Privacy Policy

DRAFT — NOT LEGAL ADVICE. This draft was prepared from common free template structures and the published principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (BC PIPA). Have it reviewed by a qualified lawyer before relying on it. Replace every item in [BRACKETS].

Effective date: [EFFECTIVE DATE]

Business: AI TECH UNIVERSE, a sole proprietorship registered in British Columbia, Canada, owned and operated by [OWNER FULL LEGAL NAME] ("AI Tech Universe", "we", "us", "our")

Address: [BUSINESS MAILING ADDRESS, Langley, BC, POSTAL CODE]

Privacy contact: [PRIVACY OFFICER NAME], [CONTACT EMAIL, e.g. privacy@theaitechuniverse.com]

1. Scope

This policy explains how we collect, use, disclose and protect personal information through our website [WEBSITE URL] (the "Site") and when you contact us or use our products and services (together, the "Services"). We follow the ten fair information principles of PIPEDA and, where it applies, BC PIPA.

2. Accountability

We have designated a Privacy Officer, named above, who is responsible for our compliance with this policy. You can contact the Privacy Officer with any question, request or complaint.

3. Information we collect

• Information you give us: for example your name, email address, company name, phone number and the contents of messages you send us, or information you provide when you sign up for, or buy, a product.
• Information collected automatically: basic technical data such as IP address, browser type, device information, pages viewed and referring pages, collected through server logs and, if used, analytics tools.
• Cookies: [DESCRIBE COOKIES/ANALYTICS USED, e.g. "We do not use advertising cookies. We use [ANALYTICS PROVIDER] to understand Site usage in aggregate."]
• Information you submit to our AI products (if applicable): prompts, files or other content you choose to upload. [DESCRIBE HOW THIS IS STORED, HOW LONG IT IS KEPT, AND WHETHER IT IS USED TO TRAIN OR IMPROVE MODELS. If you do not use customer content for training, say so clearly.]

We do not knowingly collect personal information from children under [13/the age of majority in your province] without appropriate consent.

4. Why we collect it (identifying purposes)

We collect and use personal information only for purposes a reasonable person would consider appropriate, including to:

• respond to enquiries and provide customer support;
• provide, operate, secure and improve the Services;
• process payments and keep business and tax records;
• send service-related messages and, with your consent, marketing messages (you can unsubscribe at any time, consistent with Canada's Anti-Spam Legislation, CASL);
• comply with legal obligations.

We will identify any new purpose and obtain your consent before using your information for it, unless the law permits otherwise.

5. Consent

We obtain your consent when we collect personal information, either expressly (for example, by your submitting a form) or implicitly where appropriate. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; we will explain the likely consequences of withdrawing.

6. Limiting collection, use, disclosure and retention

We collect only what we need for the purposes above. We do not sell personal information. We share it only:

• with service providers who process it for us (for example web hosting, email, payment processing, analytics and cloud/AI infrastructure), under contracts requiring them to protect it: [LIST PROVIDERS, e.g. Cloudflare (hosting), Zoho (email), Stripe (payments)];
• if required by law, or to protect our rights, users or the public;
• in connection with a sale or transfer of the business, subject to confidentiality protections.

We keep personal information only as long as needed for the purposes collected or as required by law, then securely delete or anonymize it. [STATE RETENTION PERIODS IF KNOWN.]

7. Storage and transfers outside Canada

Some of our service providers may store or process information outside Canada, including in the United States. Information processed in another country is subject to that country's laws and may be accessible to its courts, law enforcement and national security authorities. [LIST LOCATIONS IF KNOWN.]

8. Accuracy

We take reasonable steps to keep personal information accurate and complete for its purposes. Please tell us if your information changes.

9. Safeguards

We protect personal information with safeguards appropriate to its sensitivity, such as access controls, encryption in transit (HTTPS), strong passwords and multi-factor authentication. No method of transmission or storage is completely secure.

10. Openness

This policy is publicly available on our Site. We will update it when our practices change and post the new effective date.

11. Your access and correction rights

You may ask to access, correct or delete the personal information we hold about you, and ask how it has been used and to whom it has been disclosed. Send your request to [CONTACT EMAIL]. We will respond within 30 days, or tell you if we need more time as the law permits. We may need to verify your identity.

12. Privacy breaches

If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA, and keep a record of the breach.

13. Challenging compliance

If you have a concern, please contact our Privacy Officer first. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, where BC PIPA applies, the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).

14. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date.

15. Contact

AI TECH UNIVERSE, Attn: Privacy Officer, [BUSINESS MAILING ADDRESS], [CONTACT EMAIL]