Privacy Policy
Last updated: September 15, 2026
Table of Contents
Key Privacy Highlights
- As a matter of policy, your data is not used to train AI models
- Data is encrypted in transit (TLS); credentials and keys are sealed at rest
- You can delete your data at any time
- We honour GDPR and PIPEDA access, correction and deletion rights
1. Overview
LiquidCortex Inc., Toronto, Ontario, Canada ("LiquidCortex", "we", "our", or "us") is the controller of the personal information described in this policy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI workforce platform.
We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where the EU General Data Protection Regulation (GDPR) or other regional laws apply to you, we honour the rights they grant, as set out in Section 7.
We understand that your data is valuable and sensitive. Our privacy practices are designed to give you control over your information while the platform's AI features still do their work.
2. Data Collection
Information You Provide
- Account Information: Name, email address, company name, billing information
- Content: Documents, messages, and data you upload for AI processing
- Communications: Support tickets, feedback, and correspondence with us
- Integration Data: Data from connected third-party services (with your permission)
Information Collected Automatically
- Usage Data: How you interact with our Service, features used, timestamps
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, pages viewed, referring URLs
3. How We Use Data
We use your information to:
- Provide, maintain, and improve the Service
- Process transactions and send billing notifications
- Respond to your requests and provide customer support
- Send important updates about the Service
- Analyze usage patterns to improve our AI employees
- Detect and prevent fraud, abuse, and security threats
- Comply with legal obligations
Policy: we do not use your Content to train AI models
5. Security Measures
The measures we apply to protect your data:
- Encryption in Transit: TLS on all connections
- Credentials at Rest: OAuth tokens, API keys and integration credentials sealed with per-user envelope encryption (Fernet / AES-128)
- Authentication: Password sign-in with rate limiting and breached-password screening. MFA and SSO are not yet available.
- Access Controls: Role-based access with audit logging
- Testing: An internal red-team suite runs in CI. No third-party penetration test has been performed yet.
Hosting regions, backups, certifications and incident notification are set out on our Security & Trust page.
6. Data Retention
We retain your data only as long as necessary to provide the Service and fulfill the purposes described in this policy:
- Account Data: Retained while your account is active
- Content: Deleted upon your request or account termination
- Usage Logs: Retained for 90 days for operational purposes
- Billing Records: Retained for 7 years for legal compliance
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
PIPEDA Rights (Canada)
- Access: Request the personal information we hold about you and how it is used
- Correction: Have inaccurate or incomplete information corrected
- Withdraw Consent: Withdraw consent to collection or use, subject to legal or contractual restrictions
- Complaint: Raise a concern with us, and if unresolved, with the Office of the Privacy Commissioner of Canada
GDPR Rights (EU/EEA)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Objection: Object to certain processing activities
- Restriction: Limit how we process your data
California Residents
We honour the following requests from California residents:
- Access: What personal information we collect and how it's used
- Deletion: Request deletion of your personal information
- Opt-Out of Sale: We do not sell personal information, so there is nothing to opt out of
- Non-Discrimination: Equal service regardless of privacy choices
9. International Transfers
Our infrastructure is hosted in the United States (see the subprocessor list in Section 4). Your information is therefore transferred to and processed in the United States, and may be accessed from Canada. For transfers from the EU/EEA, we rely on Standard Contractual Clauses (SCCs) where required. EU data residency is not yet available.
10. Children's Privacy
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.
11. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
For privacy-related questions or to exercise your rights, please contact us: