Privacy Policy

Personal Information You Provide: When you register for an account, subscribe to our services, or contact us, we may collect your name, email address, phone number, business name, business address, and payment information.

Business Directory Data: Our directory contains publicly available business information sourced from Google Business Profiles, government registries, and other public databases. This includes business names, addresses, phone numbers, websites, hours of operation, and customer reviews.

Usage Data: We automatically collect information about how you interact with our platform, including pages visited, features used, search queries, IP address, browser type, device information, and referring URLs.

AI Interaction Data: When you interact with our AI voice agent (GLORVIS) or AI-powered tools, we collect conversation transcripts, voice recordings (with your consent), and interaction metadata to improve our services.

Cookies and Tracking: We use essential cookies for site functionality and analytics cookies (with your consent) to understand usage patterns. You can manage cookie preferences at any time.

Service Delivery: To provide, maintain, and improve our AI automation services, SEO tools, content generation, and business directory.

Communication: To send service updates, respond to inquiries, deliver AI-generated reports, and provide customer support.

AI Model Improvement: Aggregated and anonymised interaction data may be used to improve our AI models and service quality. Individual data is never used for training without explicit consent.

Billing and Payments: To process payments through our secure payment processor (Stripe). We do not store full credit card numbers on our servers.

Legal Compliance: To comply with applicable Canadian federal and provincial laws, including tax reporting obligations.

Security: To detect, prevent, and address technical issues, fraud, and security threats.

Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, you have the right to:

Access: Request a copy of the personal information we hold about you.

Correction: Request that we correct any inaccurate or incomplete personal information.

Withdrawal of Consent: Withdraw your consent for the collection, use, or disclosure of your personal information at any time, subject to legal or contractual obligations.

Deletion: Request the deletion of your personal information, subject to our legal retention obligations.

Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated.

To exercise any of these rights, contact our Privacy Officer at privacy@localaihub.ca or use the contact information below.

We implement industry-standard security measures to protect your personal information, including:

Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Access Controls: Strict role-based access controls limit who can access personal information within our organisation.

Infrastructure: Our services are hosted on enterprise-grade cloud infrastructure with SOC 2 compliance.

Payment Security: All payment processing is handled by Stripe, which is PCI DSS Level 1 certified.

Regular Audits: We conduct regular security assessments and vulnerability testing.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

We do not sell your personal information. We may share information in the following circumstances:

Service Providers: With trusted third-party service providers who assist in operating our platform (e.g., Stripe for payments, Vercel for hosting, Google for analytics). These providers are contractually obligated to protect your data.

AI Partners: We use AI models from Anthropic (Claude), Google (Gemini), and xAI (Grok) for service delivery. Queries are processed in real-time and not stored by these providers for training unless you explicitly opt in.

Legal Requirements: When required by law, court order, or governmental regulation.

Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users.

With Your Consent: For any purpose you have explicitly authorised.

We retain personal information only as long as necessary for the purposes outlined in this policy:

Account Data: Retained for the duration of your account plus 30 days after deletion request.

Transaction Records: Retained for 7 years as required by Canadian tax law.

AI Interaction Logs: Retained for 90 days for service improvement, then anonymised or deleted.

Analytics Data: Retained in aggregated, anonymised form indefinitely for trend analysis.

Marketing Preferences: Retained until you unsubscribe or withdraw consent.