Privacy Policy

Beonbrand Inc. is the organization accountable for the personal information described here. Our Privacy Officer is the person responsible for the protection of personal information and for answering the requests described in section 11.

Privacy Officer, Beonbrand Inc., Toronto, Ontario, Canada

Email: hello@beonbrand.ca

We collect the following, and only in the situations described.

• Contact information you give us: name, email address, phone number, company name, website, and social or professional profile links. Collected when you submit a form, book a call, start a chat with our assistant, or email us.
• Project information you give us: details about your business, brand, goals, challenges, budget, timeline, content needs, systems, workflows, or service requirements.
• Booking information: meeting requests, the times you select, and the notes taken on a call.
• Payment and billing information: invoices, amounts, billing address, tax details, and payment status. Card numbers are entered directly with our payment processor and never reach our servers.
• Communications: messages, emails, form submissions, assistant chat transcripts, support requests, and feedback.
• Technical information collected automatically to deliver and secure the site: IP address, browser and device type, pages requested, referring page, and approximate region. This is ordinary web server logging and cannot be switched off without breaking delivery.
• Optional measurement, only if you allow it: how you move through the site, and which call to action you clicked along with the campaign that referred you. Described in full in our Cookie Notice.
• Information you choose to put into our AI-assisted tools, such as a website to scan, a brief to draft against, or material you upload for analysis.

We do not ask for, and do not want, sensitive categories such as health information, government identifiers, biometric data, or financial account credentials. Please do not send them to us. If you do, we will delete them.

We do not knowingly collect information from children. Our services are sold to businesses and are not directed at anyone under 16.

We use personal information to do these things and nothing else:

• Answer your enquiry and hold the conversation that follows.
• Schedule, hold, and follow up on meetings.
• Deliver the strategy, media, systems, AI integration, consulting, content, and creative work you engage us for.
• Prepare proposals, quotes, invoices, and agreements, and take payment.
• Keep accounting, tax, and business records we are legally required to keep.
• Send service messages about work in progress, which are part of the engagement and are not marketing.
• Send marketing emails, only to people who asked for them, and only until they ask us to stop.
• Understand which pages and calls to action work, so the site gets better. This one is optional and runs only with your permission.
• Keep the site and our systems secure, prevent abuse, and enforce our Terms.

If we ever want to use your information for something not on this list, we will ask you first.

When you submit a form, book a call, or start a chat, you are consenting to us using that information to respond and to deliver what you asked for. That consent is implied by the request itself, and it is the only thing it covers.

Marketing email is separate and opt-in. We do not add you to a list because you contacted us about work.

Non-essential tracking is separate again, off by default, and asked for through the cookie banner. If you ignore the banner, nothing optional loads. Silence is not consent here.

You can withdraw any of these at any time. Use the "Cookie preferences" link in the footer of any page for tracking, the unsubscribe link in any marketing email for email, or write to our Privacy Officer for anything else. Withdrawing is as easy as consenting was, by design and by law.

Withdrawing consent does not undo processing we already lawfully did, and it may mean we can no longer provide a service that depended on it. We will tell you if that is the case before it takes effect.

Strictly necessary cookies run on every visit. They deliver pages, keep the site secure, and remember your cookie choice. They do not profile you.

Analytics is optional and off until you allow it. When allowed, we use Google Analytics 4 with its advertising features deliberately switched off, so it cannot be used to build an advertising profile of you or follow you across other sites. We also record which call to action you clicked and which campaign referred you, on our own servers.

We run no advertising or retargeting pixels. There is no Meta pixel, no LinkedIn Insight Tag, no TikTok pixel, no ad remarketing tag, and no session recording or heat-mapping tool on this site.

Every cookie, storage item, embed and beacon we use is listed by name, purpose and lifetime in our Cookie Notice at beonbrand.ca/cookies, along with the control to change your mind.

We do not sell personal information, we do not rent it, and we do not share it for anyone else’s advertising. We share it with service providers who process it on our behalf, under contract, only for the purposes above. These are the ones we actually use:

• Netlify: website hosting and serverless functions. United States.
• Google Firebase and Google Cloud: application database, authentication, file storage, and backend functions. United States.
• Calendly: meeting scheduling. United States.
• Stripe: payment processing. United States.
• Resend: transactional and marketing email delivery. United States.
• Google Analytics: website measurement, only with your consent. United States.
• Google Fonts: serves the typefaces this site is set in. Loading a font discloses your IP address to Google. United States.
• OpenAI, Anthropic, OpenRouter and DeepSeek: the AI models behind our assistant and our AI-assisted services. United States, and for OpenRouter routing potentially other countries.
• LiveKit: real-time audio for voice conversations with our assistant. United States.
• Slack: internal notifications to our team about enquiries and system events. United States.
• Intuit QuickBooks: accounting and invoicing. United States and Canada.

We will also disclose personal information where the law requires it, to establish or defend a legal claim, or to investigate abuse of our systems. If our business is sold or reorganized, information may transfer as part of it, subject to this policy.

As the list above shows, most of our providers store and process information in the United States. That means it can be subject to lawful access by authorities in that country, and it is not protected by Canadian privacy law while it is there.

Before engaging a provider that handles personal information outside Canada, we assess whether it offers adequate protection and we require contractual commitments to that effect.

If you would rather your information were not processed outside Canada, tell us before you send it, and we will tell you honestly whether we can work that way.

We use AI tools in our work, and we build them for clients. Where AI is involved on our side, it is for research, analysis, drafting, workflow design, automation, and creative production. Information you put into those tools is sent to the AI providers named in section 6.

We do not make decisions about you based only on automated processing. Anything that affects you, including whether we take on your project and on what terms, is decided by a person. Our AI assistant can qualify an enquiry and suggest a next step, but it does not decide anything on its own, and a human reviews what it produces.

We do not submit sensitive personal information into AI systems. If you are sending us information about your employees, customers, or any third party, you are responsible for having the right to share it with us.

AI-assisted output needs human review. We do not warrant that it is error-free, complete, or legally compliant without it.

We keep personal information only as long as it is needed, then delete it. In practice:

• Enquiries that do not become work: up to 24 months from your last contact with us, then deleted.
• Client records, project files, and communications: for the length of the engagement and 7 years after it ends, which covers Canadian tax record-keeping and the limitation period for claims.
• Invoices, payments, and accounting records: 7 years, as tax law requires.
• Marketing list membership: until you unsubscribe. We keep a record that you unsubscribed, and proof of your original consent, for 12 months after that so we can honour and evidence it.
• Optional analytics: we set Google Analytics to the shortest retention its free tier allows, and our own record of call-to-action clicks is kept for 24 months.
• Web server logs: short-term, as retained by our host for operations and security.
• Your cookie choice: on your own device, until you change it or clear your browser data. It never reaches our servers.

We use reasonable administrative, technical, and organizational safeguards: encryption in transit, access controls and least-privilege on our systems, audit logging of administrative actions, and rate limiting and abuse protection on public endpoints.

No system is completely secure and we will not pretend otherwise.

If a breach of security safeguards occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and the Commission d’accès à l’information where Quebec law applies. We keep a record of breaches regardless of whether they meet that threshold.

You can ask us to:

• Tell you what personal information we hold about you and what we have done with it.
• Give you a copy, in a structured and commonly used technical format where the law provides for it.
• Correct anything that is inaccurate or incomplete.
• Delete it, where we are not required to keep it for legal, tax, or contractual reasons. Where we must keep something, we will tell you what and why.
• Stop using it for a particular purpose, or withdraw a consent you previously gave.
• Explain how an AI-assisted process reached a conclusion that concerns you.

Write to our Privacy Officer at hello@beonbrand.ca. We will confirm receipt and respond within 30 days. We may need to verify who you are first, and we will only ask for what is necessary to do that. There is no charge.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca. Quebec residents can complain to the Commission d’accès à l’information du Québec at cai.gouv.qc.ca. If you are in the United Kingdom or the European Economic Area, you can complain to your national supervisory authority.

If you give us business contact information such as your work email, job title, or company phone number, we use it to communicate with you about your role, your organization, and your business relationship with Beonbrand. Canadian privacy law treats this differently from personal information, but we apply the same care to it.

We update this policy when what we do changes. The revised version is posted here with a new "Last updated" date.

If a change materially affects how we handle your information, we will not rely on a consent you gave against the old terms. We will ask again, which for tracking means the cookie banner reappears.

For anything in this policy, or to make a privacy request:

Privacy Officer, Beonbrand Inc., Toronto, Ontario, Canada

Email: hello@beonbrand.ca

Website: beonbrand.ca