Back to Waitlist
Legal

Privacy Policy

Last updated: March 2026 · Genius Labs AI Inc.

1. Introduction

Genius Labs AI Inc. ("we," "our," or "us") is a Burlington, Ontario-based technology company committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our AI SaaS platforms.

This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL), as well as other applicable Canadian provincial privacy laws. Where you are located outside Canada, additional laws may apply.

By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We may collect the following categories of information:

  • Waitlist and account information — name, email address, company name, and password when you register or join our waitlist
  • Consent records — timestamp, IP address, and the specific consent given when you opt in to receive commercial electronic messages (CEMs)
  • Usage data — pages visited, features used, session duration, and interaction patterns
  • Device information — IP address, browser type, operating system, and device identifiers
  • Business data — data you upload or process through our platforms, subject to your data processing agreement
  • Communications — emails, support requests, and feedback you send us

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and improve our AI platforms and services
  • Process transactions and send related transactional communications
  • Send commercial electronic messages (CEMs) — including product updates, launch announcements, and promotional content — only where you have provided express consent as required by CASL
  • Send administrative and transactional communications that do not require consent under CASL (e.g., account confirmations, security alerts)
  • Respond to support requests and inquiries
  • Analyze usage trends to enhance product functionality
  • Maintain records of consent as required by CASL
  • Comply with legal obligations under PIPEDA, CASL, and other applicable law

4. Commercial Electronic Messages (CASL)

We comply fully with Canada's Anti-Spam Legislation (CASL, S.C. 2010, c. 23). We will only send you commercial electronic messages if you have provided express consent by actively opting in — for example, by checking a consent box on our waitlist form.

Every commercial email we send will include:

  • Clear identification of Genius Labs AI Inc. as the sender
  • Our mailing address: Burlington, Ontario, Canada
  • A working, prominently placed unsubscribe mechanism that is honored within 10 business days

To withdraw consent at any time and stop receiving commercial emails, you may:

  • Click the unsubscribe link in any email we send
  • Email us at privacy@geniuslabsai.io with the subject line "Unsubscribe"

Withdrawing consent does not affect your right to receive transactional messages related to services you have requested.

5. How We Share Your Information

We do not sell your personal information. We do not share your email address with third parties for their own marketing purposes. We may share information with:

  • Service providers — third-party vendors who assist in operating our platform (e.g., email delivery, analytics), under strict confidentiality agreements and only to the extent necessary
  • Legal authorities — when required by law, court order, or governmental regulation
  • Business transfers — in connection with a merger, acquisition, or sale of assets, with prior notice to you

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Consent records are retained for a minimum of 3 years from the date of collection, as required by CASL, even if you subsequently withdraw consent.

You may request deletion of your personal data at any time by contacting us at privacy@geniuslabsai.io. We will respond within 30 days. Note that consent logs may be retained for the legally required period regardless of deletion requests.

7. Your Rights Under PIPEDA

As a Canadian resident, you have the following rights under PIPEDA:

  • Right of access — request a copy of the personal information we hold about you
  • Right to correction — request correction of inaccurate or incomplete data
  • Right to withdraw consent — withdraw consent for commercial electronic messages at any time (see Section 4)
  • Right to deletion — request deletion of your personal data, subject to legal retention requirements
  • Right to complain — file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca if you believe your privacy rights have been violated

To exercise any of these rights, contact us at privacy@geniuslabsai.io. We will respond within 30 days as required by PIPEDA.

8. International Users — Your Jurisdiction-Specific Rights

We serve users globally. In addition to your rights under PIPEDA (Section 7), you may have additional rights depending on your country of residence. We honor these rights regardless of where you are located.

🇵🇭 Philippines — Republic Act 10173 (Data Privacy Act of 2012)
If you are a resident of the Philippines, you have rights under the Data Privacy Act of 2012 (RA 10173) enforced by the National Privacy Commission (NPC). These include the right to be informed, right to access, right to object, right to erasure or blocking, right to damages, right to data portability, and right to lodge a complaint with the NPC. We comply with NPC registration requirements where applicable. Cross-border transfers of Philippine personal data to Canada are conducted under appropriate safeguards. To contact the NPC: www.privacy.gov.ph.

🇺🇸 United States — California (CCPA/CPRA) and Federal Law
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you additional rights, including: the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale or sharing of your personal information, the right to correct inaccurate personal information, and the right to limit use of sensitive personal information. We do not sell or share personal information as defined under CCPA/CPRA. Our commercial email practices also comply with the federal CAN-SPAM Act in addition to CASL. Residents of Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), and other US states with comprehensive privacy laws may exercise equivalent rights by contacting us.

🇦🇺 Australia — Privacy Act 1988 and Australian Privacy Principles
If you are an Australian resident, your personal information is handled in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access and correct personal information we hold about you, and to complain about a breach of your privacy rights to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au. We comply with APP 8 cross-border disclosure obligations when transferring your data to or from Australia. Our direct marketing practices also comply with the Australian Spam Act 2003.

🇪🇺 European Union and 🇬🇧 United Kingdom — GDPR and UK GDPR
If you are located in the EEA or UK, in addition to the rights already described, you have the following rights under the General Data Protection Regulation (GDPR) and UK GDPR:

  • Right to erasure (Article 17) — request deletion of your personal data where it is no longer necessary, or where you withdraw consent
  • Right to restriction of processing (Article 18) — request we limit how we use your data in certain circumstances
  • Right to data portability (Article 20) — receive your data in a structured, machine-readable format and transmit it to another controller
  • Right to object (Article 21) — object to processing based on legitimate interests or for direct marketing purposes
  • Right not to be subject to automated decision-making (Article 22) — we do not use solely automated decision-making that produces legal or similarly significant effects on you

Our legal basis for processing under GDPR Article 6 is primarily: (a) your consent for marketing communications; (b) contractual necessity for service delivery; and (c) our legitimate interests for security and platform improvement. You may lodge a complaint with your local supervisory authority. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.

9. Data Protection Officer

We have designated a Privacy Officer responsible for overseeing compliance with this policy and applicable privacy laws including PIPEDA, RA 10173 (Philippines), GDPR, and the Australian Privacy Act. For all privacy-related inquiries, contact our Privacy Officer at privacy@geniuslabsai.io.

10. Cookies

We use cookies and similar tracking technologies. For full details, please review our Cookie Policy.

11. Data Security

We implement industry-standard security measures including encryption in transit and at rest, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure. For details on our security practices, please review our Security page.

12. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, contact us immediately at privacy@geniuslabsai.io and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email (where you have provided consent to receive such communications) or by posting a prominent notice on our website. The updated date at the top of this page reflects the most recent revision. We will not retroactively reduce your rights under this policy without your explicit consent.

14. Contact Us & Complaints

For questions, concerns, or to exercise your privacy rights under PIPEDA or CASL, contact our Privacy Officer at:

Genius Labs AI Inc.
Burlington, Ontario, Canada
privacy@geniuslabsai.io

If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada:
www.priv.gc.ca · 1-800-282-1376

© Genius Labs AI Inc. All rights reserved. · Burlington, ON, Canada
Manage Consent
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}