Effective Date: June 15, 2026
Last Updated: June 15, 2026
This Privacy Notice explains how Governantic.AI Inc., operating as Governantic.AI (“Governantic.AI,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information when you visit our website, use our artificial intelligence tools, communicate with us, or otherwise interact with our products and services.
This Privacy Notice applies to our website, platform, artificial intelligence tools, software, reports, dashboards, workflows, forms, communications, and related services (collectively, the “Services”).
This Privacy Notice is designed to support transparency under applicable privacy and data protection laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), substantially similar provincial privacy laws where applicable, and, where relevant, international privacy frameworks such as the General Data Protection Regulation (GDPR), the UK GDPR, and U.S. state privacy laws.
By using the Services, you acknowledge that you have read and understood this Privacy Notice.
Key Question | Our Stance & Commitment |
Do we sell or share your data? | No. We do not sell your personal information for money or share it for cross-context behavioural advertising, as those terms may be defined under applicable privacy laws. |
Do we train third-party AI models on your inputs? | No. We do not use customer prompts, uploaded corporate documents, or generated customer outputs to train third-party foundation models. |
Can humans review customer content? | Human access to customer content is limited to authorized personnel and only where necessary to provide support, investigate security or abuse issues, troubleshoot technical problems, comply with legal obligations, or as otherwise permitted by agreement. |
What is our legal basis for processing? | Depending on your location and the context, we may rely on contractual necessity, legitimate interests, compliance with law, or consent. |
Where is data stored and processed? | Personal information may be processed in Canada, the United States, the United Kingdom, the European Economic Area, and other jurisdictions where we or our service providers operate. |
Can users request access, correction, or deletion? | Yes, subject to applicable law, verification, contractual restrictions, and legal retention obligations. |
Governantic.AI provides AI-enabled tools and services designed to support governance, compliance, policy, operational, risk management, and related activities.
Depending on the circumstances, Governantic.AI may act as:
Where we process personal information on behalf of a customer, that customer is responsible for providing any required privacy notices, obtaining any required consents or legal authorizations, and ensuring that its use of the Services complies with applicable laws and internal policies.
We may collect personal information directly from you, automatically through your use of the Services, or from third parties where permitted by law.
The personal information we collect may include:
You should not submit highly sensitive personal information, such as health or medical information, biometric identifiers, precise financial account numbers, government identification numbers, information about children, or information revealing political opinions, religious beliefs, union membership, sexual orientation, or similar sensitive characteristics, unless strictly required and explicitly governed by a separate written agreement with us.
Governantic.AI uses artificial intelligence technologies, which may include generative AI systems, machine learning models, natural language processing tools, automated classification systems, analytics tools, and third-party AI model providers.
When you use the Services, your prompts, uploaded materials, instructions, documents, usage data, and generated outputs may be processed by AI systems to provide responses, generate content, support workflows, improve functionality, detect abuse, maintain security, troubleshoot issues, and evaluate system performance.
AI systems process information probabilistically and may generate inaccurate, incomplete, outdated, or unexpected outputs. You should avoid submitting unnecessary personal information to AI tools and should carefully review any AI-generated output before relying on it or using it in a business, legal, compliance, regulatory, employment, financial, or operational context.
We use third-party AI model providers and related technology providers to help deliver the Services.
We configure these providers, where available and commercially reasonable, to limit retention of customer prompts, uploaded files, and generated outputs and to prevent such content from being used to train third-party foundation models.
Unless expressly stated in a separate written agreement, Governantic.AI does not use customer prompts, uploaded corporate documents, or generated customer outputs to train third-party foundation models.
If Governantic.AI develops, fine-tunes, or trains proprietary models using customer content in the future, we will do so only where permitted by applicable law and our agreements with customers, and with appropriate notice, safeguards, and controls.
Human access to customer content is limited to authorized Governantic.AI personnel and service providers who require access for legitimate business, security, legal, or operational purposes.
For example, limited human review may occur where necessary to:
We do not use human review as a substitute for customer responsibility. Customers and users remain responsible for reviewing, validating, and approving AI-generated outputs before relying on them.
We may collect and use personal information for the following purposes:
Where privacy or data protection laws require us to identify a legal basis for processing personal information, we may rely on one or more of the following grounds, depending on the context:
Where we rely on consent, you may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice. If you withdraw consent, we may no longer be able to provide certain Services.
We may use cookies, pixels, local storage, analytics tools, and similar technologies to operate the website, authenticate users, remember preferences, maintain security, understand how users interact with the Services, improve performance, and support marketing activities.
These technologies may collect information such as IP address, browser type, device information, pages visited, referring URLs, interactions with the Services, and session activity.
Where required by law, we will provide appropriate choices or obtain consent for non-essential cookies or similar technologies.
You can manage cookies through your browser settings. If you disable certain cookies, some features of the Services may not function properly.
We do not sell your personal information for monetary profit or share it with third parties for cross-context behavioural advertising, as those terms may be defined under applicable privacy laws.
We may disclose personal information to the following categories of recipients:
Governantic.AI may use subprocessors and service providers to host, operate, secure, support, analyze, and improve the Services. These may include cloud hosting providers, AI model providers, analytics tools, customer support platforms, payment processors, security vendors, software providers, and professional service providers.
We take reasonable steps to assess our service providers and require them to protect personal information through appropriate contractual, technical, and organizational safeguards.
A current list of material subprocessors may be made available upon request or through a dedicated subprocessor page, where applicable.
Subprocessor List: [Insert link to subprocessor list or insert table of subprocessors here.]
Suggested table format:
Subprocessor | Service Provided | Processing Location(s) | Type of Data Processed | Link to Privacy/Security Information |
[Insert name] | [Insert service] | [Insert location] | [Insert data type] | [Insert link] |
[Insert name] | [Insert service] | [Insert location] | [Insert data type] | [Insert link] |
Governantic.AI may operate globally. Personal information may be transferred to, stored in, or accessed from jurisdictions outside your province, state, or country of residence, including Canada, the United States, the United Kingdom, the European Economic Area, and other jurisdictions where we or our service providers operate.
In those jurisdictions, personal information may be subject to local laws and may be accessible to courts, law enforcement, regulators, or government authorities.
Where required by applicable law, we use appropriate contractual, technical, and organizational safeguards for cross-border transfers. These may include standard contractual clauses, data processing agreements, transfer impact assessments, vendor due diligence, access controls, encryption, and other safeguards designed to protect personal information.
We prioritize the privacy of enterprise data.
We do not use customer prompts, uploaded corporate documents, or generated customer outputs to train third-party foundation models.
To improve the Services, we may use aggregated, anonymized, or de-identified technical and usage information, such as system latency, feature usage trends, error logs, diagnostic information, token volume, and performance metrics, for benchmarking, analytics, security, quality assurance, product development, and service optimization.
We will not attempt to re-identify anonymized information except where permitted or required by law, such as to test the effectiveness of de-identification measures or investigate security incidents.
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Notice, provide the Services, comply with legal and contractual obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.
Retention periods vary depending on the type of information and the context in which it is processed. For example:
When personal information is no longer required, we will delete, anonymize, or securely dispose of it in accordance with applicable law and our retention practices.
We maintain reasonable physical, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, loss, theft, and destruction.
These safeguards may include encryption in transit and at rest, access controls, authentication measures, role-based permissions, logging and monitoring, vendor due diligence, confidentiality obligations, security reviews, employee training, backup controls, and incident response procedures.
No website, platform, system, method of transmission, or method of storage is completely secure. Accordingly, we cannot guarantee absolute security.
If you suspect that your account or information has been compromised, please contact us promptly using the contact details below.
If we become aware of a privacy breach or security incident involving personal information, we will assess the incident and take steps that we consider appropriate in the circumstances.
Where required by applicable law, we will notify affected individuals, customers, regulators, privacy commissioners, supervisory authorities, or other parties.
If you believe that your account or information has been compromised, please contact us promptly.
The Services may use AI systems and automated processing to generate outputs, summaries, classifications, recommendations, workflows, or other results requested by users.
Governantic.AI does not intend the Services to be used as the sole basis for decisions that produce legal, employment, financial, regulatory, or similarly significant effects on individuals. Customers and users are responsible for ensuring appropriate human review, validation, and oversight before relying on AI-generated outputs.
Where required by applicable law, individuals may have the right to request information about automated processing, express their views, contest a decision, or request human intervention.
Depending on where you are located and the laws that apply, you may have some or all of the following rights:
To exercise privacy rights, please contact us using the contact details below. We may need to verify your identity before responding to your request.
Where we process personal information on behalf of a customer, we may refer your request to that customer or cooperate with the customer in accordance with our contractual obligations.
If you receive promotional communications from us, you may opt out at any time by clicking the “Unsubscribe” link at the bottom of an email or by contacting us.
Even if you opt out of marketing communications, we may still send you transactional, administrative, legal, security, or service-related messages regarding your account or use of the Services.
The Services are designed for businesses, organizations, and adult professionals. They are not intended for children or minors.
We do not knowingly collect personal information from individuals under the age of 16, or under the applicable age of majority or digital consent in the relevant jurisdiction, without appropriate consent or legal authorization.
If you believe that a child has provided personal information to us, please contact us so that we can take appropriate steps.
If you use the Services on behalf of an organization, your organization is responsible for ensuring that it has established a lawful basis, provided appropriate notices, obtained necessary consents or authorizations, and implemented appropriate governance controls before submitting personal information or third-party data to the Services.
Customers are also responsible for ensuring that their use of the Services complies with applicable privacy, data protection, employment, public sector, professional responsibility, confidentiality, procurement, records management, and contractual obligations.
The Services may contain links to third-party websites, tools, platforms, integrations, or services.
We are not responsible for the privacy practices, security, content, or policies of third parties. You should review the privacy notices and terms of any third-party services that you access or use.
We may update this Privacy Notice from time to time to reflect changes in our Services, legal requirements, regulatory expectations, technology, or privacy practices.
The updated version will be posted on our website with a revised “Last Updated” date.
Your continued use of the Services after an updated Privacy Notice is posted means that you acknowledge the updated notice, subject to any additional consent requirements under applicable law.
If you have questions about this Privacy Notice or our privacy practices, or if you wish to exercise your privacy rights, please contact:
Governantic.AI Inc.
Attention: Privacy Officer
Email: privacy@governantic.ai
Address: [Insert mailing address]
For individuals in the European Economic Area or the United Kingdom, if Governantic.AI designates an external regional representative under applicable law, the representative’s contact details will be provided here:
EU/UK Representative: [Insert representative name, address, and contact details, if applicable.]
If you have a privacy concern, we encourage you to contact us first so that we can try to resolve it.
Depending on your location, you may also have the right to lodge a complaint with a privacy regulator, supervisory authority, or data protection authority, including the Office of the Privacy Commissioner of Canada, an applicable provincial privacy commissioner, an EU Data Protection Authority, the UK Information Commissioner’s Office, or another competent authority in your jurisdiction.
Governantic.AI monitors emerging Canadian, U.S., European, and international privacy and AI governance developments and may update this Privacy Notice as applicable laws, regulatory expectations, and industry standards evolve.