Privacy Policy
18178160 CANADA INC., operating as Archetypes AI ("Company," "we," "us," or "our") respects your privacy and is committed to protecting it through our compliance with this Privacy Policy ("Policy"). This Policy describes the types of personal information we may collect from you or that you may provide when you visit getarchetypes.com, use Archetypes AI, or otherwise interact with us (collectively, the "Services"), and our practices for collecting, using, maintaining, protecting and disclosing that information. For purposes of the EU and UK General Data Protection Regulation ("GDPR"), we are the controller of the personal information described in this Policy.
1. Scope of This Policy
This Policy applies to information we collect through the Services, in email and other communications between you and us, and from the third parties described in Section 2.3. This Policy does not apply to personal information that our business customers submit to the Services about other individuals ("Customer Data"). We process Customer Data on behalf of the relevant business customer under our Data Processing Addendum, and that customer's privacy policy governs it. Requests regarding Customer Data should be directed to the relevant business customer.
2. Information We Collect
2.1 Information You Provide Directly. When you create an account, purchase a subscription, contact us, or otherwise use the Services, we may collect:
- first and last name, email address, company name and job title;
- account credentials (passwords are stored in hashed form);
- content you submit to the Services, including prompts and other inputs to our artificial intelligence features ("Inputs"), and the content those features generate for you ("Outputs");
- communications you send us, including support requests and survey responses; and
- your marketing and communication preferences.
2.2 Information We Collect Automatically. As you use the Services, we may automatically collect:
- device information, including IP address, browser type, operating system and language preferences;
- usage details, including pages visited, features used, referring URLs, timestamps and error logs; and
- email engagement data, including whether you opened our emails and which links you clicked.
2.3 Information We Receive From Third Parties. Our merchant of record, Stripe, through its Link service ("Link"), processes your payment details. We receive from Stripe your name, email address, country, subscription plan, and transaction and tax records, but never your full payment card number.
We do not knowingly collect sensitive personal information, such as health or financial-account information, about users of the Services.
3. Cookies and Similar Technologies
This Section serves as our Cookie Policy. Cookies are small text files placed on your device by websites you visit.
We use only strictly necessary Cookies, which enable core functionality such as authenticating logged-in users, securing the Services and remembering your preferences. These Cookies do not require consent and cannot be turned off in our systems. We do not use analytics, advertising or targeting Cookies.
We use Google Search Console to understand how our website appears in Google search results; it does not place Cookies on your device through the Services. When you check out, Stripe may set Cookies on its checkout page for fraud prevention, under its own cookie policy. If we introduce non-essential Cookies, we will update this Policy and obtain your consent where required.
4. How We Use Your Information
We use the information we collect for the purposes below. Where the GDPR applies, the legal basis for each purpose is shown in the table.
| Purpose | Legal basis (GDPR) |
|---|---|
| To provide, operate and maintain the Services and your account | Performance of a contract |
| To process subscriptions, renewals and refunds through Link | Performance of a contract; compliance with a legal obligation |
| To respond to your inquiries and provide support | Performance of a contract |
| To detect, prevent and respond to fraud, abuse and security incidents | Legitimate interests in protecting our users and the Services |
| To analyze usage and improve the Services | Legitimate interests in developing our product |
| To send marketing communications | Consent, or legitimate interests where permitted by law for existing customers |
| To comply with legal, tax and accounting obligations and enforce our Terms of Service | Compliance with a legal obligation; legitimate interests |
| To provide our artificial intelligence features, including by processing your Inputs with our service providers to generate Outputs | Performance of a contract |
Under Canadian privacy law, we rely on your consent, which may be implied for purposes necessary to provide the Services and is express where the law so requires. You may withdraw your consent at any time, subject to legal or contractual restrictions, although doing so may prevent us from providing the Services.
We do not sell your personal information, use it for targeted advertising, use your Inputs or Outputs to train artificial intelligence models without your consent, or make decisions about you based solely on automated processing that produce legal or similarly significant effects.
5. How We Share Your Information
We may disclose personal information:
- to service providers that host, operate and support the Services on our behalf, under contracts that restrict their use of the information (the categories appear in Annex 3 of our Data Processing Addendum, and the current list is available on request);
- to Stripe, which processes your order, payment and tax information through Link as an independent controller under its own privacy policy, available at https://stripe.com/privacy;
- to our professional advisers, such as lawyers and accountants, who are bound by duties of confidentiality;
- to a buyer or other successor in the event of a merger, acquisition, reorganization or sale of all or part of our business, subject to equivalent protections;
- to comply with any court order, law or legal process, or to respond to a lawful government or regulatory request; and
- where we believe disclosure is necessary to protect the rights, property or safety of the Company, our users or others.
6. Data Retention
We retain personal information only as long as necessary for the purposes described in this Policy, as follows:
| Category | Retention period |
|---|---|
| Account information | Duration of your account, plus thirty (30) days; backups are deleted within ninety (90) days |
| Billing, tax and accounting records | Six (6) years after the end of the tax year to which they relate, as required by Canadian tax law |
| Support communications | Two (2) years after the request is closed |
| Security and usage logs | Up to ninety (90) days |
| Marketing preferences | Until you unsubscribe, after which we retain a suppression record to honour your choice |
When we no longer need personal information, we delete or anonymize it.
7. Data Security
We have implemented technical and organizational measures designed to protect personal information from accidental loss and from unauthorized access, use, alteration and disclosure, including encryption in transit and at rest, access controls with multi-factor authentication, and monitoring. However, no method of transmission or storage is completely secure. If a security breach creates a real risk of significant harm to you, we will notify you and the relevant regulatory authorities as required by applicable law.
8. International Data Transfers
The Company is based in Canada, and our service providers store and process personal information in the United States. Personal information stored or processed outside your jurisdiction may be accessible to the courts, law enforcement and national security authorities of the jurisdiction in which it is located.
The European Commission and the United Kingdom have recognized Canada as providing an adequate level of protection for personal information transferred to organizations subject to Canada's Personal Information Protection and Electronic Documents Act. Where we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to a jurisdiction without such recognition, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or the EU-U.S. Data Privacy Framework. You may request a copy of these safeguards by contacting us.
9. Your Rights and Choices
9.1 Your Rights. Depending on your jurisdiction of residence, you may have the right to:
- access the personal information we hold about you;
- correct inaccurate or incomplete personal information;
- request deletion of your personal information;
- receive your personal information in a portable format;
- restrict or object to our processing, including for direct marketing; and
- withdraw consent where processing is based on consent.
To exercise these rights, contact us at edwin@getarchetypes.com. We may need to verify your identity before fulfilling your request, and we will respond within thirty (30) days or any shorter period required by applicable law.
9.2 Canada. Our Privacy Officer is accountable for our compliance with Canadian privacy law and may be contacted using the details in Section 13. You may file a complaint with the Office of the Privacy Commissioner of Canada or, if you reside in Quebec, the Commission d'accès à l'information du Québec.
9.3 European Economic Area, United Kingdom and Switzerland. You have the rights listed in Section 9.1 under the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection, as applicable, and the right to lodge a complaint with your local data protection authority.
9.4 Email Communications. You may unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in any such email or by contacting us. We may continue to send transactional and account-related messages.
10. Children's Privacy
The Services are not directed to individuals under eighteen (18) years of age, and we do not knowingly collect their personal information. If we learn that we have collected such information, we will delete it promptly.
11. Third-Party Links and Services
The Services may contain links to third-party websites and integrations that we do not control. We are not responsible for their privacy practices, and we encourage you to review their privacy policies.
12. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will post the updated Policy, update the Effective Date above, and notify you by email or through the Services before the changes take effect.
13. Contact Us
If you have any questions, comments or requests regarding this Policy, please contact our Privacy Officer:
18178160 CANADA INC.
Attn: Privacy Officer
300 Sheppard Ave W, Unit 101-60, Toronto, ON M2N 1N5
Email: edwin@getarchetypes.com