Privacy Policy

NeuralNarrativeAI Inc. ("NeuralNarrativeAI," "we," "us," or "our") is committed to protecting the privacy of individuals whose personal information we collect, use, and disclose. This Privacy Policy describes how we handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA), the Act respecting the protection of personal information in the private sector (Quebec Law 25), and other applicable Canadian privacy legislation.

This policy applies to personal information collected through our website at neuralnarrativeai.pro, our applied AI narrative platform, training programmes, professional services, and any other interactions you have with NeuralNarrativeAI. By using our services or providing personal information to us, you acknowledge that you have read and understood this Privacy Policy.

1. Accountability

NeuralNarrativeAI Inc. is responsible for personal information under our control. We have designated a Privacy Officer accountable for our compliance with PIPEDA and Quebec privacy requirements. You may contact our Privacy Officer at [email protected] or by mail at 1253 McGill College Avenue, Suite 700, Montreal, QC H3B 2Y5, Canada.

We implement policies and practices to give effect to the principles set out in this Privacy Policy, including designating personnel responsible for privacy compliance, training staff on privacy obligations, and establishing procedures to receive and respond to inquiries and complaints.

2. Identifying Purposes

We identify the purposes for which personal information is collected before or at the time of collection. The primary purposes for which we collect personal information include:

• Responding to enquiries submitted through our contact form, email, or telephone
• Delivering training programmes (NNA-101 through NNA-601) and professional services
• Operating our applied AI narrative platform for clients under service agreements
• Processing narrative pipeline data on behalf of enterprise clients as a data processor
• Managing client accounts, billing, and contractual relationships
• Improving our website, platform, and services through analytics
• Complying with legal and regulatory obligations
• Protecting against fraud, abuse, and security threats

We will not use personal information for purposes other than those identified herein without obtaining your consent, except where permitted or required by law.

3. Consent

We obtain your knowledge and consent for the collection, use, and disclosure of personal information, except where inappropriate or permitted by law. Consent may be express (such as checking a consent box on our contact form) or implied (such as providing your business card at an event with the understanding we will follow up).

You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services. To withdraw consent, contact [email protected].

For contact form submissions, we require express consent via the consent_pipeda checkbox before processing your enquiry. This consent is not pre-checked and must be actively provided by you.

4. Limiting Collection

We limit the collection of personal information to that which is necessary for the identified purposes. The types of personal information we may collect include:

• Identity information: name, job title, organisation name
• Contact information: email address, telephone number, mailing address
• Communication content: messages submitted through our contact form or email correspondence
• Account information: login credentials, programme enrolment records, service agreement details
• Technical information: IP address, browser type, device information, cookies (see our Cookie Policy)
• Billing information: payment details processed through third-party payment processors
• Client data: source datasets and narrative content processed on behalf of enterprise clients under contractual data processing agreements

We collect personal information by fair and lawful means and do not collect information through deceptive practices.

5. Limiting Use, Disclosure, and Retention

We do not use or disclose personal information for purposes other than those for which it was collected, except with your consent or as required by law. Personal information is retained only as long as necessary to fulfil the identified purposes or as required by law.

We may disclose personal information to:

• Service providers who assist with hosting, analytics, email delivery, payment processing, and platform operations — bound by contractual obligations to protect personal information
• LLM providers (Azure OpenAI, AWS Bedrock, Anthropic, etc.) when processing narrative pipeline data on behalf of clients, subject to data processing agreements and residency requirements
• Professional advisors (lawyers, accountants) bound by confidentiality obligations
• Government authorities when required by law, court order, or regulatory request
• Successors in the event of a merger, acquisition, or sale of assets, subject to continued protection of personal information

We do not sell personal information to third parties. We do not use personal information for automated decision-making that produces legal or similarly significant effects without human review.

Retention periods vary by data type: contact form submissions are retained for three years; programme records for seven years; client pipeline data per contractual agreements (typically deleted within ninety days of contract termination unless otherwise specified); website analytics data for twenty-six months.

6. Accuracy

We endeavour to ensure that personal information is as accurate, complete, and up-to-date as necessary for the purposes for which it is used. You may request correction of inaccurate personal information by contacting [email protected]. We will amend records as appropriate and, where necessary, disclose corrections to third parties who received the inaccurate information.

7. Safeguards

We protect personal information with security safeguards appropriate to the sensitivity of the information. Measures include:

• Encryption in transit (TLS 1.2+) and at rest for sensitive data
• Access controls limiting personal information to authorised personnel on a need-to-know basis
• Multi-factor authentication for platform and administrative access
• Regular security assessments and vulnerability testing
• Employee privacy and security training
• Incident response procedures for data breaches
• Hosting on Canadian and North American infrastructure with data residency options

Despite our safeguards, no method of transmission or storage is completely secure. We cannot guarantee absolute security of personal information.

8. Openness

We make information about our privacy policies and practices readily available. This Privacy Policy is published on our website. Additional information about our privacy practices is available upon request by contacting [email protected].

9. Individual Access

Upon written request, we will inform you of the existence, use, and disclosure of your personal information and provide access to that information, subject to limited exceptions permitted by law (such as information protected by solicitor-client privilege or information about another individual).

Access requests should be sent to [email protected] with sufficient detail to identify the information sought. We will respond within thirty days. If we deny access, we will provide reasons and information about complaint procedures.

10. Challenging Compliance

You may challenge our compliance with PIPEDA by contacting our Privacy Officer at [email protected]. We will investigate all complaints and respond within a reasonable timeframe. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Commission d'accès à l'information du Québec (cai.gouv.qc.ca), as applicable.

11. Quebec-Specific Provisions

As a Quebec-incorporated organisation, we comply with Law 25 (modernised Quebec privacy legislation). Additional rights for Quebec residents include the right to data portability, the right to de-indexation in certain circumstances, and enhanced requirements for consent when collecting sensitive personal information. Our Privacy Impact Assessments for platform features involving personal information are available to enterprise clients upon request.

12. AI and Automated Processing

NeuralNarrativeAI operates an applied AI narrative platform that processes data using large language models. When we process personal information through AI systems on behalf of clients, we act as a data processor under contractual terms defined in service agreements. We do not use client personal information to train general-purpose models without explicit consent. Generated narrative content may contain inaccuracies and is subject to human review requirements outlined in our Terms of Service.

13. International Transfers

While we primarily host on Canadian and North American infrastructure, some service providers may process data in the United States. Where personal information is transferred outside Canada, we ensure comparable protection through contractual safeguards, data processing agreements, and provider assessments. Enterprise clients may specify Canadian-only data residency requirements.

14. Children's Privacy

Our services are directed at business and professional users. We do not knowingly collect personal information from individuals under sixteen years of age. If we become aware that we have collected personal information from a child, we will take steps to delete that information promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related enquiries, access requests, or complaints:

Privacy Officer
NeuralNarrativeAI Inc.
1253 McGill College Avenue, Suite 700
Montreal, QC H3B 2Y5, Canada
Email: [email protected]
Telephone: +1 (514) 555-3471