Privacy Policy

1. Who We Are

S&J Consulting Inc. o/a MashGen AI ("MashGen AI," "we," "us," or "our") operates the website at https://mashgen-ai.com and provides AI-powered digital marketing services to small and local businesses. We are the "organization" responsible for personal information under Alberta's Personal Information Protection Act (PIPA, SA 2003, c P-6.5) and, where applicable, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Privacy inquiries and requests may be directed to our designated Privacy Officer at privacy@mashgen-ai.com.

2. Scope of This Policy

This Privacy Policy applies to personal information collected, used, or disclosed by MashGen AI through:

• Our website at mashgen-ai.com and any related subdomains or landing pages.
• The onboarding process and delivery of our subscription services.
• Email, SMS, phone, and other direct communications.
• Third-party integrations used to deliver our services (Google, Meta, CRM platforms, etc.).

This Policy does not govern the privacy practices of third-party websites or platforms that you access through links on our website or that we use as service delivery tools — each has its own privacy policy.

3. Personal Information We Collect

3.1 Information You Provide Directly

• Contact and identity information: full name, business name, job title, email address, phone number, mailing address.
• Billing and payment information: credit card details processed through our secure payment processor (we do not store raw card numbers on our systems).
• Account and onboarding information: business type, industry, goals, brand assets, social media credentials, Google Business Profile access, advertising account access, and other information needed to deliver the Services.
• Communications: emails, support tickets, chat messages, feedback, and survey responses.
• Client Content: any text, images, logos, customer data, or other materials you share with us for use in delivering your marketing services.

3.2 Information Collected Automatically

When you visit our website, we automatically collect:

• Device and browser information: IP address, browser type, operating system, device type.
• Usage data: pages visited, time on site, referring URLs, click paths, scroll depth, and session duration.
• Cookie and tracking data: as described in Section 8 (Cookies and Tracking Technologies) below.

3.3 Information From Third Parties

• Advertising platforms (Google, Meta): campaign performance data, audience insights, and conversion data linked to your account.
• CRM and marketing tools: contact activity, email open and click data, SMS delivery status.
• Publicly available sources: business listings, social media profiles, and review platforms used to inform our local SEO and marketing work on your behalf.

3.4 Sensitive Information

We do not intentionally collect sensitive personal information such as health data, financial account numbers (beyond payment processing), government identification numbers, or information about children under 13. Please do not send us this type of information unless specifically required and explicitly requested.

4. How We Use Your Personal Information

We collect and use personal information only for purposes a reasonable person would consider appropriate given the circumstances. These purposes include:

Service Delivery

• Creating and managing your account and subscription.
• Building and maintaining your website, social media presence, advertising campaigns, and other deliverables.
• Configuring integrations with Google, Meta, CRM tools, and other third-party platforms on your behalf.
• Generating AI-assisted content using your brand information, tone preferences, and business details.
• Sending automated email and SMS sequences as part of your contracted marketing services.

Billing and Administration

• Processing payments and managing subscription billing cycles.
• Sending invoices, receipts, renewal notices, and account alerts.
• Verifying identity and preventing fraudulent use of our platform.

Communications

• Responding to your inquiries, support requests, and feedback.
• Sending transactional messages about your account (password resets, service updates, onboarding guidance).
• Sending commercial electronic messages (email and SMS) about MashGen AI services, promotions, and updates — subject to your consent rights under CASL (see Section 7).

Platform Improvement

• Analyzing usage patterns and performance data to improve our website and service quality.
• Developing and refining our AI-assisted workflows and content templates.
• Conducting internal research, audits, and reporting.

Legal and Compliance

• Meeting legal obligations under Alberta and Canadian law.
• Enforcing our Terms of Service and protecting our legal rights.
• Responding to lawful requests from government authorities or courts.

5. Consent and Legal Basis for Processing

Under PIPA (Alberta), we collect, use, and disclose personal information with your consent, which may be express (explicit opt-in) or implied (consent reasonably inferred from your actions, such as providing your business card or filling out a contact form).

You may withdraw consent at any time by contacting us at privacy@mashgen-ai.com, subject to legal or contractual restrictions. Withdrawing consent to certain uses — such as using your brand information to deliver your marketing services — may prevent us from being able to continue providing the Services.

In some cases, we may collect or use personal information without consent where permitted or required by law, such as for debt collection, emergency situations, or legal proceedings.

6. How We Share Your Personal Information

We do not sell, rent, or trade your personal information. We share it only in the following circumstances:

6.1 Service Providers and Sub-Processors

We share information with third-party vendors who help us deliver the Services. These include:

• Cloud infrastructure and hosting providers (e.g. Google Cloud, AWS).
• Payment processors (e.g. Stripe) — subject to PCI-DSS standards.
• CRM and marketing automation platforms.
• Email and SMS delivery providers.
• AI and machine learning platforms (e.g. OpenAI, Anthropic, Google AI) — used to generate content and automate workflows.
• Analytics and advertising platforms (Google Analytics, Meta Business Suite).

All service providers are required to protect your information and use it only for the purposes we specify. Where these providers are located outside Canada, your information may be subject to the laws of their jurisdiction — see Section 9.

6.2 Advertising Platforms

As part of the Services, we access and manage your advertising accounts on Google and Meta on your behalf. Data shared with these platforms is governed by their respective privacy policies. We use audience and conversion data from these platforms solely to optimize your campaigns.

6.3 Business Transfers

If MashGen AI or S&J Consulting Inc. is involved in a merger, acquisition, asset sale, or corporate restructuring, personal information may be transferred as part of that transaction. We will provide notice and, where required, obtain consent before any such transfer.

6.4 Legal Requirements

We may disclose personal information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

7. Canada's Anti-Spam Legislation (CASL) Compliance

7.1 Express and Implied Consent

We send CEMs only where we have:

• Express consent — you have explicitly opted in to receive communications from us (e.g. through a contact form, event sign-up, or direct request), or
• Implied consent — there is an existing business relationship, you have conspicuously published your contact information without indicating you do not wish to receive commercial messages, or another lawful implied consent basis under CASL applies.

7.2 Content of Commercial Messages

All commercial electronic messages sent by MashGen AI will:

• Clearly identify MashGen AI (S&J Consulting Inc.) as the sender.
• Include our mailing address and contact information.
• Include a clear, functional, and easy-to-use unsubscribe mechanism.
• Be relevant to the business context in which your contact information was obtained.

7.3 Unsubscribe Requests

You may unsubscribe from commercial messages at any time by clicking the unsubscribe link in any email, replying STOP to any SMS, or emailing privacy@mashgen-ai.com. We will process all unsubscribe requests within 10 business days, as required by CASL.

7.4 Record Keeping

We maintain records of consent — including the date, method, and basis of consent — for all contacts in our outreach lists, as required under CASL.

8. Cookies and Tracking Technologies

Our website uses cookies, pixels, tags, and similar tracking technologies to improve your experience, analyze website performance, and support our marketing efforts.

8.1 Types of Tracking Technologies We Use

Essential Cookies

Required for the website to function — login sessions, security tokens, and form submissions. These cannot be disabled.

Analytics — Google Analytics

We use Google Analytics to understand how visitors use our website (pages visited, time on site, traffic sources). Google Analytics uses cookies that may transmit data to Google servers in the United States. You can opt out via the Google Analytics Opt-Out Browser Add-on: https://tools.google.com/dlpage/gaoptout.

Advertising Tracking — Meta Pixel

We use the Meta (Facebook) Pixel to measure the effectiveness of our advertising campaigns and to serve relevant ads to people who visit our website. The Meta Pixel may transmit data to Meta servers in the United States. You can manage your Meta ad preferences at https://www.facebook.com/adpreferences.

Additional Tracking Tools

We may use additional tools such as heatmapping software (e.g. Hotjar or Microsoft Clarity), conversion tracking pixels, or CRM tracking tags to improve our understanding of visitor behaviour and optimize our marketing. Each tool collects only the data necessary for its stated purpose.

8.2 Managing Cookies

You can control cookies through your browser settings — most browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the functionality of our website. Where required by law, we will present a cookie consent banner that allows you to accept or decline non-essential cookies.

8.3 Do Not Track

Our website does not currently respond to browser "Do Not Track" signals. We will update this section if our practices change.

9. Cross-Border Data Transfers

MashGen AI stores and processes data primarily using cloud services based in Canada and the United States. Some of our service providers — including Google, Meta, OpenAI, Anthropic, and others — may store or process data on servers located outside Canada, including in the United States.

When your personal information is transferred outside Canada, it may be subject to the laws of the destination country, including laws that permit government authorities to access personal information in certain circumstances.

We take reasonable contractual and technical measures to protect your information when transferred internationally, and we select service providers that maintain strong privacy and security standards. By using our Services, you acknowledge and consent to these cross-border transfers.

10. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention practices are:

• Active client records: retained for the duration of the subscription plus 7 years, to meet Canadian tax and accounting requirements.
• Billing and transaction records: 7 years from the date of transaction.
• Marketing and outreach records (including CASL consent records): 3 years from the last interaction or as required by CASL.
• Website analytics data: up to 26 months, subject to the settings of the analytics platform.
• Support and communications records: 3 years from the date of the last communication.

When personal information is no longer required, we securely delete or anonymize it. If deletion is not immediately possible (e.g. data stored in backup archives), we isolate it from further use until deletion is possible.

11. Security Safeguards

We implement security measures appropriate to the sensitivity of the personal information we hold. These measures include:

• Encrypted data transmission using HTTPS/TLS across all platforms.
• Access controls and role-based permissions limiting data access to authorized personnel only.
• Two-factor authentication on cloud accounts and platforms that store client data.
• Reliance on reputable cloud providers (Google Workspace, CRM SaaS platforms) with their own enterprise-grade security certifications.
• Regular review of third-party provider security policies and data processing agreements.

No system is completely secure. In the event of a privacy breach that creates a real risk of significant harm, we will notify affected individuals and the Office of the Information and Privacy Commissioner of Alberta (OIPC) as required under PIPA.

12. Your Privacy Rights

Under PIPA (Alberta) and PIPEDA, you have the following rights with respect to your personal information:

• Right of access: You may request a copy of the personal information we hold about you, how it is being used, and to whom it has been disclosed.
• Right to correction: You may request that we correct any inaccurate or incomplete personal information.
• Right to withdraw consent: You may withdraw consent to certain uses of your information, subject to legal or contractual limitations.
• Right to complain: You have the right to file a complaint with the Office of the Information and Privacy Commissioner of Alberta (OIPC) if you believe we have mishandled your personal information.

To exercise any of these rights, contact our Privacy Officer at privacy@mashgen-ai.com. We will respond within 30 days. We may need to verify your identity before processing your request.

Office of the Information and Privacy Commissioner of Alberta (OIPC): www.oipc.ab.ca · 1-888-878-4044

13. Children's Privacy

Our Services are intended for use by adults operating businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@mashgen-ai.com.

14. Artificial Intelligence and Your Data

MashGen AI uses AI and machine learning tools to generate content, automate workflows, and deliver portions of our services. With respect to your personal information:

• We use AI tools (including third-party models from providers such as OpenAI and Anthropic) to process your business information, brand assets, and content preferences for the sole purpose of generating marketing deliverables for you.
• We select AI providers that, to the best of our knowledge and as per their published policies, do not use API-submitted business data to train their models unless you have separately opted in to such programs.
• Personal information about your customers (e.g. names, emails in CRM sequences) is used only to execute the specific campaigns you have instructed us to run — it is not used to train AI models or shared with any party beyond the delivery infrastructure.
• We do not make fully automated decisions about individuals that would have significant legal or similarly significant effects on them without a human review process.

15. Links to Third-Party Websites

Our website may contain links to external websites operated by third parties. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party websites you visit. MashGen AI is not responsible for the privacy practices or content of external sites.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. The updated version will be posted at mashgen-ai.com/privacy with a new Effective Date.

For material changes that significantly affect how we handle your personal information, we will provide notice by email at least 30 days before the changes take effect. Your continued use of the Services after the new Effective Date constitutes your acceptance of the updated Policy.

17. Contact Our Privacy Officer

For any questions, concerns, or requests related to this Privacy Policy or how we handle your personal information, please contact:

This Privacy Policy is provided for informational purposes. Nothing in this document constitutes legal advice. MashGen AI recommends obtaining independent legal counsel for advice specific to your circumstances.

© 2026 S&J CONSULTING INC. OPERATING AS MashGen AI · ALL RIGHTS RESERVED