Legal

Privacy Policy

This policy is written in accordance with Canada's federal privacy law (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

Effective date: July 1, 2026 · Last updated: October 26, 2026 · Governing law: PIPEDA (Canada, federal) · Contact: support@kbusiness.ca

1. Information We Collect

Chat n Talk Biz collects the following information to provide its services.

[Client information]

· Name, email address, phone number
· Business name, industry, location
· Modules/products in use and related payment information (amounts paid, transfer records)
· n8n instance URL and API integration details (custom-development clients only)

[Customer data generated during automation]

· Names, contact details, booking information, etc. that a client's end customers enter through a chatbot or other automation channel
· For stores using the AI Phone Order service, incoming calls are processed in real time by AI and the call is recorded and stored (you are notified of this when the call connects). This is used only for service-quality purposes such as resolving disputes.
· This data is processed on behalf of the client's business operations; Chat n Talk Biz acts only as a data Processor with respect to it.

[Site usage information]

· Website access logs and browser information (for analytics purposes)
· Information entered into the consultation request form

2. Purpose of Collection & Use

· Entering into and performing service contracts
· Building and operating automation systems
· Technical support and responding to customer inquiries
· Issuing invoices and processing payments
· Providing service performance reports
· Fulfilling legal obligations (such as tax filing)

Chat n Talk Biz does not use personal information for any purpose beyond those listed above.

3. Sharing Information with Third Parties

Chat n Talk Biz does not sell or share collected information with third parties except in the following cases.

· Third-party platforms required to operate the service (n8n, cloud infrastructure providers, etc.) — only the minimum information necessary is shared
· When required by law or court order
· When the data subject has given explicit consent

Notice of Cross-Border Data Storage (PIPEDA, Principle 4.1.3 / s.16)

The services below are hosted on servers located in the United States, so data may cross the Canada-U.S. border. These platforms each hold international security certifications such as SOC 2 and GDPR compliance.

· Vercel — web infrastructure and our self-hosted n8n workflow server (U.S.-based servers)
· Neon — database (U.S.-based servers)
· OpenAI / Anthropic / Google — AI processing (U.S.-based servers)

4. Data Security

· All data in transit is encrypted using TLS/SSL
· Database access is restricted to authenticated servers only (IP allowlisting, credentials managed via environment variables)
· API keys and sensitive information are managed through environment variables and never committed to source code
· Regular security reviews are performed and access is granted on a least-privilege basis

5. Data Retention

· Client information: retained for 1 year after contract termination, then deleted
· Payment records: retained for a minimum of 7 years to meet tax-filing obligations (per Canadian tax law)
· Automation processing logs: retained only while the service is active, deleted within 90 days of cancellation
· Upon deletion request: deleted within 30 days, except for items subject to a legal retention obligation

6. Your Rights (under PIPEDA)

Clients and other data subjects have the following rights.

· Right to access: you may request to view the information we hold about you.
· Right to correction: you may request that inaccurate information be corrected.
· Right to deletion: you may request deletion of information that is not subject to a legal retention requirement.
· Right to withdraw consent: you may withdraw optional consent, such as for marketing communications, at any time.
· Right to complain: if you have concerns about how your personal information is handled, you may file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise these rights, email support@kbusiness.ca (we respond within 7 business days).

7. Client Responsibilities (Important)

Chat n Talk Biz is a technical service provider that builds and operates automation systems. The following are the client's responsibilities.

· Obtaining lawful consent from your own end customers for the collection and processing of their data
· Obtaining explicit recipient consent before sending marketing emails or texts, in compliance with Canada's Anti-Spam Legislation (CASL)
· Lawfully managing customer data collected through automation channels (such as chatbots)
· Disclosing to your own customers that Chat n Talk Biz's automation system is being used

Chat n Talk Biz is not liable for legal disputes, fines, or damages arising from a client's failure to fulfill the obligations above.

8. Limitation of Liability

· Chat n Talk Biz is not directly liable for damages arising from outages, security incidents, or service interruptions of third-party platforms (n8n, OpenAI, Vercel, etc.).
· Chat n Talk Biz's liability will not exceed the service fee for the relevant month.
· Chat n Talk Biz is not liable for service interruptions caused by force majeure (natural disasters, cyberattacks, internet infrastructure failures, etc.).
· However, where a service defect is clearly attributable to Chat n Talk Biz, it will be resolved through rework or a partial refund.

9. Privacy Inquiries

· Chatbot: available 24/7 on our site (fastest response)
· Email: support@kbusiness.ca
· Phone: 416-569-9480 (Mon-Fri, 9 AM-9 PM ET; if busy or unavailable we'll call you back in order)
· Office of the Privacy Commissioner of Canada: www.priv.gc.ca / 1-800-282-1376

This policy is written in accordance with Canada's federal privacy law (PIPEDA) and CASL. · support@kbusiness.ca