our clients or others; or
• to a buyer or successor if all or part of our business is sold or transferred, under confidentiality obligations and subject to this Privacy Policy.

6. International Transfers

Our service providers may process and store personal information outside Canada, including in the United States, the European Union, the United Arab Emirates, and China (DeepSeek). While outside Canada, information is subject to the laws of those countries and may be accessible to their courts, law enforcement, and national security authorities. We use contractual and technical safeguards where available to protect information that is transferred.

7. Cookies and Similar Technologies

The Site uses:

• essential cookies, needed for the Site to function and stay secure;
• analytics cookies, to understand how visitors use the Site; and
• advertising cookies and pixels, to measure our advertising and show our ads on other sites.

You can block or delete cookies through your browser settings. Some parts of the Site may not work properly without essential cookies. The Site does not currently respond to “Do Not Track” browser signals.

8. How Long We Keep Information

We keep personal information only as long as needed for the purposes described above, unless a longer period is required by law:

• billing and payment records: 7 years, for tax and accounting purposes;
• account information: for the life of your account, and up to 12 months after it is closed;
• CAX usage records: up to 24 months;
• CAX request content and traces: up to 90 days, unless you ask us to keep them longer for support;
• enquiry and contact-form information: up to 24 months after our last contact with you;
• marketing email list: until you unsubscribe.

When information is no longer needed, we delete it or de-identify it.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and limiting access to people who need it to provide the Services. No system is completely secure. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the relevant privacy regulator as required by law.

You are responsible for keeping your account credentials and API keys confidential.

10. Your Rights

You may:

• request access to the personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• withdraw your consent, subject to legal or contractual restrictions; and
• ask us to delete your information, subject to records we must keep by law.

To make a request, email privacy@canadadotid.com. We will respond within 30 days. We may need to verify your identity first. You can also use our User Data Deletion page at https://canadadotid.com/user-data-deletion/.

To unsubscribe from marketing emails, use the unsubscribe link in any email or contact us.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (www.oipc.ab.ca).

11. Children

The Site and Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it.

12. Links to Other Sites

The Site may link to third-party websites, including our payment processor’s checkout page. Their privacy practices are governed by their own policies, and we are not responsible for them.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date and, for material changes, give reasonable notice on the Site or by email.

14. Contact Us

Canada.id
Operating as CANADA.ID
Email: privacy@canadadotid.com
Address: 14 Springbluff Blvd SW, Calgary, AB T3H 4V6, Canada