Privacy Policy

Effective Date: April 19, 2026  |  Last Updated: April 19, 2026

1. Introduction

GuildBuild Inc. ("GuildBuild," "we," "us," or "our") is committed to protecting the privacy and personal information of our clients, website visitors, and business contacts. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and other applicable Canadian privacy laws.

By accessing our website at guildbuild.ca or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We may collect the following categories of personal information:

2.1 Information You Provide Directly

  • Contact details (name, email address, phone number, company name)
  • Project or engagement requirements submitted through our AI Build Architect wizard
  • Communications sent to us via email or contact forms

2.2 Information Collected Automatically

  • Website usage data (pages visited, time on site, referral source) via Vercel Analytics
  • Technical data (browser type, device type, IP address region) — collected in aggregate

2.3 Information from Business Engagements

  • Business context shared during discovery calls or in project documentation
  • Data provided for analysis or system configuration as part of a consulting engagement

3. How We Use Your Information

We use personal information only for the purposes for which it was collected:

  • To respond to inquiries and provide requested consulting services
  • To generate AI-assisted Business Requirement Documents (BRDs) via our Architect Wizard
  • To improve our website and services based on aggregated analytics
  • To communicate service updates or project status with existing clients
  • To comply with legal obligations

We do not sell, rent, or trade personal information to third parties for marketing purposes.

5. Disclosure to Third Parties

We may share personal information with:

  • Service providers — cloud hosting (Vercel), database services (Vercel Postgres), and AI processing (MiniMax or the configured production AI provider) used solely to operate our services
  • Legal authorities — where required by law or to protect our rights
  • Business transfers — in the event of a merger or acquisition, with appropriate confidentiality protections

All third-party providers are contractually required to protect personal information and may not use it for their own purposes.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by law. Wizard-generated BRD data is retained for up to 12 months. Client engagement records are retained for 7 years in accordance with Canadian business records requirements.

7. Safeguards

We implement appropriate technical and organizational measures to protect personal information, including:

  • TLS encryption for all data in transit
  • Restricted access to personal data on a need-to-know basis
  • Vercel's enterprise-grade infrastructure with Canadian data residency options
  • Regular review of security practices

8. Your Rights

Under PIPEDA, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Withdraw consent (subject to legal or contractual restrictions)
  • File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at contact@guildbuild.ca.

9. Cookies & Analytics

Our website uses Vercel Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect personally identifiable information. It measures aggregate page views and performance metrics only.

We do not use advertising cookies, tracking pixels, or third-party remarketing services.

10. AI-Powered Services

Our Build Architect Wizard uses configured AI services, currently MiniMax in production, to generate Business Requirement Documents. Inputs you provide are sent to the configured AI provider's API for processing and are subject to that provider's privacy and usage policies. We do not use your inputs to train AI models. Generated outputs are stored in our database for service improvement and operational logging.

11. Canada's Anti-Spam Legislation (CASL)

We only send commercial electronic messages where we have express or implied consent. Every commercial message we send includes an unsubscribe mechanism. To opt out of any communications, reply to any email with "Unsubscribe" or contact us directly.

12. Children's Privacy

Our services are intended for business professionals and are not directed at children under 13. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with an updated "Last Updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.