Privacy Policy

1. Information We Collect

When you use our services, we may collect the following information:

• Account Information: Name, email address, company name, and password when you create an account.
• Project Information: Business details, design preferences, documents, and answers shared during our AI-guided onboarding or Quick Brief process. This data may be collected before you formally register an account to provide you with an instant proposal.
• Payment Information: Processed securely through Stripe. We do not store your credit card details on our servers.
• Usage Data: Pages visited, features used, and interactions with our platform to improve our services.
• Support Communications: Messages, attachments, and feedback submitted through our ticket system and design review tools.

2. How We Use Your Information

• To provide and deliver the services you request, including website development, AI applications, branding, and content production.
• To process payments and manage your account.
• To communicate with you about project updates, support tickets, and design reviews.
• To improve our AI-powered tools and services.
• To send service-related notifications (not marketing).

3. AI-Powered Services

Our platform uses AI for project discovery, content generation, and customer support. Our AI services are powered by xAI (Grok), a US-based AI provider. When you interact with our AI assistants:

• Conversations are stored on our servers to maintain context and improve service quality.
• Your project requirements are transmitted to xAI's servers (located in the United States) for AI processing, subject to their privacy policy.
• AI-generated content (proposals, briefs) is reviewed by our team before delivery.
• We do not use your data to train AI models. Data shared with xAI is used solely for generating responses to your queries.

4. Data Sharing

We do not sell your personal information. We may share data with:

• Stripe (US): For secure payment processing. We never store credit card data.
• xAI / Grok (US): For AI-powered project discovery, proposals, and customer support chatbot.
• Resend (US): For transactional and service email delivery.
• Hosting Providers: To deliver and maintain your websites and applications.
• Legal Requirements: When required by law or to protect our rights.

5. Data Security

We implement industry-standard security measures including SSL encryption, secure password hashing, and access controls. Payment data is handled entirely by Stripe and never touches our servers.

6. Your Rights

You have the right to:

• Access and update your personal information through your dashboard.
• Request deletion of your account and associated data.
• Opt out of non-essential communications.
• Export your project data.

7. Cookies

We use essential session cookies to maintain your login state and preferences. We do not use third-party tracking cookies for advertising purposes.

8. Cross-Border Data Transfer

Artificial Perfection Ltd. is a Canadian company operating under Canadian privacy law. Some of our service providers (xAI, Stripe, Resend) process data in the United States. By using our services, you consent to the transfer of your data to US-based processors. We ensure all providers maintain appropriate data protection standards.

9. Data Retention

• Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
• AI conversations & Scans: Retained for 12 months for service improvement, then anonymized. Abandoned pre-registration drafts (if you do not proceed to create an account) are periodically cleared.
• Payment records: Retained for 7 years as required by Canadian tax law.
• Support tickets: Retained for 24 months after resolution.

10. Canadian Privacy Compliance (PIPEDA & CASL)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL):

• We obtain consent before collecting, using, or disclosing your personal information.
• All commercial emails include an unsubscribe mechanism as required by CASL.
• You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

11. Contact Us

For privacy-related inquiries, contact us at hello@apworks.cloud.