Privacy Policy

Adiuvo ("we", "us", or "our") operates the website adiuvo.ca and the Adiuvo platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

We are committed to protecting your privacy in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Ontario's applicable privacy legislation, and Canada's Anti-Spam Legislation (CASL).

We collect the following categories of personal information:

2.1 Information You Provide

• Account registration details (name, email address, phone number, mailing address)
• Payment and billing information processed through our third-party payment processor (Stripe)
• Communications you send to us (contact form submissions, support requests, feedback)
• Content and data you input into the platform while using our products and tools

2.2 Information Collected Automatically

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, features used, session duration, referral source)
• Cookies and similar tracking technologies (see Section 8)

We use the information we collect for the following purposes:

• To provide and maintain the Service — including account creation, authentication, subscription management, and customer support
• To improve and enhance the Adiuvo platform — usage patterns and interaction data are analyzed to produce stronger, more accurate results across all platform tools and AI-powered features
• To process transactions — billing, invoicing, and payment processing through Stripe
• To communicate with you — service announcements, security alerts, billing notifications, and responses to your inquiries
• To ensure security and prevent fraud — detecting unauthorized access, abuse, or violations of our Terms of Service
• To comply with legal obligations — as required by applicable Canadian law

Platform improvement: Data you provide and generate while using the Service may be used in aggregate or anonymized form to train, calibrate, and improve the AI models and algorithms that power the Adiuvo platform. This ensures the platform continuously delivers more accurate and relevant results for all users.

Under PIPEDA, we process your personal information based on the following lawful grounds:

• Consent — You provide consent when you create an account, submit information through forms, or use our Service
• Contractual necessity — Processing necessary to fulfil our obligations under the Terms of Service and any subscription agreements
• Legitimate interests — Improving the platform, preventing fraud, and ensuring security, where such interests are not overridden by your privacy rights
• Legal compliance — Where required by Canadian federal or provincial law

We do not sell, rent, or trade your personal information. We may share your information with:

• Service providers — Third-party vendors who assist in operating the Service (e.g., Stripe for payments, cloud hosting providers). These providers are contractually required to protect your data and use it only for the purposes we specify.
• Legal authorities — When required by law, subpoena, court order, or governmental regulation, or to protect our rights, property, or safety
• Business transfers — In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction

Adiuvo provides AI-powered features across its platform, including content generation, risk assessment, and inter-agent communication. Access to AI features depends on your subscription plan.

6.1 AI Access by Plan

6.2 Shared LLM Pool (Professional, Business, Enterprise)

When you use AI features through Adiuvo's shared pool, your prompts are routed through our infrastructure to a third-party inference provider. Our shared-pool provider operates under a Zero Data Retention (ZDR) policy, meaning inference data is not retained by the provider after the response is delivered.

Platform Learning: By default, Adiuvo may retain and use anonymized or aggregated prompt and response data from shared-pool AI interactions to improve the accuracy, quality, and reliability of AI features across the Adiuvo platform. This data is stripped of personally identifiable information before use. You may opt out of platform learning at any time from your account settings. Opting out does not affect your access to AI features — your prompts will continue to be processed normally but will not be used for platform improvement.

We apply automated PII detection on shared-pool payloads before they reach the provider as a supplementary safeguard. You should not include sensitive personal data, financial data, health information, or authentication credentials in AI prompts when using the shared pool.

6.3 Bring Your Own Key (Business & Enterprise)

Business and Enterprise clients may provide their own API key from a supported LLM provider. When using BYOK mode, prompts are routed using your key. We do not store, inspect, or log prompt or response content. Your API key is encrypted at rest (AES-256) and decrypted only in memory at request time. You control the relationship with your chosen provider and are bound by their terms and privacy policy.

When using BYOK mode, Adiuvo does not store prompt or response content. Adiuvo may collect anonymized usage patterns and aggregate interaction metadata as necessary to maintain service quality, prevent abuse, and improve platform features. You may opt out of non-essential data collection from your account settings.

6.4 Metadata Logging

For all AI requests, we log operational metadata only: request count, latency, token usage, timestamp, and provider. We never log prompt or response content. Metadata is retained for 90 days for billing and operational purposes.

AI Data Handling Policy: For complete details on data handling, prohibited data categories, liability allocation, and compliance considerations, please contact us at privacy@adiuvo.ca to request a copy of our full AI Data Handling Policy.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you close your account, we will retain your data for a reasonable period to comply with legal obligations, resolve disputes, and enforce our agreements. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics and platform improvement purposes.

We use cookies and similar technologies for:

• Essential cookies — Required for the Service to function (authentication, session management)
• Analytics cookies — Help us understand how visitors interact with the Service so we can improve it
• Preference cookies — Remember your settings and preferences

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encrypted data transmission (TLS/SSL), secure server infrastructure, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Under PIPEDA and applicable Ontario law, you have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Withdrawal of consent — Withdraw your consent to the processing of your personal information (subject to legal or contractual restrictions)
• Deletion — Request deletion of your personal information, subject to our legal retention obligations
• Complaint — File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

To exercise any of these rights, contact us at info@adiuvo.ca. We will respond to your request within 30 days.

Adiuvo's own infrastructure is located in Montreal, Canada. However, certain service providers used by the platform operate infrastructure in other jurisdictions. When you use AI features through our shared pool, prompts transit from our Canadian infrastructure to inference endpoints located in the United States. Where your personal information is transferred internationally, we ensure appropriate safeguards are in place to protect your data in accordance with PIPEDA.

Business and Enterprise clients using BYOK mode should assess international transfer requirements with their own chosen LLM provider.

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised effective date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: