Privacy Policy

1. Who We Are

ALSI Inc. ("we", "us", "our") is a federal corporation incorporated under the laws of Canada (OCN 1001543070), operating the Human.Exe platform at human-exe.ca. We are the data controller for information collected through the Service.

This Privacy Policy applies to personal information collected when you access or use human-exe.ca and its associated services. It does not apply to data processed by third-party AI providers using your own API keys — that data is governed by the respective provider's privacy policies.

2. Information We Collect

Information you provide directly:

• Email address — if submitted for waitlist, early access, or account registration
• Contact information — if you contact us directly for support or inquiries
• Account credentials — username and password if an account is created
• Subscription tier selection and billing cycle — recorded at checkout and on account creation
• Book and merch waitlist submissions — email address and product preferences
• Intelligence Scholarship access level — tier-unlocked curriculum level, not linked to curriculum activity beyond access gating

Information collected automatically:

• Session identifiers — anonymous cryptographic IDs generated per governed session (not linked to identity)
• Technical logs — request timestamps, response codes, error events (no prompt content stored)
• Network metadata — IP address (handled by Cloudflare at the edge; not stored by ALSI Inc. beyond security purposes)
• Browser and device type — via Cloudflare edge analytics (aggregated and anonymized)

What we do NOT collect:

• The content of your AI inference prompts or responses
• Your AI provider API keys (not retained beyond the duration of a request)
• Biometric data of any kind
• Financial or payment information — processed exclusively by Stripe (see Section 6)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Authenticate access and enforce tier-based access controls
• Detect, investigate, and prevent security incidents and abuse
• Communicate with you about your account, access status, or product updates (where you have opted in)
• Comply with legal obligations applicable to ALSI Inc. under Canadian law
• Generate aggregate, anonymized statistics about platform usage

We do not sell, rent, or trade your personal information. We do not use your information to train AI models. We do not use your information for behavioural advertising.

4. Information We Share

We do not sell your personal information. We share information only in the following circumstances:

• Service infrastructure providers: Vercel (hosting; Canada and US data centres), Cloudflare (CDN, DDoS protection, edge security) — both acting as data processors under contractual data protection obligations
• Payment processing: Stripe Inc. — processes subscription billing and merchandise checkout directly; ALSI Inc. does not receive or store full payment card numbers, CVVs, or raw payment credentials. Stripe returns a customer ID and subscription record used to enforce tier-based access.
• AI voice synthesis: Google LLC (Google Cloud Text-to-Speech) — receives text content (podcast scripts) for audio synthesis; no personal information about users is transmitted. Audio is produced by ALSI Inc. prior to publication and is not generated in response to user input.
• Legal requirements: If required by applicable law, court order, or lawful governmental authority
• Business transfers: In the event of a merger, acquisition, or sale of substantially all assets, your information may be transferred — you will be notified of any change in controlling entity

5. Data Storage and Security

Your personal information is stored on infrastructure operated by Vercel Inc. and protected at the network edge by Cloudflare Inc. Both providers maintain SOC 2 Type II certification and apply industry-standard encryption in transit (TLS 1.2+) and at rest.

Governed session data — including audit trail hashes — is stored in encrypted form and identified only by anonymous session identifiers, not by personal identity. ALSI Inc. implements HMAC-SHA256 signing for all governance API requests and maintains strict access controls on internal systems.

No system is perfectly secure. In the event of a data breach that affects your personal information, we will notify you as required under applicable Canadian privacy law.

6. Canadian Data Residency

Human.Exe is a Canadian product. ALSI Inc. is a Canadian federal corporation and takes Canadian data sovereignty seriously as a design principle. Primary processing infrastructure is located in Canada and the United States, consistent with Vercel's standard deployment regions. We do not knowingly route personal data through jurisdictions with inadequate privacy protections without appropriate safeguards.

Enterprise clients with specific data residency requirements (e.g., requiring exclusively Canadian data centres) may contact us to discuss sovereign compute deployment options.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law:

• Account information: retained for the duration of your account plus 90 days after closure
• Audit trail hashes: retained for 90 days on standard tiers; configurable on Enterprise plans
• Security and abuse logs: retained for up to 12 months
• Anonymous analytics: retained indefinitely in aggregate form

During the pre-launch phase, retention periods may be shorter as the platform is actively developed.

8. Your Rights Under PIPEDA

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate or incomplete information be corrected
• Withdrawal of consent — withdraw consent to processing where consent is the legal basis, subject to legal or contractual restrictions
• Deletion — request deletion of your personal information, subject to retention requirements under applicable law
• Complaint — lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

To exercise any of these rights, contact us at privacy@atkinson-lineage.ca. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies to operate the Service. For full details, see our Cookie Policy.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a person under 18, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected in an updated effective date. During the pre-launch phase, changes may occur as the platform develops. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

Privacy inquiries: privacy@atkinson-lineage.ca

General inquiries: hello@human-exe.ca

ALSI Inc. · Toronto, Ontario, Canada · Federal Corporation OCN 1001543070