Legal & Policies
All compliance, privacy, and consumer-protection documents in one place
Privacy Policy
Effective: November 2, 2026 · Last updated: November 2, 2026
Compliant with PIPEDA, CASL, GDPR (EU clients), and SOC2-aligned security controls
📋 Plain-Language Summary
1YFE AI collects information you provide (name, email, company details) and usage data (website activity) to deliver agentic AI services, generate proposals, and communicate with you. We never sell your data. You can access, correct, or delete your information at any time by emailing hello@1yfe.com.
1. Who We Are
1YFE Inc ("1YFE AI," "we," "us") is an Ontario-incorporated company operating at Toronto, ON · Remote-First. We build and operate agentic AI platforms for enterprise marketing, sales, and revenue operations. We are the data controller responsible for personal information processed through our platform under PIPEDA and applicable privacy laws.
Our Privacy Officer can be reached at hello@1yfe.com or (305) 990-0056.
2. Information We Collect
2.1 Information You Provide
- Identifiers: Full name, email, phone, company name, job title
- Business Information: Revenue team structure, CRM/tech stack, sales workflows, growth goals
- Contract Information: Signed agreements, e-signatures, billing details
- Communications: Emails, support tickets, chat logs, call recordings (with notice)
2.2 Information Collected Automatically
- Usage Data: IP address, browser, pages viewed, clicks, feature usage (anonymized after 26 months)
- Agent Logs: Actions taken by AI agents on behalf of your team — logged for auditability
- Cookies & Pixels: See our Cookie Policy for details and opt-out controls
2.3 Information From Third Parties
- Integrations (with your consent): CRM data from Salesforce/HubSpot, email from Gmail/Outlook, calendar from Google Calendar
- Referrals: Name and email of the person who referred you
3. Purposes and Legal Basis
We collect, use, and disclose personal information only for the purposes identified below. Where required, we obtain express consent at the point of collection.
| Purpose | Legal Basis |
|---|---|
| Delivering AI agent services | Contractual necessity |
| Platform onboarding & configuration | Contractual necessity + express consent |
| Marketing emails / product updates | CASL express consent — one-click unsubscribe |
| Transactional emails (invoices, agent alerts) | CASL implied consent — existing business relationship |
| Agent performance logging & auditability | Legitimate interest + contractual necessity |
| Fraud prevention & platform security | Legitimate interest |
| Product analytics & improvement | Legitimate interest (anonymized) |
4. Who We Share Information With
✅ Categories of Recipients (Always Subject to Confidentiality)
- Infrastructure providers: Cloud hosting (Canadian regions where possible), email delivery, payments (Stripe)
- AI model providers: OpenAI, Anthropic — under data processing agreements (no training on your data)
- Integration partners (with your authorization): Salesforce, HubSpot, Google, Slack, etc.
- Legal advisors, auditors, and insurers bound by professional confidentiality
🚫 We NEVER:
- Sell your personal information to data brokers
- Use your data to train third-party AI models without explicit consent
- Share your CRM or customer data with other 1YFE AI clients
5. Cross-Border Data Transfers
Your data is primarily stored on Canadian servers. Some service providers (e.g., OpenAI, Stripe, Google Analytics) may process limited data in the U.S. or EU. We use Standard Contractual Clauses and Data Processing Agreements to ensure PIPEDA/GDPR-equivalent protections.
6. Your Rights
✓ Right to Access
Get a copy of all personal info we hold (30-day response)
✓ Right to Correction
Fix inaccurate or incomplete records
✓ Right to Withdrawal
Withdraw consent — subject to legal/contractual obligations
✓ Right to Deletion
Request deletion (limited by 7-year tax/audit retention)
✓ Right to Portability
Receive your data in JSON or CSV format
✓ Right to Objection
Object to automated decision-making or marketing
✓ Right to Complaint
Escalate to the Privacy Commissioner of Canada (priv.gc.ca)
✓ Right to Opt-Out
One-click unsubscribe in every marketing message (CASL §11)
Email hello@1yfe.com with subject "Data Rights Request" — we respond within 30 days at no charge.
7. Retention Schedule
- Lead/contact data: 3 years from last interaction (then deleted/anonymized)
- Signed contracts & invoices: 7 years (CRA / tax requirement)
- Agent action logs: 2 years (audit trail)
- Marketing consent records: 3 years after withdrawal (CASL audit trail)
- Call recordings: 12 months (quality assurance)
8. Security
- TLS 1.3 in transit, AES-256 at rest
- Role-based access controls, mandatory MFA for all staff
- Quarterly penetration tests and SOC2-aligned annual audits
- Breach notification within 72 hours per PIPEDA Mandatory Breach Reporting
- All AI model API calls made with scoped, rotated credentials — no persistent storage of model inputs
9. Automated Decisions & AI
We use AI agents to automate tasks (outreach, lead scoring, content generation) on behalf of your team. No decision affecting you personally (billing, contract termination) is made solely by automation — a human reviews all significant decisions. You may request human review of any AI-assisted outcome.
10. Changes to This Policy
Material changes are notified by email at least 30 days in advance and via a banner on the site.
11. Contact & Complaints
1YFE Inc — Privacy Office
- Email: hello@1yfe.com
- Phone: (305) 990-0056
- Location: Toronto, ON · Remote-First
If unsatisfied, you may complain to: Office of the Privacy Commissioner of Canada (priv.gc.ca · 1-800-282-1376).