Legal
Privacy Policy
Effective Date: May 17, 2026 · Last Updated: May 17, 2026
FIALFA (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and the Canada Anti-Spam Legislation (CASL).
This policy applies to fialfa.ai and all associated services currently operating in a Friends & Family testing phase.
1. Who We Are
FIALFA operates from Canada. For privacy-related inquiries, contact us at:
Privacy Officer, FIALFA
Email: privacy@fialfa.ai
2. Information We Collect
We collect only what is necessary to provide and improve the Service.
Information you provide directly
- Email address — collected when you join our waitlist or create an account. Used to send platform updates and communications you have consented to receive under CASL.
- User profile data — name, preferences, and settings you provide when setting up your account. Retained for as long as your account is active.
Information generated through your use of the Service
- Session and usage data — pages visited, features used, time spent, and error logs. Used to improve the platform and diagnose issues.
- Device and browser data — IP address, browser type, operating system. Collected automatically via standard web technologies.
What we do NOT collect or retain
Analysis inputs and outputs — content you submit for analysis (queries, prompts, financial data, documents) is processed in real time and is not stored or retained after your session ends. We do not use your analysis inputs to train models, profile you, or build behavioral records.
We do not sell your personal information.
3. Why We Collect Your Information
We collect and use personal information for the following purposes:
| Purpose | Legal Basis under PIPEDA |
|---|---|
| Delivering the Service and your account | Consent / contractual necessity |
| Sending email updates you've consented to | Express consent under CASL |
| Improving and diagnosing the platform | Legitimate interest (aggregated data only) |
| Responding to your requests and support inquiries | Consent / contractual necessity |
| Complying with legal obligations | Legal requirement |
4. Email Communications and CASL
When you provide your email address and expressly consent to receive communications from us, we may send you:
- Platform news and feature announcements
- Early-access invitations and testing updates
- Service-related notices
Unsubscribing: Every commercial email we send includes an unsubscribe link. You may opt out at any time. We will process your unsubscribe request within 10 business days, as required by CASL. Unsubscribing from marketing emails does not affect your ability to receive transactional service notices related to your account.
5. Disclosure of Your Information
We do not sell, trade, or rent your personal information. We may share information only in these limited circumstances:
- Service providers — third-party vendors who assist in operating the platform (e.g., hosting, email delivery, analytics), bound by confidentiality obligations.
- Legal compliance — if required by applicable law, court order, or governmental authority.
- Business transfer — in the event of a merger, acquisition, or sale of assets. We will notify you before your information is subject to a different privacy policy.
We currently operate primarily within Canada. Where data is processed or stored outside Canada, we take steps to ensure equivalent privacy protections are in place.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Email address (waitlist / account) | Until you withdraw consent or delete your account |
| User profile data | Until account deletion |
| Analysis inputs / prompts | Not retained — deleted at session end |
| Session and usage logs | Up to 12 months, then aggregated or deleted |
| Support correspondence | Up to 3 years |
7. Your Rights Under PIPEDA
You have the right to:
- Access — request a copy of the personal information we hold about you
- Correction — ask us to correct inaccurate or incomplete information
- Withdrawal of consent — withdraw consent to our use of your information, with reasonable notice
- Complaint — lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
To exercise any of these rights, contact privacy@fialfa.ai. We will respond within 30 days.
8. Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. During the current testing phase, access to personal data is restricted to a small authorized team.
No method of transmission over the internet is completely secure. We take your privacy seriously and are committed to maintaining reasonable safeguards.
9. Cookies and Tracking
We use essential cookies to operate the Service. We may use analytics tools to understand how the platform is used. We do not use cookies for targeted advertising.
A cookie notice will be displayed on your first visit. You can manage cookie preferences through your browser settings.
10. Children's Privacy
FIALFA is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact privacy@fialfa.ai and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
12. Contact Us
Privacy Officer, FIALFA
Email: privacy@fialfa.ai
This Privacy Policy is governed by the laws of Canada.