Privacy Policy

Introduction

Inputly AI Inc. ("we," "our," or "us") is committed to protecting the privacy and security of personal information collected through our restaurant automation platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), applicable provincial privacy legislation, and international privacy standards where we operate.

Information We Collect

Restaurant Account Information

When you create an account or use our services, we collect:

• Business name, address, and contact information

• Owner/manager name and email address

• Phone numbers for voice ordering setup

• Menu information and pricing

• Payment and billing information

• Integration credentials for POS and other systems

Customer Order Information

Through our platform, we process customer information necessary for order fulfillment:

• Customer name and contact information

• Delivery or pickup addresses

• Order details and preferences

• Payment information (processed through secure payment processors)

• Order history and frequency

Voice Data and Call Recording

IMPORTANT NOTICE: ALL TELEPHONE CALLS MAY BE RECORDED

Our voice ordering system processes and records:

• Voice recordings during order calls (recorded for quality assurance and training purposes)

• Transcribed text from voice interactions

• Voice pattern data for AI training and accuracy improvement (anonymized)

• Call metadata including phone numbers, timestamps, and duration

• Audio recordings stored for dispute resolution and compliance

By using our Service or calling our voice ordering system, you consent to call recording and monitoring for quality assurance, training, security, and compliance purposes. Recordings are retained in accordance with applicable law and business requirements.

Technical and Usage Data

We automatically collect technical information to improve our services:

• IP addresses and device information

• Browser type and version

• Usage patterns and feature utilization

• Performance metrics and error logs

• Website analytics and cookies

How We Use Your Information

Service Delivery

• Processing and fulfilling customer orders

• Managing your restaurant account and settings

• Providing voice ordering and AI automation services

• Integrating with your POS and other systems

• Generating analytics and business insights

Communication

• Sending order confirmations and updates

• Providing customer support and technical assistance

• Sharing important service updates and announcements

• Marketing communications (with your consent)

Improvement and Development

• Improving AI accuracy and system performance

• Developing new features and services

• Conducting research and analytics (aggregated and anonymized)

• Monitoring system security and preventing fraud

Legal and Compliance

• Complying with applicable laws and regulations

• Responding to legal requests and court orders

• Protecting our rights and the rights of others

• Ensuring food safety and health compliance

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We only share information in the following circumstances:

Service Providers and Hosting

We work with trusted third-party service providers who assist in delivering our services:

• Microsoft Azure: Primary cloud hosting and infrastructure provider. Your data is hosted on Azure servers which may be located in Canada, United States, or other Azure regions

• Payment processors for secure transaction handling (Stripe, PayPal)

• AI service providers (OpenAI, Azure OpenAI, Anthropic) for natural language processing

• Telephony providers for voice calling infrastructure

• Analytics and monitoring services

• Customer support and communication platforms

IMPORTANT: While we use enterprise-grade hosting providers, we cannot guarantee 100% uptime or security. Service interruptions, downtime, or data breaches may occur despite our best efforts. By using our Service, you accept these risks.

Integration Partners

With your explicit consent, we share necessary information with:

• POS system providers for order synchronization

• Delivery platforms for order fulfillment

• Accounting software for financial integration

• Other restaurant technology partners

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes and government requests

• Protect against fraud and security threats

• Enforce our terms of service

• Protect public health and safety

Business Transfers

In the event of a merger, acquisition, or sale of assets, customer information may be transferred as part of the business assets. We will provide notice before your information is transferred and becomes subject to a different privacy policy.

Data Security

We implement comprehensive security measures to protect your information:

Technical Safeguards

• 256-bit SSL/TLS encryption for data transmission

• AES-256 encryption for data at rest

• Multi-factor authentication for account access

• Regular security audits and penetration testing

• Automated monitoring for security threats

Operational Safeguards

• Limited employee access on a need-to-know basis

• Background checks for employees with data access

• Regular security training for all staff

• Incident response plan for security breaches

• Secure data centers with physical access controls

Voice Data Protection

• Voice recordings automatically deleted after 90 days

• Encrypted transmission and storage of voice data

• Anonymization of voice pattern data

• Opt-out options for voice data retention

Data Retention

We retain personal information only as long as necessary for the purposes outlined in this policy:

Retention Periods

Data Deletion

When retention periods expire or upon your request, we securely delete personal information using industry-standard data destruction methods.

Your Privacy Rights

Under Canadian privacy law, you have the following rights regarding your personal information:

Access and Correction

• Request access to personal information we hold about you

• Correct inaccurate or incomplete information

• Update your account information at any time

Deletion and Portability

• Request deletion of your personal information

• Export your data in a portable format

• Close your account and delete associated data

Consent Management

• Withdraw consent for marketing communications

• Opt-out of voice data retention

• Control integration data sharing

Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and analyze usage:

Types of Cookies

• Essential Cookies: Required for basic website functionality

• Performance Cookies: Help us understand how visitors use our site

• Functional Cookies: Remember your preferences and settings

• Marketing Cookies: Used to deliver relevant advertisements (with consent)

Cookie Management

You can control cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect website functionality.

Children's Privacy

Our services are designed for businesses and are not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will promptly delete that information.

International Data Transfers

We primarily store and process data within Canada. When data must be transferred outside Canada for service delivery:

• We ensure adequate protection through contractual safeguards

• Transfers only occur to countries with adequate privacy protection

• We maintain the same security standards regardless of location

• You can request data to remain in Canada for an additional fee

AI System Limitations and Disclaimer

Privacy Compliance

Inputly AI Inc. is committed to compliance with all applicable privacy laws:

Corporate Information

Inputly AI Inc. is a registered business incorporated in British Columbia, Canada, with principal offices in Surrey, BC.

Canadian Compliance

• Personal Information Protection and Electronic Documents Act (PIPEDA)

• Provincial privacy legislation (Alberta PIPA, BC PIPA, Quebec Act 25)

• Canadian Anti-Spam Legislation (CASL)

International Standards

• General Data Protection Regulation (GDPR) for EU customers

• California Consumer Privacy Act (CCPA) for US customers

• ISO 27001 information security standards

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes:

• We will notify you by email and through our platform

• We will post the updated policy on our website

• The effective date will be clearly indicated

• Your continued use constitutes acceptance of the changes

Contact Our Privacy Officer

If you have questions about this Privacy Policy or our privacy practices, please contact our Privacy Officer: