Privacy policy

This policy is in effect and under legal review. If the review changes anything, we will post the revised policy here with the date it took effect.

Last updated: 7 October 2026

Who we are

MareCraftAI provides AI automation services to businesses and operates from London, Ontario, Canada. Our privacy officer is accountable for how we handle personal information and answers questions about this policy. You can reach them at hello@marecraftai.ca.

What we collect on this website

We collect what you give us through the contact form, the chat assistant or a demo phone line, plus the technical details needed to run the site and stop abuse.

• Contact form. Your name, email address, business name and message, whether you agreed to marketing email and when, and the IP address the form was sent from.
• Chat assistant. The messages you type, the assistant's replies, and the IP address they came from. Your browser keeps a random conversation ID for the open tab, which is cleared when you close it. Please don't put sensitive details, such as health or financial information, into the chat.
• Demo phone lines. If you call or text a demo line, your phone number, a transcript of the call or your messages, and any booking details you give. Each call starts by saying the receptionist is automated and the call is transcribed.
• Technical data. Our hosting provider and our server record IP addresses and basic request details to deliver pages and protect against attacks.

We don't use analytics, advertising or tracking cookies.

Why we collect it

• To reply to your enquiry. When you send the form we email you an acknowledgement, and we are notified by email and text message so we can reply quickly.
• To send you information about our services, but only if you ticked the marketing box. You can withdraw that consent at any time by replying to any message or emailing us.
• To answer your questions in the chat and on demo lines, and to check that the assistant's answers are accurate.
• To keep the site secure and limit abuse, which is what the IP addresses are for.

We don't use your information for any other purpose without asking you first, unless the law requires it.

Who we share it with

We don't sell personal information. We share it only with the service providers that run parts of our service, and each receives only what it needs for its part:

• Supabase hosts our database, in Canada.
• DigitalOcean hosts our automation server, in Toronto.
• Cloudflare hosts and protects this website on its worldwide network.
• Groq, OpenAI and Anthropic process chat and text messages to produce the assistant's answers, in the United States.
• Twilio carries calls and text messages, and Retell AI runs the automated phone receptionist, in the United States.
• Resend delivers our email, in the United States, and Google hosts our email inbox and the calendar used for demo bookings.

Because some of these providers are outside Canada, your information may be processed and stored in the United States or other countries. While it is there it is subject to the laws of that country, and its courts, law enforcement and national security authorities may be able to access it.

We may also disclose information where the law requires it.

How long we keep it

We keep enquiries, chat conversations and call records only for as long as we need them for the purposes above, and we delete them sooner if you ask. We keep a record of your marketing consent for as long as we rely on it, so we can show when and how you gave it.

How we protect it

Information travels over encrypted connections, and access to it is limited to the people and systems that need it. No system is perfectly secure, but we take reasonable steps to protect what you share with us. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner of Canada.

Information we handle for our clients

When we operate automation for a business, we process information about that business's customers on their behalf and under their instructions. That business remains accountable for it. Our handling of it is governed by a written data processing agreement, and we maintain a current list of the service providers involved, available to clients on request. If you are a customer of one of those businesses, please contact the business directly; if you contact us instead, we will pass your request on.

Your rights

Under Canadian privacy law you can ask what personal information we hold about you, ask us to correct it, withdraw your consent, or ask us to delete it. Email hello@marecraftai.ca and we will respond within thirty days.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada. Residents of Quebec can also contact the Commission d'accès à l'information du Québec.

Children

This website is for businesses and is not directed at children.

Changes

If we change this policy we will post the new version here and update the date above.