Privacy Policy

Effective October 14, 2026

This Privacy Policy explains how Unleashed Labs Inc ("we", "us") collects, uses and protects information about you when you visit unleashedhq.app or use Unleashed HQ. We handle personal information under Québec's Act respecting the protection of personal information in the private sector ("Law 25"), Canada's PIPEDA, the EU/UK GDPR where applicable, and the California CCPA/CPRA where applicable.

1. Who we are

Unleashed HQ is operated by Unleashed Labs Inc, a corporation registered in the Province of Québec, Canada. We are the party responsible for the personal information collected through unleashedhq.app and the Unleashed HQ service. You can reach us, including our designated Privacy Officer, at privacy@unleashedhq.app.

This policy covers the Unleashed HQ website and the Unleashed HQ service (together, the "Service"): an AI employee that answers calls and texts for your business, plus the CRM tools that come with it.

2. What we collect

Information you give us. When you sign up and when we set up your AI employee, we collect your name, email address, phone number, business name and business details such as your hours, services, prices and calendar.

Payment information. Payments are handled by a third-party payment processor. We do not store full card numbers or security codes. We may receive limited details from the processor, such as the last four digits of the card, the billing country, the amount and a transaction ID, for accounting purposes.

Information collected automatically. When you visit the site, we and our hosting provider may automatically collect your IP address (used for routing and abuse detection), browser type, language, operating system and device characteristics, the pages viewed, the referring URL and timestamps.

Service data. While the Service runs for your business, it processes call recordings, transcripts, text messages and the contact details of the people who call or text your business.

3. Data about your customers

When the AI employee talks to people who call or text your business, we process their information on your behalf to provide the Service to you. You decide what to do with that information.

You are responsible for telling those people how their information is used and for having a lawful basis to use the Service with them, including their consent to record calls where the law requires it.

4. How we use it

We use your information to provide, run and support the Service, to set up and configure your AI employee, to bill you, to keep the Service secure and prevent abuse, to answer your questions, and to meet our legal obligations. We do not use it for anything unrelated to those purposes.

5. Legal basis

Where the GDPR applies, we rely on these legal bases.

Contract: to provide the Service and the features you asked for.

Legitimate interests: to operate and secure the Service and the site, balanced against your rights.

Consent: for anything that needs it, including any non-essential cookies if we ever add them. You can withdraw consent at any time.

Legal obligation: to comply with applicable laws, including tax and consumer protection rules.

6. How we share information

We do not sell your personal information. We share it only in these limited circumstances.

Service providers. We use companies that host and store data, process payments, and run the phone, messaging and AI features of the Service on our behalf. They may use the information only to provide their service to us.

Legal compliance. We may share information when required by law or court order, or to protect the rights, property or safety of our customers, ourselves or others.

Business transfers. If we are involved in a merger, acquisition, financing or sale of assets, personal information may be transferred. We will give notice before it becomes subject to a different policy.

7. Cookies

This site uses only the cookies and storage that are necessary to load and run it. We do not use advertising cookies. We do not currently use analytics. If we add analytics later, we will update this policy first.

8. Data retention

We keep personal information only as long as needed for the purposes in this policy, or as required by law. In practice:

Service data (call recordings, transcripts, messages and contact details) is kept while your account is active and as needed to provide the Service, then deleted or anonymized unless the law requires us to keep it longer.

Transaction and accounting records are kept for the period required by Canadian tax law (currently 6 years).

Server logs are kept for a rolling 90-day window.

9. Security

We take reasonable technical and organizational measures to protect personal information against loss, theft, unauthorized access, disclosure, copying, use or modification. These include HTTPS encryption, trusted hosting infrastructure and limited access to personal information on a need-to-know basis. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We operate from Canada. Our service providers may store and process personal information in the United States, the European Union or other countries. When personal information moves across borders, we rely on the protections recognized under Law 25 and PIPEDA, and on applicable transfer mechanisms under the GDPR (such as Standard Contractual Clauses), so that your information keeps a comparable level of protection.

11. Your rights

Depending on where you live, you may have the right to:

Access: ask for a copy of the personal information we hold about you.

Correct: ask us to update inaccurate or incomplete information.

Delete: ask us to delete your personal information, subject to legal exceptions.

Portability: ask for a copy in a structured, commonly used format.

Withdraw consent: for any processing based on your consent, at any time.

Object: to processing based on our legitimate interests.

Complain: to a data protection authority (see section 15).

To use any of these rights, email us at privacy@unleashedhq.app. We may need to confirm your identity first. We will respond within the time required by applicable law.

12. Children's privacy

The Service is intended for business use by adults and is not directed to anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it promptly.

13. Third-party sites

The site may link to third-party websites and services. We are not responsible for their privacy practices, and we encourage you to read their policies before giving them personal information.

14. Changes to this policy

We may update this policy from time to time. When we do, we will update the effective date at the top of this page and, where appropriate, give additional notice on the site or by email. Continuing to use the Service after changes take effect means you accept the updated policy.

15. Contact and complaints

Send questions, requests or complaints about this policy, including requests to use your rights, to our Privacy Officer:

Privacy Officer, Unleashed Labs Inc, privacy@unleashedhq.app, Côte-Saint-Luc, Québec, Canada.

If you are not satisfied with our response, you may also file a complaint with a supervisory authority.

Québec: Commission d'accès à l'information du Québec, cai.gouv.qc.ca.

Canada (federal): Office of the Privacy Commissioner of Canada, priv.gc.ca.

EU/EEA and UK: your local data protection authority.