This Privacy Policy explains how Hi Plus AI ("Hi Plus AI", "we", "us", or "our") collects, uses, discloses, and protects personal information when you visit hiplusai.ca, create an account, join our waitlist, take part in our workshops and courses, or otherwise use our website and learning platform (together, the "Services"). We are based in Ottawa, Ontario, Canada, and we handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other privacy laws that apply to us.
Please read this policy together with our Terms and Conditions. By using the Services or giving us your information, you consent to the collection, use, and disclosure of your personal information as described here. If you do not agree, please do not use the Services.
Who we are and how to reach us
Hi Plus AI is an AI education service for Canadian professionals, currently focused on realtors, lawyers, and financial planners. We are responsible for the personal information in our care. For any privacy question or request, contact our Privacy Officer, [TONY'S CALL: name of the privacy officer], at tony@hiplusai.ca.
Information we collect
We collect the following categories of personal information.
Account information. When you create an account, we collect your name, email address, and password. Passwords are stored only in a hashed form that we cannot read. If you sign in with Google, we receive your name, email address, and profile image from Google, along with authentication tokens that keep you signed in. We also record whether your email has been verified and the role assigned to your account (for example, learner or administrator).
Waitlist information. When you join our waitlist, we collect your email address and, if you provide it, your profession (such as realtor, lawyer, or financial planner).
Learning activity. As you use the platform, we collect information about your use of the courses and lessons, including which lessons you open, your progress, and your answers to quizzes.
Technical and session information. When you sign in and use the Services, we automatically collect and store technical information, including your IP address, browser and device type, and details of your login sessions such as session identifiers and the time of access. Our hosting provider also logs standard request information for security and reliability.
Communications. If you email or otherwise contact us, we keep your messages and our replies, along with your contact details.
Payment information. Payments for paid programs are handled by Stripe, on Stripe's own hosted checkout page. Your card details go to Stripe and never pass through our systems, so we do not collect or store your full card number. We keep a record of what you bought, the amount, the date, and Stripe's reference for the payment, which is what lets us give you access, answer a billing question, and issue a refund.
Cookies and similar technologies. We use cookies that are necessary to run the Services, in particular to keep you signed in and to keep your account secure. Because these cookies are essential, the Services will not work properly without them. We do not use advertising or cross-site tracking cookies.
Analytics. We use Vercel Web Analytics to understand, in aggregate, how visitors use our site, such as which pages are viewed and general details like country, browser, and device type. This tool is privacy-focused: it does not set cookies, and it does not build a cross-site profile of you or identify you personally. If we add other analytics or non-essential tracking in the future, we will update this policy and, where the law requires it, ask for your consent first.
How we use your information
We use personal information to:
- create and manage your account, and authenticate you when you sign in;
- provide, personalize, and track your learning, including your lesson progress and quiz results;
- operate, maintain, secure, and improve the Services, and detect and prevent fraud, abuse, and security incidents;
- add you to our waitlist and tell you when a relevant cohort or workshop opens;
- send you service and transactional messages, such as email verification, password resets, waitlist confirmations, and important notices about the Services;
- respond to your questions and requests;
- send you updates about our programs where you have agreed to receive them, which you can opt out of at any time;
- administer and, where necessary, enforce our Terms and Conditions, including suspending or removing accounts that break the rules; and
- comply with our legal and regulatory obligations.
We do not sell your personal information, and we do not use it to make automated decisions that produce legal or similarly significant effects about you.
Consent
We collect, use, and disclose personal information with your consent, unless the law allows or requires us to act without it (for example, to detect fraud, meet a legal obligation, or protect someone's safety). By creating an account or using the Services, you consent to the handling of your information as described in this policy. You can withdraw your consent at any time, subject to legal or contractual limits and reasonable notice, by contacting us or closing your account. Withdrawing consent may mean we can no longer provide some or all of the Services.
How we share information
We do not sell or rent your personal information. We share it only as needed to run the Services:
- Service providers and processors. We use trusted third parties to operate the Services on our behalf, including Neon (database hosting), Vercel (website hosting, infrastructure, and privacy-focused analytics), Resend (sending our email), Stripe (processing payments and sending your receipt), and Google (sign-in, where you choose to use it). These providers may only use your information to provide their services to us and are required to protect it.
- Legal and safety reasons. We may disclose information where required by law, regulation, or legal process, or where reasonably necessary to protect the rights, property, or safety of Hi Plus AI, our users, or others, or to enforce our Terms.
- Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to honour this policy or notify you of any material change.
Where your information is stored and international transfers
We and our service providers may store and process personal information on servers located outside Canada, including in the United States (for example, our database, hosting, email, and sign-in providers). When your information is handled in another country, it may be subject to that country's laws, including lawful access by its courts, law enforcement, and government authorities. We take reasonable steps to ensure our providers protect personal information to a standard comparable to this policy. By using the Services, you acknowledge that your information may be transferred to, and stored in, locations outside your province and outside Canada.
How long we keep it
We keep personal information for as long as your account is active and for as long as we need it for the purposes described here, or as required by law, and then we securely delete or anonymize it. If you close your account or ask us to delete your information, we will do so within a reasonable time, except where we are required or permitted by law to keep certain information (for example, for security, dispute resolution, or legal compliance). We may keep de-identified or aggregated information that can no longer be linked to you.
How we protect your information
We use reasonable administrative, technical, and physical safeguards to protect personal information, including storing passwords in hashed form, limiting access to those who need it, and relying on reputable infrastructure providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for activity that happens under your account. If you believe your account has been compromised, contact us right away.
Your rights
Subject to some legal exceptions, you can:
- access the personal information we hold about you and ask how we use and share it;
- ask us to correct information that is inaccurate or incomplete;
- withdraw your consent, or ask us to delete information we no longer need;
- close your account; and
- ask a question or make a complaint about how we handle your information.
You can do many of these yourself from your account settings. For anything else, email tony@hiplusai.ca. We may need to verify your identity before we act, and we will respond within the time the law requires. If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.
Third-party links and tools
The Services link to, and teach the use of, third-party websites and tools, including AI tools, government and regulator resources, and videos. We do not control these third parties and are not responsible for their privacy practices. Please review their policies before you share information with them. Anything you choose to enter into a third-party AI tool is governed by that tool's terms and privacy policy, not ours.
Children
The Services are meant for working professionals and are not directed to children, and we do not knowingly collect personal information from anyone under the age of majority in their province or territory. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We may update this policy from time to time. When we do, we will change the "Last updated" date at the top of the page, and if the changes are significant we will take reasonable steps to let you know, such as by email or a notice on the Services. If you keep using the Services after an update, that means you accept the revised policy.
Contact us
Questions, requests, or complaints about privacy can go to:
Hi Plus AI, Privacy Officer Email: tony@hiplusai.ca Ottawa, Ontario, Canada