Privacy Policy

2.1 Overview

This Privacy Policy describes how the Company collects, uses, discloses, and protects personal information when providing the Service. We aim to comply with applicable Canadian privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws where they apply.

2.2 Roles: Company as Service Provider; Organizers as Controllers

• In many cases, Organizers decide what personal information is collected from Customers and why. In those cases, Organizers are responsible for obtaining any necessary notices and consents from Customers and for responding to Customer privacy requests regarding Organizer-controlled data.
• The Company acts as a service provider to Organizers for Organizer-controlled data and processes such data on the Organizer's behalf to provide the Service, subject to these Terms and the Organizer's instructions as available through product functionality.

2.3 Personal Information We Collect

Depending on how you use the Service, we may collect:

2.4 How We Use Personal Information

We use personal information to:

• Create and manage accounts and authenticate users;
• Provide core Service features (storefronts, bookings, quotes, notifications, and customer chat);
• Send service/transactional messages (such as booking confirmations, invoices, and security alerts);
• Send promotional messages only when permitted by law and consent;
• Monitor reliability, troubleshoot, improve performance, and maintain security;
• Provide customer support and respond to requests;
• Meet legal and regulatory obligations;
• Prevent fraud, abuse, and violations of these Terms.

2.5 Legal Bases and Consent

• We seek meaningful consent where required by Applicable Law. You can choose whether to receive promotional messages, and you can withdraw marketing consent at any time using unsubscribe links or account settings. Service and transactional messages may still be sent as necessary to provide the Service.
• Organizers are responsible for obtaining required notices and consents from Customers for Organizer-controlled data, including consent to receive marketing messages and consent for photos/videos.

2.6 How We Share Personal Information

We may share personal information with:

• Sub-processors and service providers that help us operate the Service (e.g., hosting, analytics, support tools, communications providers, payment processors, and AI model providers where applicable);
• Organizers when you interact with an Organizer through the Service, so the Organizer can fulfill bookings, quotes, and service delivery;
• Professional advisors (such as lawyers, auditors, and insurers) where necessary;
• Authorities or other third parties where required by law or to protect rights, safety, and security.

We do not sell personal information.

2.7 AI Model Providers (If Enabled)

If you use AI Features, certain inputs you submit may be processed by third-party AI model providers to generate outputs. We limit what we share to what is necessary to provide the feature and apply safeguards where feasible. AI model providers may retain and use such inputs in accordance with their terms and policies, and you should not submit confidential or sensitive information unless appropriate and lawful.

2.8 International Transfers

Our service providers (including AI providers and hosting providers) may process or store information outside Canada. Where information is transferred, it may be subject to the laws of the jurisdiction where it is processed, and may be accessed by law enforcement or authorities in that jurisdiction.

2.9 Security Safeguards

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including access controls and encryption in transit. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

2.10 Retention

We retain personal information only as long as necessary for the purposes described and as required by law. Our retention practices are described in the Data Retention Policy in Section 3.

2.11 Access, Correction, and Requests

You may request access to and correction of your personal information, subject to legal limits. If you are a Customer of an Organizer, your requests regarding Organizer-controlled data should be directed to the Organizer in the first instance.

2.12 Contact

• Email: info@zaaro.ai, contact@zaaro.ai
• Mail: Zaaro AI Corp., 5 Essex Drive, Steinbach, Manitoba, R5G 2V7, Canada