Legal
Privacy Policy
We collect as little as we can, we tell you what we have, and we give it back or delete it when you ask. This page says exactly what that means in practice.
1. Who we are
Bayes Studio Inc. is a company incorporated in British Columbia, Canada, with its office at UBC HATCH, #073, 2366 Main Mall, Vancouver, BC V6T 1Z4. We build multimodal AI systems for environmental monitoring and early hazard detection.
This policy covers bayesstudio.com and the forms on it. It does not cover the customer portal, which is governed by the agreement you signed with us, or any site we link out to. Questions about it go to contact@bayesstudio.com.
2. The law we work under
As a private-sector organization in British Columbia we are subject to the province’s Personal Information Protection Act (PIPA), and to the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where information crosses a provincial or national border in the course of commercial activity.
Both laws rest on the same idea: personal information is yours, we hold it with your knowledge and consent, we use it only for the purpose we told you about, and you are entitled to see it. That is the standard this page is written to, wherever you happen to live.
3. What we collect
What you send us. When you fill in a form on this site (a demo request, a contact message), we receive what you typed into it. Depending on the form, that is some combination of your name, your email address, your organization, your role, your phone number, and whatever you wrote in the message field. Nothing on any form is required except the fields marked as required.
What the form records with it. Each submission is stored with the address of the page you sent it from and the time you sent it. Our form software can also record the IP address and browser identification string of the device used, which we keep only as a defence against automated abuse.
What the server logs. Like nearly every web server, ours keeps a short-lived technical log of requests: IP address, time, the page requested, and the browser identification string. These logs exist to keep the site up and to investigate attacks. They are not used to build a profile of you.
What we do not collect. This site carries no analytics, no tag manager, no advertising or social-media tracking pixel, and no third-party marketing script. We do not buy personal information about you from anyone, and we do not sell, rent or trade yours.
4. Cookies
Browsing this site sets no cookies. Cookies appear in two cases only: if you log in to the site as an editor, WordPress sets the session cookies it needs to keep you logged in; and if your browser is asked to remember a preference, that preference stays in your browser and is never sent to us.
Some pages embed video from YouTube. Those embeds are loaded only after you interact with them or when the page decides to play a muted background clip, and once loaded, YouTube may set its own cookies under Google’s privacy policy rather than ours.
5. Why we collect it, and your consent
We use what you send us for one purpose: to answer you. That means replying to your message, arranging and running a demonstration, understanding whether what we build is a fit for what you are monitoring, and keeping a record of the conversation so the next person you speak to here does not ask you the same questions again.
Sending us a form is your consent to that use, and only to that use. If we ever want to use your information for something else, we will ask you first. You can withdraw your consent at any time, subject to legal or contractual limits and reasonable notice; we will tell you if withdrawing it means we can no longer do something you have asked for.
6. Who else sees it
Inside the company, only the people who need it: whoever answers your message and, where relevant, the engineer who will be on the call.
Outside it, we rely on service providers to run the business: website and application hosting, email, and the infrastructure the products run on. They process information on our instructions, for us, and may not use it for their own purposes. We give them the minimum they need to do the job.
Beyond that, we disclose personal information only where the law requires it (a court order, a subpoena, a lawful demand from a regulator or law enforcement), or where disclosure is necessary to protect someone’s safety or to enforce our agreements. If our business is ever sold or merged, information may transfer as part of it, and the buyer will be bound by this policy or one materially the same.
7. Where it is held
We are a Canadian company and we keep information in Canada wherever we can. Some of our service providers operate infrastructure in other countries, including the United States, which means information may be stored or processed outside Canada.
When it is, it is subject to the laws of the country it is in, and to the courts, law enforcement and national-security authorities of that country, whatever we have agreed with the provider. Both PIPA and PIPEDA require us to tell you that plainly, and to hold a provider abroad to a comparable standard of protection by contract. Ask us and we will tell you where a particular category of information is held.
8. How long we keep it
For as long as it takes to do the thing you sent it for, plus whatever period the law requires us to keep a business record, and then no longer. A demo request from someone who never became a customer does not need to live in our systems forever, and it will not.
Server logs are kept briefly, for security and troubleshooting, and are overwritten in the ordinary course. When information reaches the end of its life we delete it or render it anonymous.
9. How we protect it
The site is served over an encrypted connection. Access to form submissions requires an account on the site with the right permission, and accounts are limited to the people whose work requires them. Our forms carry the standard protections against automated abuse, and we keep the software behind the site current.
No system is perfectly secure and we will not claim otherwise. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the appropriate regulator as the law requires, and we will tell you what happened rather than the least we can get away with.
10. Your rights, and how to use them
Under Canadian privacy law you may ask us to:
- confirm whether we hold personal information about you, and give you a copy of it;
- tell you how it has been used, and to whom it has been disclosed;
- correct anything in it that is wrong or incomplete;
- delete it, where we have no legal or business reason to keep it; and
- stop using it, by withdrawing the consent you gave.
Write to contact@bayesstudio.com and say which of those you want. We will confirm we have your request, may need to verify who you are before we act on it, and will respond within 30 days, or tell you before that runs out why we need longer. There is no charge for a reasonable request.
There are narrow situations where the law lets us refuse: where releasing a record would reveal another person’s personal information, or breach solicitor-client privilege. If we refuse, we will tell you why and what you can do about it.
11. Email we send you
We reply to what you send us. We do not add you to a mailing list because you asked for a demo. If we ever send commercial email, it will be because you asked for it, it will say who it is from, and it will carry a working unsubscribe link, which is both Canada’s anti-spam law and the way we would want to be treated.
12. Children
This is a site about industrial monitoring systems and it is not directed at children. We do not knowingly collect personal information from anyone under the age of majority in their province. If you believe a child has sent us something, tell us and we will delete it.
13. Changes to this policy
When our practices change, this page changes, and the date at the top changes with it. A change that materially affects how we handle information you have already given us will be brought to your attention rather than quietly published.
14. Contact, and complaints
Our privacy officer is reachable at contact@bayesstudio.com, or by post at Bayes Studio Inc., UBC HATCH, #073, 2366 Main Mall, Vancouver, BC V6T 1Z4. Every privacy question, request or complaint is read by a person here first, and we would rather hear it directly.
If our answer does not satisfy you, you can take it further. In British Columbia, to the Office of the Information and Privacy Commissioner for BC, at oipc.bc.ca. Federally, to the Office of the Privacy Commissioner of Canada, at priv.gc.ca. Neither route costs you anything, and using one does not affect any other right you have.