Skip to content

Privacy Policy

We collect the minimum needed, we never sell it, and we never train AI models on your content.

Effective date: September 5, 2026

Ivara Labs, Vancouver, British Columbia, Canada. We build platforms and automations for businesses in Canada and the United States. This policy explains what we collect, why, and your rights. It is written to comply with PIPEDA and applicable Canadian provincial privacy law, and with applicable US state privacy laws. Contact for anything in this policy: business@ivaralabs.com.

01

What we collect

Website: name, company, and contact details you send through our form or email, plus analytics about site usage through Google Analytics (page views, device and browser type, approximate location, and how you move through the site). Engagements: business contact information and the project information a client shares so we can build for them.

Connected accounts: only if you choose to connect them, data from services you authorize, such as email and calendar. We collect the minimum needed for the feature you enabled, and you can disconnect anytime.

02

What we do with it

To respond to you, provide and improve the services you asked for, secure our systems, and meet legal obligations. We send marketing only with consent as Canadian anti spam law (CASL) requires, and every message includes a working unsubscribe that we honor promptly.

03

What we never do

We do not sell your personal information, and we have not sold it. We do not use your content to train artificial intelligence models. We do not capture anything from a connected account beyond what you switched on.

04

When we act for our clients

When we build or operate a platform for a client, the information inside it belongs to that client, and we process it only on their instructions, as a service provider. If your information is in a client's platform, that client controls it; contact them first, and we will support their response.

05

Who we share with

Service providers who help us operate: hosting and infrastructure, the AI provider that processes text to generate drafts, email delivery, and Google Analytics, which processes usage data on our behalf. Each is bound to protect your information and use it only to provide their service to us. We also disclose where the law requires it, to protect rights and safety, or as part of a business transaction, with protections carried over.

06

Where your data lives

Our providers store and process data in Canada and the United States. Where personal information crosses borders, it remains protected by our contracts with providers and this policy, and it may be subject to lawful access under the laws of the country where it is held.

07

How long we keep it

Contact messages: as long as needed to respond and maintain our relationship. Engagement records: the life of the engagement plus the period our legal and tax obligations require. When an engagement ends or you ask us to, we delete your personal information within thirty days, except minimal records we must keep by law.

08

Security

We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information: encryption in transit, access controls, and least privilege inside our team. If a breach creates a real risk of significant harm, we will notify affected people and the required regulators as the law requires.

09

Your rights

Wherever you are, you can ask us what we hold about you, ask us to correct it, ask us to delete it, withdraw consent, and get a copy in a portable format. Residents of certain US states also have the right to know categories collected and disclosed, the right to correct and delete, and the right not to be discriminated against for exercising rights; we honor these for everyone rather than sorting by state. Write to business@ivaralabs.com and we will respond within thirty days. We do not use your personal information for automated decisions that produce legal effects about you.

10

Cookies

We use only the cookies and local storage needed to run the site and to understand site usage through Google Analytics. We do not use advertising trackers or allow Google to use your data for its own advertising purposes. Your browser controls let you block cookies; the site will still work.

11

Children

Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect information from minors, and we delete it if we learn we have.

12

Complaints

We want to fix problems directly: business@ivaralabs.com. You can also complain to the Office of the Privacy Commissioner of Canada, to your provincial privacy commissioner (in British Columbia, the OIPC), or, in the United States, to your state attorney general.

13

Changes

We will post changes here with a new effective date, and for material changes affecting current clients we will tell you directly.