Privacy Policy

BVRAI Inc. (“BVRAI”, “we”, “us”) is a Canadian-incorporated company that operates the website at bvrai.ca, the Automax desktop application, and the supporting backend services. This policy explains how we collect, use, share, and protect information about you when you use any of these.

For questions about this policy or your data, contact support@bvrai.ca.

This policy applies to information we collect through the BVRAI website, the Automax desktop application, and the backend services that support those products. It does not cover websites or services we link to but don’t operate.

We collect the following categories of information:

• Account information. Email address, display name, and a hashed password (handled by Firebase Authentication; we never see your raw password). If you sign in with Google, we receive your email and basic profile data from Google.
• Billing information. Payment is processed by Stripe. We receive limited billing metadata (subscription status, invoice history, billing address country/postal code) but do not store full credit-card numbers.
• Service usage data. When you use Automax features, we collect data necessary to operate them: AI prompts and responses (proxied through our backend), file storage uploaded by you, phone-call metadata (timestamps, durations, numbers dialled), video-call metadata (timestamps, durations, room participants), and e-signature requests. Some of this data is sent to and processed by third-party providers listed below.
• Technical and log data. IP address, user agent, request timestamps, error logs, and similar information generated automatically when you use the service. We use this for security, debugging, and abuse prevention.
• Cookies. The website currently uses only essential first-party cookies necessary for authentication sessions. We do not use third-party advertising, marketing, or analytics cookies at this time. If we add such cookies in the future, we will request your consent where required.

• To deliver the service you requested and the features you use.
• To bill you and process payments.
• To provide customer support.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To improve the product, including through aggregated and de-identified analysis of usage patterns.
• To comply with legal obligations (tax, accounting, breach notification, valid law-enforcement requests).

We share information with third-party service providers that help us operate the service. These providers are bound by their own privacy commitments and process information only as needed to deliver their services to us. Our current list of significant providers:

• Stripe — payments and billing.
• Google (Firebase, Cloud) — authentication, database, file storage, push messaging.
• Vercel — web hosting and edge delivery for the bvrai.ca site.
• Anthropic, OpenAI, xAI, Google AI, OpenRouter, and similar AI providers — processing of AI prompts and responses. We may add or change AI providers as the product evolves.
• Twilio — phone calling and SMS features.
• Daily.co — video calling features.
• An e-signature service provider — electronic signature features.
• Other vendors we may engage to operate the service. We will update this list when we add a vendor that processes a meaningful amount of personal data.

We may also share information when required by law, in response to valid legal process, to protect rights and safety, or in connection with a corporate transaction such as a merger or acquisition.

The service is operated primarily from infrastructure located in the United States. Firebase data lives in the US-EAST1 region; Stripe processes payments in the United States; AI providers process prompts in their own infrastructure (typically United States, sometimes Europe). By using the service you consent to your information being transferred to and processed in jurisdictions outside Canada, including the United States, where data-protection laws may differ from your jurisdiction.

We retain your information for as long as your account is active and for a reasonable period afterwards to meet legal, financial, and regulatory obligations. Billing records are typically retained for up to seven years to comply with Canada Revenue Agency requirements. AI usage logs are retained for the duration of the current billing period plus a reasonable diagnostic window. You may request deletion of your account and associated data; we will honour the request subject to overriding legal obligations.

Depending on where you live, you have rights regarding your personal information, including under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec Law 25, and similar laws in other jurisdictions. These typically include the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion (subject to retention obligations described above).
• Withdraw consent for optional processing.
• Lodge a complaint with the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec, as applicable.

To exercise these rights, email support@bvrai.ca. We will respond within 30 days.

We implement reasonable technical and organizational safeguards to protect your information, including encryption in transit, hashed password storage via Firebase Authentication, and principle-of-least-privilege access controls for our team and backend services. We continue to invest in improving these safeguards.

That said, no system is perfectly secure and we cannot guarantee that your information will never be exposed. If a security incident affects your data, we will notify you and applicable regulators in accordance with our legal obligations.

The service is not intended for children under the age of 16, and we do not knowingly collect personal information from them. If you believe we have collected information from a child, please contact us and we will delete it.

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. For material changes, we will notify you by email or through an in-product notice before the changes take effect.

For privacy questions, requests, or complaints, contact support@bvrai.ca.