Privacy Policy

Effective Date: April 19, 2026  |  Last Updated: July 10, 2026

1. Introduction

GuildBuild Inc. ("GuildBuild," "we," "us," or "our") is committed to protecting the privacy and personal information of our clients, website visitors, and business contacts. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and other applicable Canadian privacy laws.

By accessing our website at guildbuild.ca or engaging our services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We may collect the following categories of personal information:

2.1 Information You Provide Directly

  • Contact details (name, email address, phone number, company name)
  • Project or engagement requirements submitted through our AI Build Architect wizard
  • Communications sent to us via email or contact forms
  • Information provided to access gated content (name, email)

2.2 Information Collected Automatically

  • Website usage data such as pages visited and referral source via Cloudflare analytics and server logs
  • Technical data (browser type, device type, IP address region) — collected in aggregate
  • User-agent and technical request metadata linked to inquiry submissions (browser and platform identifiers stored as part of the inquiry record in Cloudflare D1)

2.3 Information from Business Engagements

  • Business context shared during discovery calls or in project documentation
  • Data provided for analysis or system configuration as part of a consulting engagement

3. How We Use Your Information

We use personal information only for the purposes for which it was collected:

  • To respond to inquiries and provide requested consulting services
  • To generate AI-assisted Business Requirement Documents (BRDs) via our Architect Wizard
  • To improve our website and services based on aggregated analytics
  • To communicate service updates or project status with existing clients
  • To comply with legal obligations

We do not sell, rent, or trade personal information to third parties for marketing purposes.

5. Disclosure to Third Parties

We may share personal information with:

  • Service providers — cloud hosting (Cloudflare Workers) and AI processing (Z.AI/Zhipu or the configured production AI provider) used solely to operate our services
  • Legal authorities — where required by law or to protect our rights
  • Business transfers — in the event of a merger or acquisition, with appropriate confidentiality protections

All third-party providers are contractually required to protect personal information and may not use it for their own purposes.

6. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by law. Contact form submissions, Architect Wizard BRD data, Storefront quote requests, and gated download requests — along with linked user-agent and technical request metadata — are stored securely in Cloudflare D1, a database hosted within Cloudflare's network. We retain these inquiry records only as long as they remain relevant to the original inquiry purpose. We periodically review stored inquiries and delete records that are no longer needed for follow-up.

Client engagement records are retained for 7 years in accordance with Canadian business records requirements.

You may request deletion of your website inquiry data at any time by contacting us at contact@guildbuild.ca. We will respond within a reasonable timeframe and delete your record unless retention is required by law.

7. Safeguards

We implement appropriate technical and organizational measures to protect personal information, including:

  • TLS encryption for all data in transit
  • Restricted access to personal data on a need-to-know basis
  • Cloudflare's global edge infrastructure and access-controlled operational tooling
  • Regular review of security practices

8. Your Rights

Under PIPEDA, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your website inquiry data (contact form, Architect Wizard, quote, and gated download records)
  • Withdraw consent (subject to legal or contractual restrictions)
  • File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at contact@guildbuild.ca.

9. Cookies & Analytics

We use first-party, cookieless analytics: anonymous event counts (page views and button clicks) are recorded without cookies, IP addresses, or cross-site identifiers, via Cloudflare Workers Analytics Engine. No advertising or third-party analytics trackers load by default.

Some Data Lab pages may offer an optional Microsoft Power BI Publish-to-web report. The report does not load unless you select the load button. If you do, your browser connects directly to Microsoft, which receives standard request information such as your IP address and browser metadata and may apply its own privacy practices. The report and its underlying public data are publicly accessible. GuildBuild's native charts remain available without loading Power BI.

10. AI-Powered Services

Our Build Architect Wizard uses configured AI services, currently Z.AI/Zhipu GLM-4.7 in production, to generate Business Requirement Documents. Inputs you provide are sent to the configured AI provider's API for processing and are subject to that provider's privacy and usage policies. We do not use your inputs to train AI models. Generated outputs may be retained for service improvement and operational logging when a workflow requires follow-up.

11. Canada's Anti-Spam Legislation (CASL)

We only send commercial electronic messages where we have express or implied consent. Every commercial message we send includes an unsubscribe mechanism. To opt out of any communications, reply to any email with "Unsubscribe" or contact us directly.

12. Children's Privacy

Our services are intended for business professionals and are not directed at children under 13. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with an updated "Last Updated" date. Continued use of our website after changes constitutes acceptance of the revised policy.