Privacy Policy

Information you provide

• Contact details, account registration data, and messages you send to us.
• Business information when you explore, buy, or use our platform.
• Support requests, feedback, and survey responses.
• Billing and transaction information where relevant.

Information collected automatically

• Device and browser details, IP address, pages viewed, and referring pages.
• We or our service providers may infer the organization associated with your visit from your IP address or network information, and enrich that with publicly available business information such as company name, size, and industry.
• Usage and interaction data within the website, the platform, and the extension.
• Cookies and similar technologies. See Cookies and similar technologies below.

Information from third parties

• If you connect third party systems, for example Guesty, we may receive data as needed to provide features you enable.
• Basic business contact data from service providers to help us keep records accurate and current.

We do not collect sensitive personal information for our website or marketing. We do not sell personal information. We do not share personal information for cross context behavioral advertising.

We use cookies and similar technologies to operate the Services. With your permission, we use optional analytics cookies on the public website to understand how it is used and improve it.

• Strictly necessary cookies support core features and run without consent.
• Optional analytics cookies help us measure and improve the public website. They remain off unless you enable them in Privacy options.

We do not use advertising cookies or advertising features on the public website.

Optional analytics are off by default. You can enable, review, or turn them off at any time through Privacy options in the footer. Turning them off stops further measurement and removes analytics cookies set by our site where your browser permits.

Optional analytics providers

When you allow optional analytics, the public website loads Google Analytics 4 and HubSpot's tracking code. We use them for page-view and website-use measurement, not advertising audiences.

Google Analytics is configured with advertising storage, ad-user-data storage, ad-personalization storage, Google Signals, and ad-personalization signals disabled. We do not send a user ID, form fields, scheduler data, or custom conversion events to Google Analytics from the public website.

We do not call HubSpot's visitor-identification API or pass a visitor email address to it from the public website. HubSpot's tracking code may use cookies and online identifiers to measure page visits and, where someone later identifies themselves through a HubSpot-connected interaction, may associate activity with a contact record.

The current list of subprocessors used to provide the INTO platform is available at weareinto.ai/subprocessors.

• To provide, maintain, and improve the Services.
• To allow you to use features you request.
• To communicate with you about accounts, transactions, support, and updates.
• To understand usage, run analytics, and improve quality and security.
• To send marketing messages with your consent or as otherwise permitted by law. You can opt out at any time.
• To comply with law, enforce terms, and protect rights, property, and safety.

For visitors in the European Economic Area, Switzerland, and the United Kingdom, we process personal data on these bases:

• Consent, for optional analytics cookies on the public website.
• Contract, to provide the Services you request.
• Legitimate interests, for security, service improvement, identifying likely business visitors to guide sales and marketing outreach, and business communications, balanced against your rights.
• Legal obligations, where we must keep records or respond to lawful requests.

We do not sell personal information. We may share information as follows:

• Service providers that help us operate the Services, for example cloud hosting, optional analytics, relationship management, email delivery, payments, customer support, and security. They must act under our instructions and protect the data.
• Third party services you select, for example Guesty, when you enable an integration or use the extension with that service.
• Business transfers, in connection with a reorganization, merger, or sale of assets.
• Legal and safety purposes, to comply with law or enforce our terms.
• Affiliates, where they process data for the purposes described in this policy.

We are based in Canada. Your data may be processed in other countries, including the United States and members of the European Union. When we transfer personal data across borders, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms, and we assess local laws where required.

We keep personal data only as long as needed for the purposes in this policy, then delete or anonymize it. Typical periods are:

• Website analytics, for the retention periods configured in the relevant provider, subject to your choices and applicable law.
• Marketing contacts, while there is an active business relationship or up to twenty four months after the last meaningful interaction.
• Contracts, billing, and audit records, for the period required by law.

You can ask us for more detail about retention for a specific category.

• Cookie options. Use Privacy options in the footer to enable, review, or turn off optional analytics.
• Marketing. You can opt out of marketing emails by using the unsubscribe link in the message or by contacting us.
• Browser signals. The Services currently do not respond to Do Not Track signals.

Your rights depend on where you live. We will respond consistent with local law.

EEA, Switzerland, and United Kingdom

You can request access, correction, deletion, restriction, or portability. You can object to processing based on legitimate interests and you can withdraw consent at any time. You also have the right to lodge a complaint with your data protection authority.

California

We do not sell or share personal information as those terms are defined under California law. We do not use or disclose sensitive personal information for any purpose that would require a right to limit. You can request to know, access, correct, or delete your personal information, and you can authorize an agent to make a request for you. We will not discriminate against you for exercising your rights.

Canada

You can request access and correction, and you can withdraw consent to non essential processing.

To exercise any right, email us using the contact details below. We may need to verify your identity before completing your request.

We use administrative, technical, and physical safeguards designed to protect personal data. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

The Services are not directed to children. We do not knowingly collect personal information from children. If you believe we collected information from a child, contact us and we will remove it.

The Services may link to third party sites or services that we do not control. Their privacy practices apply to their sites. Review their policies before providing information.

We may update this policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, provide a notice on the site or by email to account holders. Your continued use of the Services after changes take effect means you accept the updated policy.

Controller: INTO AI Inc. Email: privacy@weareinto.ai Address: 407 Rue McGill, Bureau 700, Montreal, Quebec, H2Y 2G3, Canada Phone: +1 877 793 4686

If you are in the EEA or the United Kingdom and wish to contact a representative, email us and we will direct you to the appropriate contact.