Privacy Policy

1. Information We Collect

1.1 Information you provide directly. When you sign up, request a GEO audit, purchase services, or contact us, we may collect your name, email address, company name, job title, billing address, payment information (processed by our third-party payment processor — we do not store full credit card numbers), and any other information you choose to provide.

1.2 Information collected automatically. When you visit the Site, we may automatically collect technical information such as your IP address, browser type and version, operating system, referring URL, pages viewed, time and date of visit, and similar usage data. We may use cookies and similar tracking technologies to collect this information.

1.3 Information from third parties. We may receive information about you from third-party services you use in connection with our services (e.g., your CMS provider, analytics platforms) to the extent necessary to deliver the services.

2. How We Use Your Information

We use personal information to:

• Provide, operate, and improve our services;
• Process payments and send invoices;
• Communicate with you about your account, projects, and service updates;
• Respond to inquiries and provide customer support;
• Generate anonymized and aggregated analytics to improve our products (no individual is identifiable);
• Comply with legal obligations and enforce our Terms of Service;
• Protect against fraud, unauthorized access, and security threats.

We do not sell your personal information and will not use it for purposes materially different from those described here without your consent.

3. Use of AI and Automation Tools

Our services may involve the use of AI model APIs and automation tools for analysis, monitoring, and recommendations. Client data processed through these tools is used solely for the purpose of delivering the contracted services. We do not use Client content to train third-party AI models. AI-generated outputs are probabilistic and are always subject to human review before being acted upon.

4. Disclosure of Information

We may share personal information only in the following circumstances:

• Service providers and subcontractors — with third parties who perform services on our behalf (e.g., payment processing, hosting, analytics), subject to confidentiality obligations;
• Legal requirements — when required by law, regulation, court order, or governmental request;
• Protection of rights — to protect the rights, property, or safety of Provider, our clients, or others;
• Business transfers — in connection with a merger, acquisition, or sale of assets, in which case the successor entity will be bound by this policy.

5. Cookies and Tracking Technologies

The Site may use cookies and similar technologies (e.g., web beacons, pixels) to recognize returning visitors, analyse usage patterns, and improve the user experience.

You may control or disable cookies through your browser settings. Disabling cookies may affect the functionality of certain features of the Site.

6. Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect personal information against unauthorized access, loss, alteration, and destruction. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information only as long as reasonably necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. When personal information is no longer required, we will securely delete or anonymize it.

8. Your Rights and Choices

Under PIPA and PIPEDA, you have the right to:

• Access — request a copy of the personal information we hold about you;
• Correction — request correction of inaccurate or incomplete personal information;
• Withdraw consent — withdraw your consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions (note: withdrawing consent may affect our ability to provide services).

To exercise any of these rights, contact us at privacy@getmasthead.io. We will respond within thirty (30) days.

9. Third-Party Links and Services

The Site or our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies independently.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time by posting the revised version on the Site. The “Effective Date” at the top indicates when the latest version took effect. For material changes, we will make reasonable efforts to notify you (e.g., by email or a notice on the Site). Your continued use of the Site or services after a change constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our handling of your personal information, please contact:

1581314 B.C. LTD. dba Masthead

Email: privacy@getmasthead.io

You also have the right to file a complaint with the Office of the Information and Privacy Commissioner for British Columbia (OIPC) at oipc.bc.ca or the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.