Privacy Policy

17466382 CANADA INC. (operating commercially as DatSOR)

Effective Date: January 14, 2026 (Amended and updated on June 15, 2026)

Welcome to DatSOR! DatSOR is an AI-powered sales automation and conversational marketing platform designed to help businesses automate inbound sales conversations on WhatsApp Business, Instagram Business, and Website Chat, as well as generate and optimize marketing assets. Protecting the privacy and security of our Clients and their End-Customers is a core commitment of our global operations.

This Privacy Policy explains how 17466382 CANADA INC. (“DatSOR”, “we”, “us”, or “our”), a corporation incorporated under the federal laws of Canada, collects, uses, discloses, and protects personal information when you visit our website (https://datsor.com/) (the “Website”), register for our Trial, or subscribe to our Service.

We process personal data in accordance with robust international data protection frameworks, including:

Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
The European Union’s General Data Protection Regulation (GDPR) and the EU Artificial Intelligence Act (EU AI Act).
The California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
Brazil’s Lei Geral de Proteção de Dados (LGPD).
Applicable Latin American data protection laws, including Ley 1581 de 2012 (Colombia), Ley Federal de Protección de Datos Personales en Posesión de Particulares (LFPDPPP) (Mexico), Ley N° 29733 (Peru), and Ley N° 25.326 (Argentina).

Data Protection Roles and Scope

To understand your privacy rights and our obligations under this Policy, it is critical to distinguish between our two operational roles:

DatSOR as a Data Controller: When we collect and process personal data directly from you (as a website visitor, trial registrant, or direct business client) to manage your account, billing, and our commercial relationship, DatSOR acts as the Data Controller.
DatSOR as a Data Processor: When we process conversational data, text, files, and multimedia assets of your end-users (“End-Customers”) on your behalf through our Service, you (our Client) are the Data Controller, and DatSOR is the Data Processor. We process this data strictly under your documented instructions, as outlined in Section 8.

1. Information We Collect

We collect information through three primary channels:

a) Information You Provide Directly to Us (As a Client or Website Visitor)

Web Forms & Trial Registration: When you submit a contact form, request a demo, or sign up for our 1-Month Free Trial, we collect your name, business email address, phone number, company name, and any specific details you include in your message.
Client Account & Billing: When you transition to a paid Subscription Plan, we collect account management details (corporate name, business address, and administrative contact details). Financial transactions and credit card processing are handled securely by our authorized secure third-party payment processors or Merchants of Record (such as Stripe, FastSpring, or other PCI-DSS compliant providers). We do not store raw card credentials on our servers.
AI Training & Configuration Data: To configure and train your designated AI sales agent, we collect commercial data that you upload to our platform, including product catalogs, price lists, business details, scripts, and Frequently Asked Questions (FAQs).

b) Customer Data Processed on Your Behalf (As a Data Processor)

When End-Customers interact with your automated AI agents via WhatsApp Business, Instagram Business, or your Website Chat, we process the following on your behalf:

Chat Logs & Metadata: The full text, conversational history, timestamps, participant identifiers, and delivery metadata of the chat.
Multimedia Assets: Voice notes, documents, and media files exchanged during the chat.
Generative AI & Marketing Assets (“AI Marketing Plan”): If you subscribe to our AI Marketing Plan, you or your End-Customers may upload photos and videos. We process these multimedia files to edit, optimize, and generate synthetic or modified marketing assets through secure third-party AI models.

c) Information Collected Automatically (Website Visitors)

Technical Data: When you browse our Website, we automatically log your IP address, browser type, operating system, referring URLs, pages viewed, and timestamps using cookies and similar web tracking technologies. To manage your cookie consent, please refer to our Cookie Policy.

2. How We Use Your Information (Legal Bases)

We process your data (as a Controller) based on the following legal bases: Contractual Necessity, Consent, Compliance with Legal Obligations, and our Legitimate Interests (such as website security, platform optimization, and preventing fraud).

Specifically, we use the collected data to:

a) Operate, Calibrate, and Train Your Account’s AI

We use your provided commercial catalogs, pricing, FAQs, and business details (User Content) exclusively to configure, operate, and train the specific conversational AI agents assigned to your individual account.
Meta Platform Compliance & No-Training Guarantee: In strict compliance with Meta’s Developer Policies and WhatsApp Business terms, DatSOR does not under any circumstances use Customer Data (the content, text, media, or metadata of chats transmitted through WhatsApp Business or Instagram Business APIs) to train, fine-tune, or develop any general-purpose artificial intelligence models, third-party Large Language Models (LLMs), or broad machine learning technologies.
Infrastructure Optimization: Subject to these training prohibitions, we may only use aggregated, anonymized, and de-identified technical usage metrics (such as API response times, platform error rates, or conversational volume logs) to maintain, troubleshoot, and optimize the underlying performance of our SaaS platform.

b) Execute Multimedia AI Marketing Processing

Under the AI Marketing Plan, we process uploaded photos and videos using advanced third-party generative AI and editing APIs to crop, touch up, alter, or generate promotional content.
Safeguards Against AI Model Training: We contractually ensure that the third-party AI platforms used as sub-processors for media editing do not retain your media files to train their commercial generative models.
AI Transparency and Watermarking: In strict compliance with the transparency obligations of the EU AI Act, any synthetic image, video, or audio generated or significantly modified by our generative AI tools will contain standard metadata or digital watermarks identifying the content as artificially generated or manipulated.

c) Continuous Lifecycle Management (Trial-to-Paid)

Your personal data is collected and processed continuously starting from your registration for our 1-Month Free Trial. If you elect to purchase a paid subscription, the processing of your data seamlessly carries over under the same privacy and security standards, ensuring uninterrupted compliance throughout the client lifecycle.

3. How We Share Information

We do not sell, rent, or trade your personal information or your End-Customers’ data. We only share information under the following strictly defined scenarios:

a) With You (Our Client)

Customer Data from chat conversations processed by our AI agents is made available to you via your dedicated DatSOR platform interface, as you are the Data Controller of this data.

b) With Third-Party Service Providers

We share information with trusted third-party vendors and service providers who perform operations on our behalf. These providers are contractually bound to protect the information and use it only for the purposes for which we provide it to them:

Infrastructure & Hosting: We use Amazon Web Services (AWS) for secure cloud hosting and database management.
Billing & Payments: We use authorized secure third-party payment processors and merchants of record to handle payment compliance, invoicing, and secure transactions in accordance with payment network standards.”
Multimedia and Design Sub-processors (AI Marketing Plan): If you are subscribed to our AI Marketing Plan, we share photos, videos, and images with Nano Banana, our professional third-party multimedia and AI processing partner, solely to edit, optimize, and generate marketing assets on your behalf. Nano Banana is contractually bound to safeguard your files and is prohibited from using your uploaded multimedia assets to train its own artificial intelligence models. You are encouraged to review their privacy practices directly at:
- Nano Banana Privacy Policy: https://nanobanana.com/privacy-policy

c) With Third-Party Services (Directly)

Our Service integrates directly with third-party software to deliver specific AI and messaging features. Data (such as chat content) is transmitted to these systems as necessary for the Service to function:

Meta Platforms, Inc.: To send and receive messages via the WhatsApp Business API and Instagram Graph API.
Generative AI Providers: We transmit text-based inputs to natural language models (such as Google LLC’s Google Gemini API) to generate real-time automated conversational responses.

These third-party platforms operate under their own privacy policies and terms, and we encourage you to review their practices directly.

d) Legal and Compliance

We may disclose information if required to do so by Canadian law or other applicable jurisdictions, in response to lawful subpoenas, warrants, court orders, or valid requests from public authorities, or if we believe in good faith that disclosure is necessary to protect our rights, investigate fraud, or ensure the safety of any person.

e) Business Transfers

If DatSOR is involved in a corporate merger, acquisition, restructuring, or sale of assets, personal information and Customer Data may be transferred as part of that transaction, subject to strict confidentiality and privacy obligations.

4. Cross-Border Data Transfers

DatSOR’s core platform infrastructure is hosted on secure cloud servers provided by Amazon Web Services (AWS) located in the United States and/or Canada.

By using our Services, you instruct DatSOR to transfer, store, and process your data and your End-Customers’ data in these jurisdictions. When transferring data across borders (e.g., from the European Economic Area, Latin America, or California to Canadian or US-based servers), we implement appropriate legal safeguards, including relying on the European Commission’s Standard Contractual Clauses (SCCs) or other legally approved frameworks, to ensure that your personal data receives an adequate level of protection.

5. Data Security

We implement commercially reasonable and industry-standard technical, physical, and organizational security measures (including end-to-end encryption in transit via SSL/TLS, encryption at rest, multi-factor authentication, and strict internal access controls) to prevent unauthorized access, alteration, disclosure, or destruction of personal data. However, please be aware that no transmission method over the internet is completely impenetrable, and we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as necessary to provide the Services to you, comply with our legal and regulatory obligations under Canadian and international laws, resolve disputes, and enforce our agreements.

Specific Retention for Customer Data (Processed on Your Behalf):

Standard Native Meta Accounts: Retention of chat history on standard, native WhatsApp Business and Instagram mobile or web applications is governed entirely by Meta’s policies and your own account settings. DatSOR does not control, host, or store this native data on your Meta accounts.
Website Chat & Direct WhatsApp API Lines: Conversations originating from the Website Chat widget and conversational logs processed through direct WhatsApp API (Cloud API) integrations (which do not natively synchronize to Meta’s standard mobile applications) are hosted securely on our secure Amazon Web Services (AWS) cloud infrastructure. Upon termination or expiration of your Service Agreement, access to these histories via the DatSOR platform interface will cease immediately.
Purge and Deletion Window: To comply with global data minimization principles, all such Website Chat and direct WhatsApp API data will be securely and permanently deleted or irreversibly anonymized from our active servers and database backups within thirty (30) days following the termination of your Service, unless a specific export is requested by the Client prior to the expiration of this 30-day window, as outlined in our Terms and Conditions.

7. Your Rights (As a Data Subject / Client)

Depending on your geographical location, you may have specific privacy rights regarding the personal information we control about you (such as your client account details). These rights include:

Right to Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”): Request deletion of your data under certain conditions.
Right to Restriction of Processing: Request that we limit how we process your data.
Right to Data Portability: Request a copy of your data in a structured, machine-readable format.
Right to Object: Object to our processing of your personal information, particularly for marketing purposes.
Global Privacy Control (GPC) Opt-Out: In compliance with CCPA/CPRA, we recognize and honor browser-level Global Privacy Control (GPC) signals. If our systems detect a GPC signal from your browser, we will automatically disable non-essential advertising and targeting cookies for your session.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority, or with the Office of the Privacy Commissioner of Canada (OPC).

To exercise any of these rights, please contact our Data Protection Officer (DPO) at support@datsor.com. We will evaluate and respond to your request in accordance with applicable laws.

8. Handling of End-Customer Information (DatSOR as a Data Processor)

This section is critical for legal compliance concerning your End-Customers (e.g., in Europe, California, Canada, or Latin America):

When DatSOR processes chat logs, files, or multimedia assets exchanged between your End-Customers and our AI agents, we act strictly as a Data Processor on your behalf. You, our Client, are the Data Controller.

Your Responsibilities as the Data Controller:

Legal Processing Basis: You must establish a valid legal basis (such as obtaining explicit consent or relying on legitimate business interests where permitted) to collect and process your End-Customers’ data via WhatsApp, Instagram, or Website Chat, and to transmit it to DatSOR.
AI Disclaimers and Notices: You must provide End-Customers with clear, appropriate privacy notices (e.g., in your initial welcome message or by linking to your privacy policy) informing them that:
- They are interacting with an automated AI conversational agent.
- Their text and media inputs are collected and processed for sales and marketing optimization.
- Their data is shared with third-party processors like DatSOR.
End-User Rights: You are solely responsible for responding to and resolving data rights requests (e.g., access, deletion, or correction) submitted by your End-Customers.

DatSOR’s Responsibilities as the Data Processor:

We will process your End-Customers’ data strictly in accordance with your documented instructions, this Privacy Policy, and our Service Agreement. If you are located in a jurisdiction that requires a standalone Data Processing Addendum (DPA) (such as the European Economic Area under GDPR Article 28), you may request our standard DPA by contacting support@datsor.com.

9. Children’s Privacy

Our Website and Services are business-to-business (B2B) tools and are not directed to or intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected personal data from a child under 18, we will take immediate steps to delete that information from our servers.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect modifications in our AI technology, platform functionalities, or international legal requirements. We will notify you of any material changes by posting the revised Policy on our Website and updating the “Effective Date” at the top of this document. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy, our data protection practices, or if you wish to exercise your privacy rights, please contact us:

Address: Niagara Falls, Ontario, Canada.

Entity: 17466382 CANADA INC. (DatSOR)

Email: support@datsor.com

Phone: +1 (365) 880-0712