Privacy Policy

Last updated: October 31, 2026

This Privacy Policy explains how Mossify AI Inc. ("Mossify AI", "we", "us"), collects, uses, shares and protects personal information when you visit mossify.ai (the "Site"), contact us, book a call, use the builder or chat with our AI guide.

It does not cover data we handle for clients while delivering services. That is governed by each client's engagement agreement, under which we act on the client's behalf and only on its instructions (see "Client data" below).

Who is responsible

Our Privacy Officer is responsible for protecting your personal information: Privacy Officer: Lucas Picciolo, President · lucas@mossify.ca (subject: "Privacy") Mossify AI Inc., Markham, Ontario, Canada

Information we collect

You give us:

• Booking and contact forms: your name, work email, company, website, industry, revenue band, team size, timeline, budget band and anything you write in the form.
• Emails and calls: what you send us and what we discuss on a discovery call.
• AI guide (Maya) chats: what you type to Maya on the builder page.

Collected automatically:

• Device and usage information: IP address, browser, device type, pages viewed, referring site and campaign tags, collected by Shopify (our website host) with cookies and similar technology.
• Advertising pixels: if installed, Meta and Google tags record visits from our ads so we can measure them.

Not collected: numbers you enter in the builder's cost calculator stay in your browser and are not sent to us, unless you share them with Maya or in the booking form.

We don't knowingly collect information from children under 16. Our services are for businesses.

How we use it

• To reply to you, prepare for and hold discovery calls, and send proposals you asked for.
• To run the AI guide and answer your questions in the chat.
• To measure and improve the Site and our ads.
• To prevent spam and abuse of our forms and chat.
• To send you marketing email only with your consent or where Canada's Anti-Spam Legislation (CASL) allows it (for example, within 6 months of an inquiry you made). Every marketing email identifies us, includes our mailing address and has a working unsubscribe link, honoured within 10 business days.

We do not sell your personal information.

AI use

• Maya, our AI guide, is an AI, not a person, and says so. A person (Lucas) is available by booking a call or emailing lucas@mossify.ca.
• Chat messages are sent to our AI provider (Anthropic) to generate replies, under business terms that do not allow your messages to be used to train their models. We do not store the content of chats. We keep only usage counts and cost.
• We don't make decisions about you based only on automated processing. If that ever changes, we'll tell you, explain the main factors on request and let a person review it (Quebec Law 25).

Who we share it with

Only service providers that help us run the Site and our business, under contracts that require them to protect it:

• Shopify (website hosting, forms, analytics)
• Google Workspace (email and calendar)
• Anthropic (AI guide replies)
• Meta and Google (ad measurement, if their tags are installed)

We may also disclose information if the law requires it, or as part of a sale or reorganization of our business.

Where it's stored

Our providers may store and process information outside Canada and Quebec, including in the United States, where it may be accessible to authorities under local law. Before using a new system that sends personal information outside Quebec, we assess the privacy risks as Law 25 requires.

How long we keep it

• Booking and contact form submissions and related email: up to 3 years after our last contact, unless you become a client (then for the life of the relationship plus the period required for tax and legal records).
• Analytics data: as set by Shopify and any ad platforms in use.
• Chat content: not stored by us.

Your rights

Under PIPEDA and, for Quebec residents, Law 25, you can ask to:

• access the personal information we hold about you;
• correct it;
• withdraw consent (for example, unsubscribe from marketing);
• have it deleted or de-indexed where the law allows;
• receive computerized information you gave us in a structured, commonly used format (Quebec).

Email lucas@mossify.ca with the subject "Privacy". We reply within 30 days. If you're not satisfied, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Quebec, the Commission d'accès à l'information (cai.gouv.qc.ca).

Client data

When we build or run AI agents for a client, the client's data (including its customers' personal information) stays in the client's own accounts wherever possible. We access it only with least-privilege permissions the client grants, use it only to deliver the services, do not use it to train AI models, and remove our access at the end of the engagement. Details are set out in each engagement agreement.

Security

We use access controls, least-privilege permissions, approval gates and logs of agent actions to protect information. No system is perfectly secure. If a privacy incident creates a risk of serious harm, we'll notify you and the regulators as the law requires, and we keep a register of incidents.

Changes

We'll post any changes here and update the date above.

Contact

Mossify AI Inc. · Markham, Ontario, Canada · lucas@mossify.ca