Privacy Policy

Small Guy AI (“Small Guy AI,” “we,” “us,” “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website (the “Site”) or use our products and services (collectively, the “Services”), including AI and automation tools for small businesses.

By using our Site or Services, you consent to the practices described in this Privacy Policy.

1) Scope: Who This Policy Applies To

This Privacy Policy applies to:

Website visitors who browse our Site or contact us

Prospective customers who request a demo or trial

Customers and their authorized users who use our Services

End users who communicate with our customers through workflows powered by our Services (for example, callers to a customer’s phone line, website chat visitors, or people messaging a customer on social media)

Important note about end users:
When our Services are used by a business customer, that customer is generally the controller (or organization responsible) for how end-user information is collected and used. Small Guy AI typically acts as a service provider/processor helping the customer deliver communications. If you are an end user interacting with one of our customers, your primary relationship is with that business, and their privacy practices apply as well.

2) Personal Information We Collect

We collect personal information in several ways depending on how you interact with us.

A) Information you provide to us

Examples include:

Name, email address, phone number

Business name, job title, and business contact details

Information you submit in forms (demo requests, onboarding forms, support requests)

Payment and billing details (typically processed by third-party payment processors)

Communications you send us (emails, chat messages, support tickets)

B) Information collected through your use of our Services (Customer Data)

If you are a customer using our Services, we may process information that you (or your end users) provide, such as:

Customer and lead contact details (name, phone, email)

Appointment and scheduling details

Message content (SMS, email, chat, social messages)

Call metadata (e.g., date/time, duration) and, if enabled by the customer, call recordings or transcripts

CRM notes, tags, pipeline stages, and interaction history

Automated workflow events (e.g., “confirmation sent,” “reminder delivered”)

C) Information collected automatically (Website & device data)

When you visit our Site, we may collect:

IP address and general location (city/region level)

Device type, browser type, operating system

Pages viewed and time spent

Referral source (how you found our Site)

Cookies and similar technologies (see Section 8)

3) How We Use Personal Information

We use personal information for purposes such as:

A) Providing and operating our Services

Creating and managing accounts

Delivering AI and automation features (e.g., chat, voice, messaging workflows)

Setting up and maintaining integrations (CRM, calendars, social platforms, etc.)

Providing customer support and troubleshooting

Monitoring performance, reliability, and security

B) Improving our products and services

Understanding how our Site and Services are used

Debugging and improving features

Developing new features and capabilities

Analytics and reporting

C) Communicating with you

Responding to inquiries and demo requests

Sending onboarding or operational communications

Sending service updates, technical notices, and security alerts

Sending marketing messages where permitted by law (and with appropriate consent/opt-out)

D) Billing and administration

Processing subscription payments and invoices

Managing renewals, cancellations, and account status

Preventing fraud and unauthorized access

E) Legal and compliance

Complying with applicable laws (including privacy and anti-spam requirements)

Enforcing our Terms & Conditions

Protecting the rights and safety of our users, customers, and the public

4) Legal Bases / Consent (Canada / PIPEDA)

We generally collect, use, and disclose personal information with your knowledge and consent, except where permitted or required by law.

For marketing messages (email/SMS), we follow applicable anti-spam rules (including CASL where relevant). You can withdraw consent or unsubscribe at any time using the link in our emails or by contacting us.

5) How We Share Personal Information

We do not sell your personal information. We may share personal information in the following circumstances:

A) Service providers (processors)

We may share data with trusted third parties who help us run our business, such as:

Hosting and cloud infrastructure providers

Analytics providers

Payment processors

Email/SMS/telephony providers (as required to deliver communications)

Customer support tools

Integration partners (e.g., CRM or scheduling systems you connect)

These providers are authorized to use personal information only as needed to provide services to us (and are expected to protect it).

B) With your consent or at your direction

For example, if you request an integration or connect a third-party account, we may share data to fulfill that request.

C) Legal, compliance, and protection

We may disclose personal information if we believe disclosure is necessary to:

comply with law, regulation, legal process, or government request

enforce our agreements and policies

protect rights, property, and safety of Small Guy AI, our customers, or others

D) Business transactions

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality safeguards.

6) AI Features, Automated Decisions, and Human Oversight

Our Services may use AI to generate responses, suggestions, or automated communications. AI can make mistakes.

Customers control how AI is configured and what it is trained on (e.g., business FAQs, hours, policies).

Customers are responsible for reviewing and approving business-critical content (pricing, policies, regulated communications).

We encourage escalation paths to a human when needed.

If you are an end user interacting with a customer’s AI assistant (voice/chat/social), the business you are contacting is responsible for the purpose and content of that interaction.

7) Data Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy, including to:

provide Services and support

comply with legal and accounting obligations

resolve disputes

enforce agreements

Retention periods may vary depending on data type (e.g., billing records vs. message logs) and customer plan settings. Customers may request deletion of certain data, subject to legal requirements.

8) Cookies and Similar Technologies

We use cookies and similar technologies to:

make our Site work properly

remember preferences

understand site usage and improve performance

measure marketing effectiveness

You can control cookies through your browser settings. Disabling cookies may affect certain Site functionality.

Common cookie categories:

Essential: required for basic site operation

Analytics: helps us understand traffic and usage

Marketing: helps us measure ads and campaigns (where used)

9) International Data Transfers

We are based in Canada, but some service providers or data storage may occur in other countries (including the United States). When personal information is transferred outside Canada, it may be subject to the laws of that jurisdiction and accessible to law enforcement or government authorities.

We take reasonable steps to ensure appropriate safeguards are in place for cross-border transfers.

10) Security Safeguards

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against loss, theft, unauthorized access, disclosure, or misuse. However, no system is perfectly secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and limiting access to authorized users.

11) Your Privacy Rights (Access, Correction, Withdrawal of Consent)

Depending on your relationship with us and applicable law, you may have the right to:

request access to your personal information

request correction of inaccurate information

withdraw consent (where applicable)

request deletion, subject to legal/contractual limits

End users: If you are interacting with a Small Guy AI-powered assistant operated by one of our business customers, you may need to contact that business first, as they control the data collected in that interaction.

12) Marketing Communications

We may send marketing communications where permitted by law and based on your consent or relationship with us. You can opt out at any time by:

clicking the unsubscribe link in emails

replying STOP to SMS (where applicable)

contacting us directly

Even if you opt out of marketing, we may still send important administrative or service-related messages.

13) Children’s Privacy

Our Site and Services are not intended for children under the age of 13 (or the age defined by applicable local law), and we do not knowingly collect personal information from children.

14) SMS opt-in details

By texting "Small Guy" to our contact phone number. We will only send you texts related to your account, no marketing texts will be sent.

15) Mobile info sharing statement

We do NOT share or sell any of your contact information including your phone number.