Privacy Policy

BITRAGE.AI · Stony Plain, Alberta · Effective April 24, 2026 · PIPEDA-compliant

1. Who we are

BITRAGE.AI ("BITRAGE.AI", "we", "us") operates BITRAGE.AI at bitrage.ai. We're a Canadian small business based in Stony Plain, Alberta. We're subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

2. What information we collect

When you fill out a form on bitrage.ai, we collect:

• Your name and email address (required)
• Your phone number (optional)
• Your business location (optional)
• Information about the business you're starting (business type, stage, goals)
• Your IP address, browser user-agent, and referring URL (automatically captured for security)

3. How we use your information

We use your information to:

• Contact you about your inquiry within 24 hours
• Customize the Launchpad onboarding to your specific business
• Send you a confirmation email and follow-up communications about your business setup
• Improve our service based on aggregate trends (we never sell or share individual data)

4. AI and automated processing

BITRAGE.AI uses AI agents to handle parts of customer service, including initial call answering, lead qualification, and quote drafting. When you call our number, an AI agent may answer first; a real human (your Agent Operator) reviews every interaction. You always have the right to speak directly to a human by asking. We disclose AI use in customer-facing communications consistent with PIPEDA transparency requirements.

5. Where your data lives

Your contact information is stored in Supabase (a database service hosted in North America). Transactional email is sent via Zoho ZeptoMail (api.zeptomail.ca, Canadian region). The bitrage.ai website is hosted on Cloudflare Pages. AI agents that draft customer-facing copy use Anthropic Claude (US-region inference; no training on your data per Anthropic's enterprise terms). We do NOT host your business financial data — that lives in your bookkeeping software (Wave Accounting as the default freemium tier; QuickBooks Online Canada at $35 CAD/mo for clients above $5K/mo revenue), your Float / RBC bank account, and other third-party accounts that are in your name.

6. Your rights under PIPEDA

Under PIPEDA you have the right to:

• Access the personal information we hold about you
• Correct any inaccurate information
• Withdraw consent for us to use your information at any time
• Request deletion of your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca)

To exercise any of these rights, email us at [email protected].

7. Data retention

We retain intake form data for 24 months unless you request deletion sooner. After 24 months, inactive leads are anonymized (name, email, phone removed; aggregate trend data retained).

8. Cookies

bitrage.ai uses minimal cookies:

• Session cookies for form submissions (deleted when you close your browser)
• Cloudflare security cookies (anti-bot protection)
• Analytics cookies (privacy-respecting; no individual tracking)

We do NOT use third-party advertising trackers, pixels, or fingerprinting.

9. Security

We use industry-standard encryption (HTTPS, TLS 1.3) for all data in transit. Passwords (when you become a customer) are hashed using bcrypt. Database backups are encrypted at rest. We restrict employee access to customer data on a need-to-know basis.

10. Changes to this policy

If we make material changes to this policy, we'll email all active customers at least 30 days before changes take effect.

11. Contact us

Privacy questions or requests (including PIPEDA right-to-portability, deletion, or correction):
Email: [email protected]
Mail: BITRAGE.AI, Stony Plain, Alberta, Canada
Phone: available on request via [email protected]

We also expose two automated endpoints for the rights named above:

• Data export (PIPEDA right to portability): POST /api/customer-data-export with your customer access code — returns a JSON archive of every row tied to your account.
• Data deletion (right to be forgotten): POST /api/customer-data-delete with your customer access code + emailed confirmation token — anonymizes / deletes your personal data from our systems within 5 business days.

Federal Privacy Commissioner: priv.gc.ca · Alberta Privacy Commissioner: oipc.ab.ca