The short version. We collect what you give us on a form or by email, plus basic technical data about your visit. We use it to reply to you and to run our services. We don't sell it. You can ask us to delete it at any time by emailing [email protected].
1. Who we are
Upiphany AI Inc. ("Upiphany", "we", "us") operates upiphany.ai and provides operations, automation, bid support and material sourcing services to businesses. We are the organisation responsible for the personal information described in this policy.
Questions, requests or complaints about privacy go to [email protected], or by post to 102, 9333 47 St NW
Edmonton, AB T6B 2R7.
2. What we collect
Information you give us
- Contact details: name, company, email address, phone number.
- Business context: your role or trade, what services you're interested in, and whatever you tell us about your operation or a specific job.
- Project documents: if you email us a takeoff, tender package, drawing, specification or similar file, we receive and store that file and its contents.
- Correspondence: the content of emails, form submissions, text messages and call notes.
Information collected automatically
- IP address, browser and device type, operating system, referring page and pages viewed.
- Cookies and similar identifiers set by us and by the third parties listed in section 5, including advertising identifiers (for example Meta's
_fbpand_fbccookies) where those cookies are present in your browser. - Anti-spam signals generated by Google reCAPTCHA Enterprise when you submit a form.
What we don't collect
We do not ask for and do not want government identification numbers, health information, or payment card numbers. Payments, where applicable, are processed by Stripe and card details never reach our systems.
3. Why we use it
- To reply to your enquiry, quote a job, and deliver services you've engaged us for.
- To administer engagements: scheduling, invoicing and project communication.
- To send commercial messages where you have consented or where we have implied consent under CASL, always with an unsubscribe mechanism.
- To protect the site from spam and abuse.
- To understand which pages and offers actually work, so we can improve them.
- To meet legal, tax and record-keeping obligations.
4. Consent, and how to withdraw it
We rely on your consent to contact you commercially. Consent may be express (you asked us to contact you, or ticked a box) or implied under Canada's Anti-Spam Legislation (CASL), for example where you have an existing business relationship with us, or where you have conspicuously published a business address without a statement refusing such messages, and our message relates to your role.
Every commercial email we send identifies us, gives a mailing address, and includes a working unsubscribe link. You can also reply "unsubscribe" to any email, or write to [email protected]. We action opt-outs the same business day and no later than ten business days, as required.
Withdrawing consent for marketing does not stop transactional messages about work we are actively doing for you.
5. Text messages (A2P / SMS)
Where you provide a mobile number and consent to text messages, message frequency varies with your engagement with us. Standard message and data rates may apply to both outgoing and incoming messages, depending on your carrier and plan.
- Reply STOP or OUT to end messages. You will receive one confirmation and then nothing further.
- Reply HELP for assistance, or contact [email protected] / (825) 600-5597.
- To rejoin, sign up again the same way you originally did.
Mobile opt-in data is never shared. We do not sell, rent or share mobile numbers or SMS consent with third parties or affiliates for their own marketing purposes.
Where recipients are in the United States, we also operate consistently with the Telephone Consumer Protection Act (TCPA) and applicable carrier A2P messaging requirements.
6. Who we share it with
We do not sell your personal information. We share it only with service providers who process it on our behalf, under contract, for the purposes above:
| Provider | Purpose | Where processed |
|---|---|---|
| HighLevel (LeadConnector) | CRM, forms, email and SMS delivery | United States |
| Google (reCAPTCHA Enterprise, Fonts, Analytics/Tag Manager where enabled) | Spam prevention, typography, site measurement | United States |
| Meta Platforms (pixel, where enabled) | Advertising measurement | United States |
| Stripe | Payment processing | United States |
| Email and file storage providers | Correspondence and document storage | United States / Canada |
We may also disclose information where required by law, to enforce our terms, or in connection with a merger or sale of the business, in which case this policy continues to apply to information already collected.
7. International transfers
Several of our providers store and process data in the United States. Information held there may be accessible to US authorities under US law. By using the site or contacting us, you understand that your information may be processed outside Canada. We use providers that contractually commit to comparable protection.
8. How long we keep it
- Enquiries that don't become work: up to 24 months, then deleted or anonymised.
- Client records: for the engagement plus seven years, to meet tax and record-keeping obligations.
- Project documents you send us: for the engagement plus 24 months, unless you ask us to delete them sooner.
- Opt-out records: kept indefinitely, because that is how we make sure we don't contact you again.
9. Confidentiality of your project information
Takeoffs, tender packages and specifications are commercially sensitive. We treat them as confidential. We do not disclose which projects you are bidding, your quantities, or your pricing to any other client. Where we approach a supplier to price material for you, we disclose only the specification and quantities needed to obtain a quote, and not your identity, unless you tell us otherwise.
10. Security
We use access controls, encryption in transit, reputable hosted providers, and limit access to the people who need it. No system is perfectly secure, and we can't guarantee absolute security. If a breach affects you and creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required.
11. Your rights
Under Canadian federal and provincial privacy law you may:
- Ask what personal information we hold about you and get a copy.
- Ask us to correct anything inaccurate or incomplete.
- Ask us to delete information we no longer need to keep.
- Withdraw consent, subject to legal and contractual limits.
- Complain to us, and then to the Office of the Privacy Commissioner of Canada if you're not satisfied.
Email [email protected]. We respond within 30 days. We may need to verify your identity first.
12. Cookies
Our pages use cookies and similar technologies for site function, spam prevention and measurement. You can block or delete cookies in your browser settings; the site will still work, though some measurement will be lost. Where advertising cookies are used, they are set by the third parties named in section 6 under their own policies.
13. Children
Our services are for businesses. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, email us and we'll delete it.
14. Changes
We may update this policy. The effective date at the top changes when we do. Material changes affecting how we use information already collected will be communicated directly where we have your contact details.
15. Contact
Upiphany AI Inc.
102, 9333 47 St NW
Edmonton, AB T6B 2R7
[email protected] · (825) 600-5597