Persona-X

1. Introduction

BrightPath Technologies (“we”, “our”, “us”) is committed to protecting the personal information of individuals who interact with our websites, including advisors.brightpathtechnology.io and brightpathtechnology.io. This policy describes how we collect, use, and protect personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.

2. Information We Collect

We collect personal information only to the extent necessary to provide our services:

• Contact information — name, email address, organisation name, and message content submitted via our enquiry form.
• Technical data — IP address, browser type, device type, and pages visited, collected automatically by our hosting providers (Vercel, GitHub Pages) for operational and security purposes.
• Tool inputs — information you enter into the Persona-X AI advisory tools. See Section 5 for important details.

We do not use tracking pixels, third-party advertising networks, or behavioural analytics tools.

3. How We Use Your Information

• To respond to your enquiry or service request.
• To deliver and improve our services.
• To comply with applicable legal obligations.

We do not send unsolicited commercial electronic messages. Any communications we send are consistent with Canada’s Anti-Spam Legislation (CASL) and require your express or implied consent.

4. Sharing Your Information

We do not sell, trade, or rent your personal information. We may share information with:

• Infrastructure providers — Vercel, Inc. (hosting for advisors.brightpathtechnology.io) and GitHub, Inc. (hosting for brightpathtechnology.io), each under applicable data processing agreements.
• Legal authorities — where required by applicable law, court order, or government regulation.

5. Artificial Intelligence Tools

The Persona-X advisory tools on advisors.brightpathtechnology.io use artificial intelligence provided by Anthropic, PBC (United States). Information you enter into these tools is transmitted to Anthropic’s API for processing and is subject to Anthropic’s Privacy Policy.

Do not enter sensitive personal information, financial account credentials, health information, or confidential business data into these tools.

6. Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Withdraw consent to our collection and use of your information (subject to legal or contractual obligations).
• Lodge a complaint with the Office of the Privacy Commissioner of Canada.

To exercise these rights, use our contact form.

7. Data Retention

Enquiry form submissions are retained for up to 24 months for legitimate business purposes and then securely deleted. Technical/server logs are retained for up to 90 days by our hosting providers.

8. Security

We implement reasonable administrative and technical safeguards appropriate to the sensitivity of the information collected. All data in transit is encrypted via TLS/HTTPS. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Contact Us

To exercise your privacy rights or ask questions about this policy, please use our contact form. We will respond within a reasonable time and in any event within 30 days.

10. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect the date of the most recent revision. Continued use of our websites following an update constitutes acceptance of the revised policy.