This Privacy Policy explains how Oimpact (Open Impact) (“we,” “us,” “our”), a corporation registered in British Columbia, Canada, collects, uses, discloses, and protects your personal information. We are committed to complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
This policy applies to anyone who:
We collect only what is necessary to provide our Services.
Information you provide directly:
Information collected automatically:
Information we do NOT collect:
We use your personal information only for the following purposes:
| Purpose | Legal Basis |
|---|---|
| Providing and improving our Services | Contract performance |
| Account management and authentication | Contract performance |
| Billing and payment processing | Contract performance |
| Responding to your requests and support | Legitimate interest |
| Sending service-related notices | Contract performance |
| Improving AI agent performance (anonymized) | Legitimate interest |
| Complying with legal obligations | Legal requirement |
We do not sell your personal information. We do not use it for advertising targeting without your explicit consent.
What you send to our agents: Text, files, or data you submit as input may be processed by third-party AI providers (such as Anthropic). Please do not submit sensitive personal information (SIN, health records, passwords, financial account details) to our agents.
How inputs are handled: Your inputs may be transmitted to third-party AI APIs to generate responses. We do not use your specific inputs to train AI models without your consent.
Retention: Input/output logs are retained for 90 days for debugging purposes, then deleted.
We do not sell, rent, or trade your personal information.
We share only as necessary:
Service providers: We use third-party companies to help operate our Services (payment processing, cloud hosting, email delivery, AI APIs). These providers are contractually bound to protect your data and use it only for the services they perform for us.
Legal requirements: We may disclose your information if required by law, court order, or government authority.
Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before this occurs.
With your consent: For any other purpose, only with your explicit consent.
Our agents are powered by third-party AI infrastructure. Key providers include:
When you use our agents, your inputs may be processed by these providers. We encourage you to review their privacy policies.
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 3 years |
| Agent input/output logs | 90 days |
| Payment records | 7 years (CRA requirement) |
| Consent records | 7 years |
| Support communications | 2 years |
We will delete or anonymize your information when it is no longer needed for the purposes above.
We implement reasonable technical and organizational measures to protect your personal information, including:
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we will notify you promptly in the event of a breach affecting your personal information as required by PIPEDA.
You have the right to:
To exercise these rights, contact us at privacy@oimpact.ai. We will respond within 30 days.
Our website may use cookies for:
You can control cookies through your browser settings. Declining non-essential cookies will not affect core functionality.
We will ask for your consent before placing non-essential cookies.
Our Services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, contact us immediately and we will delete it.
Our servers and service providers may be located outside Canada, including in the United States. By using our Services, you consent to the transfer of your information to these jurisdictions, which may have different privacy laws than Canada.
Where we transfer data outside Canada, we ensure appropriate safeguards are in place (contractual clauses, adequacy assessments).
We will notify you of material changes to this policy by email or prominent website notice at least 14 days in advance. The “Last updated” date at the top will always reflect the current version.
Privacy Officer
Email: privacy@oimpact.ai
If you are unsatisfied with our response, you may contact:
Office of the Privacy Commissioner of Canada
Website: priv.gc.ca
Phone: 1-800-282-1376