Privacy Policy

Last updated: March 2026

OptikLabs ("we", "us", "our") is a Canadian company that provides an AI-powered marketing platform for service businesses. We are committed to protecting your privacy and handling your personal information in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use the OptikLabs platform and related services.

Contact: support@optiklabs.ca

1. Information We Collect

We collect the following categories of personal information:

Account Information

Full name, email address, and password hash
Business name, website URL, and industry category

Connected Account Data

Social media OAuth tokens (Instagram, Facebook, LinkedIn)
Gmail OAuth tokens for email triage
Google Calendar access tokens

User-Generated Data

Client and contact data you import into the platform
Content generated through the platform (posts, emails, blog articles)
Brand voice and style preferences

Usage Data

Platform usage analytics (features used, generation counts)
Session cookies for authentication purposes

2. How We Use Your Information

We use your personal information to:

Provide and operate the OptikLabs platform and its features
Generate AI-powered marketing content tailored to your brand voice
Send emails on your behalf through connected email accounts
Process payments and manage your subscription
Improve the platform and develop new features
Send transactional emails (account notifications, policy changes)

We do not sell your personal information to third parties.

3. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy governing data handling:

Stripe

Payment processing

Anthropic

AI content generation

Google

Gmail OAuth, Calendar

4. Data Storage & Security

Your data is stored on Railway-hosted PostgreSQL databases located in North America. We implement the following security measures:

All data transmitted via TLS (HTTPS) encryption
OAuth tokens encrypted at rest in the database
JWT-based authentication with secure, HTTP-only session cookies
Passwords hashed using bcrypt with appropriate salt rounds

5. Data Retention

We retain your account data for as long as your account is active. Upon account deletion request, all personal data will be permanently deleted within 30 days.

Aggregate, anonymized usage data that cannot identify you may be retained for analytical purposes.

6. Cookies

OptikLabs uses session cookies strictly for authentication and maintaining your logged-in state. We do not use third-party tracking cookies, advertising cookies, or analytics cookies.

7. Your Rights Under PIPEDA

As a user of a Canadian service, you have the following rights regarding your personal information:

Access — Request a copy of the personal information we hold about you
Correction — Request corrections to inaccurate or incomplete information
Deletion — Request deletion of your personal data (processed within 30 days)
Withdraw Consent — Withdraw your consent to data processing at any time
Complaint — File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, contact us at support@optiklabs.ca. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email at the address associated with your account. Continued use of the platform after notification constitutes acceptance of the updated policy.