PRIVACY POLICY

We are committed to safeguarding your personal information. This Privacy Policy explains how AI Guardrails collects, uses, discloses, and protects your data when you interact with our website and services.

1. Who We Are

AI Guardrails (“Company,” “we,” “us,” or “our”) is a North American consulting firm headquartered in Canada. We operate the website aiguardrails.io (the “Site”) and deliver AI strategy, governance, and implementation services to mid-market enterprises.

For purposes of Canadian and U.S. privacy legislation, AI Guardrails is the data controller (or, under PIPEDA, the “organization”) responsible for the personal information we collect through this Site.

2. Scope of This Policy

This Privacy Policy applies to all visitors and users of the Site, regardless of geographic location. It covers personal information collected through the Site, email communications, contact forms, downloadable content, and any other online interaction with us.

Where local privacy laws (such as the EU GDPR, UK GDPR, Brazil’s LGPD, or other applicable frameworks) provide additional rights or obligations, we will honor those requirements as they apply to you.

3. Information We Collect

3.1 Information You Provide Directly
  • Name, email address, phone number, job title, and company name when you fill out contact forms, request assessments, or subscribe to communications.
  • Any messages, questions, or content you submit through the Site.
3.2 Information Collected Automatically
  • IP address, browser type and version, operating system, device identifiers, referring URL, and pages visited.
  • Cookies, web beacons, pixel tags, and similar tracking technologies (see Section 8).
  • Usage data including time on pages, click patterns, scroll depth, and navigation paths.
3.3 Information from Third Parties
  • Analytics providers (e.g., Google Analytics) supplying aggregated or pseudonymous usage statistics.
  • Publicly available business information from professional directories or social media profiles.

4. How We Use Your Information

  • Service delivery: Responding to inquiries, scheduling assessments, delivering consulting engagements, and providing support.
  • Analytics and improvement: Understanding how visitors use our Site to improve content, functionality, user experience, and service offerings.
  • Communications: Sending newsletters, service updates, industry insights, and promotional materials (with your consent where required by law).
  • Legal and compliance: Meeting regulatory obligations, enforcing our terms, preventing fraud, and protecting rights and safety.

AI & Machine Learning Use: We may use aggregated, de-identified, or anonymized data derived from Site interactions for analytics, research, and the training or improvement of artificial intelligence and machine learning models. This may include ingestion of data by AI systems for pattern recognition, service optimization, and insight development. Where any such use involves personal information that has not been fully anonymized, we will seek your explicit consent before processing. You may withdraw consent at any time (see Section 10).

5. Legal Basis for Processing

  • Consent: Where you have given clear, informed consent (e.g., subscribing to a newsletter or consenting to AI-related data use).
  • Contractual necessity: Where processing is needed to perform or enter into a contract with you.
  • Legitimate interests: Where processing is necessary for our legitimate business interests (e.g., analytics, security), provided these are not overridden by your rights.
  • Legal obligation: Where we must process your data to comply with applicable law.

Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation (e.g., Quebec’s Law 25, Alberta’s PIPA, British Columbia’s PIPA), we rely on meaningful consent—either express or implied—as the primary basis for collecting, using, and disclosing personal information.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share data in the following limited circumstances:

  • Service providers: Trusted third-party vendors performing services on our behalf (e.g., hosting, email delivery, analytics, CRM), contractually bound to use your information solely for specified purposes and to maintain appropriate safeguards.
  • Legal requirements: When required by law, court order, subpoena, or governmental request, or when disclosure is necessary to protect rights, property, or safety.
  • Business transfers: In connection with a merger, acquisition, reorganization, or asset sale. We will notify you before your data becomes subject to a different privacy policy.

7. International Data Transfers

Your personal information may be transferred to, stored in, and processed in Canada and/or the United States. Both countries maintain privacy frameworks, though protection levels may differ from your home jurisdiction.

We implement appropriate safeguards for cross-border transfers, including standard contractual clauses, adequacy determinations, binding corporate rules, or explicit consent where required.

Canada has been recognized by the European Commission as providing adequate data protection. For U.S. transfers, we rely on contractual protections and applicable frameworks such as the EU-U.S. Data Privacy Framework.

8. Cookies and Tracking Technologies

  • Strictly necessary cookies: Essential for Site function (session management, security). No consent required.
  • Analytics cookies: Help us understand visitor behavior (e.g., Google Analytics) to generate usage statistics and improve services.
  • Functional cookies: Remember your preferences and settings.
  • Marketing cookies: Deliver relevant advertising and measure campaign effectiveness. Only deployed with consent where required by law.

You can manage preferences through your browser settings or any cookie consent mechanism displayed on the Site. Disabling cookies may affect certain features.

9. Data Retention

We retain personal information only as long as necessary to fulfill collection purposes, comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we securely delete or anonymize information in accordance with internal policies and applicable law.

10. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

  • Access a copy of the personal information we hold about you.
  • Correct inaccurate or incomplete information.
  • Delete your personal information, subject to legal retention requirements.
  • Portability — receive your data in a structured, machine-readable format.
  • Restrict or object to processing for certain purposes.
  • Withdraw consent at any time without affecting prior processing.
  • Opt out of marketing communications via the unsubscribe link or by contacting us.

Canadian residents (PIPEDA): You have the right to access personal information held by us, challenge its accuracy, have it amended, and withdraw consent for collection, use, or disclosure, subject to legal or contractual restrictions.

U.S. residents: Depending on your state, you may have additional rights under the CCPA/CPRA, VCDPA, CPA, or similar legislation, including the right to know, delete, correct, opt out of sale/sharing, and not be discriminated against for exercising rights.

To exercise any rights, contact: getstarted@aiguardrails.io. We will respond within applicable legal timeframes.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information, including encryption in transit, access controls, security assessments, and employee training. No method of transmission or storage is 100% secure; while we strive to protect your information, absolute security cannot be guaranteed.

12. Children’s Privacy

Our Site and services are not directed to individuals under the age of 16 (or 13 in the United States under COPPA). We do not knowingly collect personal information from children. If we learn that we have collected such information, we will promptly delete it.

13. Third-Party Links

The Site may link to third-party websites not operated by us. We are not responsible for their privacy practices and encourage you to review their policies before providing personal information.

14. Changes to This Policy

We may update this Privacy Policy to reflect changes in practices, technologies, or legal requirements. Material changes will be posted on this page with an updated “Last Updated” date. Where required by law, we will provide additional notice or obtain consent.

15. Contact Us

AI Guardrails

Email: getstarted@aiguardrails.io

Web: aiguardrails.io/contact-us

Office of the Privacy Commissioner of Canada: Canadian residents may file a complaint at priv.gc.ca.

U.S. State Regulators: U.S. residents may contact their state’s Attorney General or relevant regulatory authority.