Privacy Policy

Last updated: October 21, 2026

1. Who we are

This policy explains how Ryzeon ([SANDEEP TO PROVIDE: legal business name], [SANDEEP TO PROVIDE: mailing address], British Columbia, Canada) ("we", "us") collects, uses, shares and protects personal information through ryzeon.ca and our services. We follow British Columbia's Personal Information Protection Act (PIPA) and, where it applies, the federal Personal Information Protection and Electronic Documents Act (PIPEDA).

2. What we collect

  • Information you send us: name, email, phone, business name, website and your message when you use our contact or review forms, email us or book a call.
  • Reviews: the name, rating and comments you submit. We publish a review only with your permission and may show your first name and business name with it.
  • Purchases: when you pay, Stripe collects your card details and billing information. We never see or store your full card number. We receive confirmation of payment, your name, email and the amount.
  • Technical data: our host keeps standard server logs (such as IP address, browser type and pages requested) for security and reliability.
  • Analytics and advertising cookies: only if you turn them on in our cookie banner (see section 6).
  • How you found us: if you arrive from an ad or campaign link, we keep the campaign tags in the link (such as utm_source, utm_campaign, or an ad click ID) for that visit only, and include them with any form you send us so we know which ads work.

3. Why we use it

To answer inquiries, schedule calls, prepare proposals, deliver and support the services you buy, process payments and invoices, publish reviews you've approved, keep the site secure, measure our marketing (with consent), and meet legal, tax and accounting obligations.

4. Consent

We collect, use and disclose personal information with your consent, which may be express (for example, ticking a box or sending a form) or implied where the purpose is obvious. You can withdraw consent at any time by emailing us, subject to legal or contractual limits. We send commercial emails or texts only with consent and always include a way to unsubscribe, as Canada's Anti-Spam Legislation (CASL) requires.

5. Service providers we use

We share personal information only with providers that help us run the business, and only what they need:

  • FormSubmit (formsubmit.co) delivers our website form submissions to our email inbox.
  • Google (Gmail / Google Workspace) hosts our email.
  • Stripe processes card payments. Its use of your data is covered by the Stripe Privacy Policy.
  • Vercel hosts our website and keeps standard server logs.
  • Meta (Meta Pixel), only if you turn on marketing cookies (see section 6).
  • Google Analytics and Microsoft Clarity, only if you turn on analytics cookies (see section 6).

These providers may store or process data outside Canada, including in the United States, where it may be accessible to authorities under local law. We do not sell personal information.

6. Cookies and advertising

Your cookie choices

Our banner has three categories. Essential storage is always on: it keeps the site working and remembers your choice, and it does not track you. Analytics (Google Analytics 4 and Microsoft Clarity) shows us which pages are visited, how people move through the site and, with Clarity, anonymised recordings of clicks and scrolling with form fields masked. Marketing (the Meta Pixel) is described below. Analytics and marketing stay off until you choose to turn them on, and you can turn them off again at any time.

When you reach a checkout, we pass a random reference number and the campaign tags to Stripe so we can match a purchase to the ad that led to it. We don't send Meta or Google your name, email or form answers.

Advertising, the Meta Pixel and retargeting

We may use the Meta Pixel, a small piece of code from Meta Platforms, Inc. (the company behind Facebook and Instagram). It only loads if you turn on marketing cookies on our cookie banner. If you reject them, or haven't chosen yet, it does not load.

When it is on, the Pixel tells Meta which of our pages you visit, whether you send us an enquiry form, start a checkout, or click certain links (for example, a link to an ad account partner). Meta may connect this to your Facebook or Instagram account. We use it to:

  • measure whether our ads lead to visits and clicks;
  • show our ads to people who have visited our site (this is called retargeting); and
  • avoid showing ads to people who have already signed up.

We don't send Meta your name, email or form answers through the Pixel. Meta handles the data it receives under its own Privacy Policy, and it may be stored outside Canada.

How to opt out

  • Reject on our banner. Click "Reject all", or "Choose" and leave a category off, when the cookie banner appears.
  • Google Analytics opt-out. You can also install the Google Analytics opt-out browser add-on.
  • Change your mind any time. Use the "Cookie settings" link at the bottom of every page to reopen the banner and switch your choice. Clearing your browser's site data also resets it.
  • Meta ad preferences. If you use Facebook or Instagram, you can control how activity from other websites is used for ads in your Meta ad preferences.
  • Industry opt-out tools. You can opt out of interest-based ads from participating companies through AdChoices Canada (DAAC) or, in the US, the Digital Advertising Alliance (DAA).

Opting out means you may still see ads from us, but they won't be based on your visits to our site.

7. AI tools

With your permission, we may record and transcribe consultation and project calls (for example with Google Meet and Gemini note-taking) to keep accurate project notes; we ask at the start of each call, you can decline at any time, and recordings and notes are kept in our client records only as long as needed for your project. We use generative AI tools in our work, and the AI assistants we build for clients identify themselves as AI. We avoid putting sensitive personal information into AI tools and don't use your information to train public AI models. See our AI Use & Disclosure.

8. Client data

When we build or run AI bots, automations or ads for a client, we handle their customers' information on the client's behalf and under the client's instructions. The client remains responsible for that information and for getting any consent it needs.

9. How long we keep it

We keep personal information only as long as needed for the purposes above. Inquiries that don't become projects are generally deleted within 24 months. Payment and invoice records are kept as long as Canadian tax law requires (generally six years).

10. Safeguards

We use reasonable safeguards, including encrypted (HTTPS) connections, reputable providers, two-factor sign-in on our accounts and limiting access to people who need it. No method is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected people and regulators as the law requires.

11. Your rights

You can ask to see the personal information we hold about you, ask us to correct it, or withdraw consent. Email us and we'll respond within 30 days. If you're not satisfied, you can contact the Office of the Information and Privacy Commissioner for BC or the Office of the Privacy Commissioner of Canada.

12. Children

Our services are for businesses and are not directed at children under 19.

13. Changes

We'll post any updates on this page and change the date at the top.

14. Contact

Privacy questions or requests: Sandeep Sundher, Privacy Officer, hello@phoenixlegionai.com, [SANDEEP TO PROVIDE: mailing address].