Legal
Privacy Policy
Fonda AI — www.fondaai.com
1. Introduction
Fonda AI (“we,” “us,” or “our”) is a Canadian AI automation agency and consultancy headquartered in Canada. We specialize in providing artificial intelligence automation solutions, AI consulting, workflow automation, and related technology services to businesses and organizations. We are committed to protecting the privacy and personal information of our clients, website visitors, and all individuals who interact with our services. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian provincial privacy legislation.
By accessing our website at www.fondaai.com or using our services, you consent to the practices described in this Privacy Policy. We encourage you to read this document carefully so that you understand your rights and our obligations regarding your personal information.
2. Definitions
Personal Information means any factual or subjective information, recorded or not, about an identifiable individual. This includes, but is not limited to: name, email address, phone number, mailing address, billing information, IP address, device identifiers, usage data, and any other information that can be used to identify an individual, as defined under PIPEDA.
Commercial Activity means any particular transaction, act, or conduct, or any regular course of conduct that is of a commercial character, as defined under PIPEDA.
3. Our Commitment to the Ten Fair Information Principles
Fonda AI is committed to compliance with the ten fair information principles set out in Schedule 1 of PIPEDA, which form the foundation of our privacy practices:
4. Information We Collect
4.1 Information You Provide to Us
We may collect personal information that you voluntarily provide to us when you:
- Contact us through our website, email, phone, or other communication channels
- Request a consultation, quote, or proposal for our AI automation or consulting services
- Enter into a contract or service agreement with us
- Subscribe to our newsletter, blog, or other communications
- Participate in surveys, promotions, or events
- Apply for employment, freelance, or contract positions with Fonda AI
This information may include your name, email address, phone number, mailing address, company name, job title, project details, business process information, system and workflow data, billing and payment information, and any other information you choose to provide in connection with our AI automation and consulting engagements.
4.2 Information Collected Automatically
When you visit our website, we may automatically collect certain technical information, including:
- IP address and approximate geographic location
- Browser type, operating system, and device information
- Pages visited, time spent on pages, and navigation patterns
- Referring website or source
- Cookies and similar tracking technologies (see Section 10 below)
4.3 Information from Third Parties
We may receive personal information about you from third-party sources, including business partners, analytics providers, and publicly available sources. We only use this information in accordance with this Privacy Policy and applicable law.
4.4 SMS Communications and Mobile Opt-In Information
We may collect your mobile phone number when you voluntarily provide it to us through our website forms, consultation requests, service agreements, event registrations, or other communication channels and expressly opt in to receive SMS (text message) communications from us.
By providing your mobile number and opting in, you consent to receive SMS communications from Fonda AI related to:
- Appointment confirmations and reminders
- Consultation scheduling and project updates
- Service-related notifications
- Responses to inquiries you have submitted
- Limited marketing or promotional communications (where you have expressly consented)
We do not send unsolicited SMS messages. Message frequency will vary depending on your interaction with us and the nature of our services. Standard message and data rates may apply depending on your mobile carrier.
You may opt out of receiving SMS communications at any time by replying “STOP” to any message you receive from us or by contacting our Privacy Officer. Upon opting out, you will no longer receive text communications from Fonda AI unless you re-subscribe or initiate further communication.
We take SMS consent seriously and maintain records of opt-in preferences in accordance with applicable anti-spam legislation, including Canada’s Anti-Spam Legislation (CASL), where applicable.
5. Purposes for Collecting Personal Information
We collect and use personal information for the following purposes:
- To provide, deliver, and improve our AI automation solutions, consulting services, and fulfill contractual obligations
- To communicate with you about your inquiries, AI automation projects, consulting engagements, and our services
- To process payments and manage billing
- To send you marketing and promotional communications (with your consent)
- To personalize and improve your experience on our website
- To analyze website usage and optimize our digital presence
- To comply with legal obligations and enforce our agreements
- To protect against fraud, unauthorized transactions, and other liabilities
- To consider applications for employment or contract work
We will not use your personal information for any purpose other than those identified at or before the time of collection, unless we obtain your further consent or are otherwise permitted or required by law.
6. Consent
We rely on the following forms of consent as appropriate under PIPEDA:
7. Disclosure of Personal Information
We may disclose your personal information in the following circumstances:
7.1 Mobile Information and No Sale of Phone Numbers
Fonda AI does not sell, rent, trade, or otherwise share your mobile phone number or SMS opt-in information with third parties for their marketing or promotional purposes.
Mobile contact information collected through SMS opt-in forms, service inquiries, or other communications is used solely for internal business purposes, including responding to inquiries, providing requested services, and communicating regarding our AI automation and consulting engagements.
We do not share mobile numbers with third parties except:
- With authorized service providers who assist us in delivering SMS services (such as messaging platforms or communication providers), and only under contractual obligations that require confidentiality and appropriate safeguards
- Where required by law, regulation, court order, or governmental authority
If you choose not to proceed with business services, your phone number will not be used for unsolicited future calls, spam, or marketing messages. You will only receive communications that you have expressly consented to receive, and you may withdraw your consent at any time.
We implement appropriate administrative, technical, and physical safeguards to protect mobile information from unauthorized access, misuse, or disclosure.
8. Cross-Border Transfers of Personal Information
In the course of providing our AI automation and consulting services, personal information may be transferred to, stored, or processed in jurisdictions outside of Canada, including the United States or other countries where our service providers and AI platform partners operate. When personal information is transferred outside of Canada, it may be subject to the laws of the jurisdiction in which it is held, including lawful access requests by courts, law enforcement, and national security authorities.
We take reasonable steps to ensure that any third party to whom we transfer personal information provides a comparable level of protection. Contractual agreements with our service providers require them to implement appropriate safeguards and comply with applicable privacy laws.
9. Retention of Personal Information
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws and regulations. When personal information is no longer needed, we will securely destroy, erase, or anonymize it using appropriate methods.
Factors that determine retention periods include the nature of the information, the purposes for which it was collected, legal and regulatory requirements, and ongoing business needs such as maintaining records for auditing, dispute resolution, or enforcement of agreements.
10. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand how visitors interact with our site. Cookies are small text files placed on your device when you visit a website.
10.1 Types of Cookies We Use
10.2 Managing Cookies
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. Under PIPEDA, we obtain your consent before placing non-essential cookies on your device where required.
11. Safeguards
We implement physical, organizational, and technological security measures to protect personal information against unauthorized access, disclosure, copying, use, modification, loss, or theft. These safeguards include:
- Encryption of data in transit and at rest
- Access controls and authentication measures to limit access to personal information to authorized personnel
- Secure storage systems and firewalls
- Regular security assessments and vulnerability testing
- Employee training on privacy and data protection practices
- Confidentiality agreements with employees and contractors
The level of protection we apply is proportionate to the sensitivity of the personal information in our care.
12. AI-Specific Data Practices
As an AI automation agency and consultancy, Fonda AI may process data on behalf of our clients in the course of developing, implementing, and managing AI-powered automation solutions. The following practices apply specifically to our AI-related services:
13. Breach of Security Safeguards
In accordance with PIPEDA and the Breach of Security Safeguards Regulations (SOR/2018-64), Fonda AI will:
- Report to the Office of the Privacy Commissioner of Canada (OPC) any breach of security safeguards involving personal information under our control that creates a real risk of significant harm to individuals
- Notify affected individuals as soon as feasible when a breach creates a real risk of significant harm
- Notify any other organizations or government institutions that may be able to reduce the risk of harm resulting from the breach
- Maintain a record of every breach of security safeguards involving personal information under our control, regardless of whether the breach triggers reporting and notification obligations
“Significant harm” includes bodily harm, humiliation, damage to reputation or relationships, loss of employment, business or professional opportunities, financial loss, identity theft, negative effects on credit records, and damage to or loss of property.
14. Your Rights Under PIPEDA
As an individual whose personal information is held by Fonda AI, you have the following rights:
To exercise any of these rights, please contact our Privacy Officer using the information provided in Section 15. We may require you to verify your identity before processing your request.
15. Privacy Officer Contact Information
Fonda AI has designated a Privacy Officer who is accountable for our compliance with this Privacy Policy and applicable privacy legislation. If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us:
16. Office of the Privacy Commissioner of Canada
If you are not satisfied with our response to your privacy concern, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada:
17. Provincial Privacy Legislation
In addition to PIPEDA, Fonda AI acknowledges that certain provinces have enacted their own private-sector privacy legislation that may apply to our activities, including Alberta’s Personal Information Protection Act (PIPA), British Columbia’s Personal Information Protection Act (PIPA), and Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Quebec’s Law 25). Where applicable, we comply with the requirements of these provincial laws in addition to PIPEDA.
18. Children’s Privacy
Our AI automation and consulting services are directed at businesses and organizations and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child, we will take reasonable steps to delete it promptly. If you believe a child has provided us with personal information, please contact our Privacy Officer.
19. Third-Party Links
Our website may contain links to third-party websites, services, or applications. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit, as we are not responsible for their privacy practices or content.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will post the updated policy on our website with a revised effective date. We encourage you to review this Privacy Policy periodically. Your continued use of our services after any changes constitutes your acceptance of the updated policy.
21. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of Canada, including PIPEDA and applicable provincial privacy legislation. Any disputes arising under this Privacy Policy shall be subject to the jurisdiction of the courts of Canada.