Privacy Policy

BUILDWISE DIGITAL — web + AI automation, Brampton, Ontario. Last updated: 4 August 2026.

This policy explains how I handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). PIPEDA has no small-business exemption — it applies in full.

1. Who is accountable (Privacy Officer)

BUILDWISE DIGITAL is accountable for the personal information handled here. Questions, access requests, or complaints: [email protected].

2. What I collect, and why

Information	When	Why
Name, email, message	You email me or send an enquiry	To answer you and scope a possible project
AI assistant chat messages	You use the demo assistant	To generate a reply and monitor quality/cost
IP address + request counts	Automatically, on each assistant request	Security and abuse-prevention (rate limiting)

I do not sell personal information and do not use it for advertising. I ask only for what the stated purpose requires.

3. Consent

I collect and use personal information with your consent. Using the assistant or emailing me is your consent for the purposes above. For any new purpose, I would ask again first. You may withdraw consent at any time (subject to legal limits) by emailing the Privacy Officer.

4. Third parties & cross-border processing

The AI assistant sends your chat messages to Anthropic PBC (United States) for the AI response, hosted via Vercel Inc. (United States). Your information is therefore processed outside Canada and may be accessible under U.S. law. These vendors are configured to exclude your data from AI model training where that setting is offered.

5. How long I keep it

• Enquiry emails: kept for the life of the enquiry, then deleted.
• Assistant usage logs (including IP): kept only as long as needed for security and cost monitoring — target 90 days — then purged.
• Project records: kept as needed for the engagement and tax/legal record-keeping, then deleted.

6. How I protect it

Access is limited to the Privacy Officer. API keys live only in server-side environment variables, never in client code. Connections use HTTPS. The data footprint is deliberately small (short retention, nothing sold).

7. Your rights

You may ask what personal information I hold about you, ask me to correct it, or ask me to delete it. Email the Privacy Officer; I respond within a reasonable time (generally 30 days).

8. Complaints

If you are not satisfied with my response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376).

9. Changes

I may update this policy; the "last updated" date shows the current version.