Privacy Policy

Last Updated: 12th Feb, 2026

 

This Privacy Policy describes how Hyzstack Labs Inc. ("Company", "we", "our", or "us") collects, uses, discloses, and safeguards information in connection with the Vector SaaS platform ("Platform").

The Platform provides embeddable AI-powered chatbot services to business clients. Data residency for the Platform is in Canada.

1. Scope

This Privacy Policy applies to:

  • Business clients who subscribe to the Platform;
  • End users who interact with chatbots powered by the Platform;
  • Visitors to our website and administrative portals.

This Policy does not apply to third-party services not controlled by us.

2. Information We Collect

2.1 Client Account Information

  • Name
  • Email address
  • Business information
  • Billing details
  • Subscription plan information

2.2 End-User Chat Data

When end users interact with a chatbot powered by the Platform, we may process:

  • Messages submitted by the user
  • Uploaded documents (if enabled by the client)
  • Contact details voluntarily submitted (e.g., name, email, phone number)
  • Session identifiers

We do not require end users to create accounts to use embedded chat widgets.

2.3 Technical Information

  • IP address
  • Device and browser type
  • Timestamps
  • Session identifiers
  • System logs

3. How We Use Information

We use collected information to:

  • Provide and operate the Platform;
  • Process chatbot queries;
  • Generate AI responses using large language model providers;
  • Maintain conversation history (as configured by clients);
  • Enforce subscription limits and rate limits;
  • Improve system performance and reliability;
  • Provide customer support;
  • Comply with legal obligations.

4. Data Processing and AI Providers

The Platform uses third-party AI model providers to generate responses. Chat content may be securely transmitted to these providers for processing. We contractually require service providers to use data solely for providing services and not for independent purposes.

We do not sell personal information.

5. Data Residency

Primary infrastructure for the Platform is hosted in Canada. Client data, including documents and vector databases, are stored in Canadian data centers.

Certain processing activities (such as AI model inference) may involve cross-border data transfers depending on the model provider selected.

6. Data Isolation

The Platform is multi-tenant. Each client’s data is logically isolated using client-specific identifiers. Clients cannot access other clients’ data.

7. Legal Basis and Canadian Compliance

We operate in alignment with the principles of the Personal Information Protection and Electronic Documents Act (PIPEDA), including:

  • Accountability
  • Identifying purposes
  • Consent
  • Limiting collection
  • Limiting use, disclosure, and retention
  • Accuracy
  • Safeguards
  • Openness
  • Individual access
  • Challenging compliance

While we design our Platform to align with Canadian privacy standards, we do not claim formal certification or regulatory endorsement.

8. Data Retention

We retain information only as long as necessary to:

  • Provide services under active subscriptions;
  • Comply with legal requirements;
  • Resolve disputes;
  • Enforce agreements.

Clients may request deletion of their data upon termination of service.

9. Security Measures

We implement administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, or misuse, including:

  • Encrypted transmission (HTTPS/TLS);
  • Authentication via signed tokens;
  • Rate limiting and abuse detection;
  • Access controls;
  • Infrastructure monitoring.

No system can guarantee absolute security.

10. End-User Rights

Subject to applicable law, individuals may request:

  • Access to their personal information;
  • Correction of inaccurate information;
  • Deletion of personal information where applicable.

Requests should be submitted through the business client whose chatbot was used.

11. Lead Information

If a chatbot collects contact details (such as email or phone number) for lead generation, that information is transmitted to the subscribing client and processed according to that client’s own privacy policy.

12. Children’s Privacy

The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted on this page.

14. Contact Information

Hyzstack Labs Inc.
Canada
Email: admin@hyzstack.com