LEGAL

Privacy Policy

Your privacy is important to us. This policy explains how NovaMind AI collects, uses, protects, and shares your information.

Last Updated: February 12, 2026 Effective: February 12, 2026

About This Policy

This Privacy Policy describes how NovaMind AI ("we", "us", "our"), operated by NovaMind AI Inc., located at 155 University Avenue, Suite 400, Toronto, ON M5H 3B7, Canada, collects, uses, stores, and shares personal information when you visit our website or use our services. This policy applies to all visitors, users, and anyone who interacts with our platform. If you have questions about this policy, you can reach us at [email protected] or by calling +1 (416) 849-3200. Changes to this policy will be announced via a banner on our homepage at least 14 days before they take effect.

1 Cookie Categories

We use cookies and similar tracking technologies on our website. Cookies are small text files placed on your device when you visit our site. We categorize cookies into three tiers, each with a distinct purpose and consent requirement.

Always Active

Essential Cookies

Purpose: These cookies are strictly necessary for core site functionality, security, and session management. They enable basic features such as page navigation, secure area access, and remembering your cookie consent preferences. Without these cookies, certain parts of our website would not function correctly.

Examples: session_id, csrf_token, cookie_consent_status

Consent required: No. Essential cookies are activated automatically because they are necessary for the website to operate. They do not track you for advertising purposes.

Retention: Session duration, or up to 12 months for preference storage such as your language selection or cookie consent choice.

Consent Required

Analytics Cookies

Purpose: Analytics cookies help us measure traffic, understand user behavior, and evaluate site performance. They allow us to see which pages are visited most frequently, how visitors navigate through the site, and whether users encounter error pages. The data collected is aggregated and used to improve the user experience on our website.

Tools: Google Analytics 4

Examples: _ga, _ga_XXXXXXX, _gid, _gat

Consent required: Yes. Analytics cookies are activated only after you explicitly accept them via our cookie consent banner or the "Manage Preferences" panel.

Retention: Up to 14 months from the date of your last interaction with our website.

Consent Required

Marketing / Advertising Cookies

Purpose: Marketing cookies are used for remarketing, personalized ad delivery, and conversion tracking. They enable us to measure the effectiveness of advertising campaigns and to display relevant advertisements to you on third-party websites and platforms based on your interactions with our site.

Consent required: Yes. Marketing cookies are activated only after you explicitly accept them via our cookie consent banner or the "Manage Preferences" panel.

Retention: Up to 540 days (the default retention period for Google Ads cookies).

2 Marketing Cookies: Detailed Disclosures

Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet. These cookies allow third-party ad networks to recognize your browser across different websites and build a profile of your interests in order to show you advertisements that may be more relevant to you.

Advertising Partners

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms. These partners use tracking technologies to collect data about your online activity and deliver targeted advertising based on your browsing patterns and inferred preferences.

Remarketing

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit. Remarketing is performed by our advertising partners using the cookies and tracking technologies described in this policy. Remarketing lists are never created from sensitive data categories such as health conditions, financial situations, religious beliefs, or sexual orientation.

YouTube and Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network. When you see our ads on these platforms, it is because remarketing or audience-targeting cookies placed during your visit to our website have been recognized by Google's advertising system.

Tracking Technologies

We use the following tracking technologies on this website:

  • Cookies (first-party and third-party)
  • Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags

Advertising Measurement

We use conversion tracking to understand which advertisements lead to actions on our website, such as form submissions, calls, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta in an aggregated or pseudonymized format to help optimize future advertising campaigns.

Technologies in Use

Advertising and analytics technologies active on this site:

  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook / Instagram)

Opt-Out from Personalized Advertising

You may opt out of personalized advertising at any time using any of the following methods:

  • Google Ads Settings: https://adssettings.google.com
  • Your Online Choices (EU): https://www.youronlinechoices.eu
  • Network Advertising Initiative: https://optout.networkadvertising.org
  • Digital Advertising Alliance: https://optout.aboutads.info

Opting out does not remove ads entirely. You will continue to see non-personalized advertisements that are not based on your browsing history or inferred interests.

Cookie Preference Management

You can manage your cookie preferences at any time by clicking the link available in the footer of every page on our website. This will open a panel where you can accept or reject each cookie category independently. Essential cookies are always active and cannot be disabled.

3 Consent Requirements

Consent Banner

When you first visit our website, a cookie consent banner appears in the bottom-right corner of the screen. This banner provides three options: "Accept All", "Reject Non-Essential", and "Manage Preferences". No analytics or marketing cookies are activated until you make a choice. If you close the banner without making a selection, or click "Reject Non-Essential", only essential cookies remain active. Your consent choice is stored in your browser's localStorage for 12 months.

Consent Statement

By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalized advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

EEA / UK Users

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

Withdrawal of Consent

You may withdraw consent at any time by clicking "Manage cookie preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid. Upon withdrawal, marketing and analytics cookies will be deactivated during your next page load, and no new tracking data will be collected through those channels.

4 Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

Google LLC

Cookie identifiers, conversion events, anonymized behavioral data, and remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy

Meta Platforms, Inc.

Pixel events, conversion data, and custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only and is not resold to unaffiliated third parties. Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

5 Lead Forms and Contact Requests

When you submit a contact form, request a quote, or register interest in our services, we collect the information you provide. This typically includes: full name, email address, phone number, and your message.

Legal basis: Consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b). In Canada, this processing is conducted in compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

Retention: Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law or you request earlier deletion.

You may request deletion of your data at any time by contacting us at [email protected].

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

6 Google Services and Advertising

This website uses the following Google services:

Google Analytics 4

Collects anonymized usage data, device info, and behavioral signals. IP anonymization is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Google Ads Conversion Tracking

Records when a user completes a defined action (form submission, call, purchase) after clicking one of our ads. This data is used solely for measuring ad campaign performance and is not used to personally identify individual users.

Google Remarketing

Allows us to show ads to previous visitors across Google's network. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation). All remarketing activities comply with Google's advertising policies.

Google Tag Manager

Deploys tracking tags on our behalf. No personal data is collected by GTM itself; it acts as a container for the tags listed above. All tags deployed through GTM are governed by the consent settings described in this policy.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

7 Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

  • Page views and time on site
  • Specific conversion events (form submissions, purchases)
  • Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

8 Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full. NovaMind AI maintains strict internal editorial guidelines to prevent the publication of content that could be interpreted as promoting prohibited categories.

9 Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website. All visitors, regardless of how they found our site, see the same pages, offers, and information.

10 Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at [email protected] if you believe we have received data from a minor. In compliance with Canada's PIPEDA and the Children's Online Privacy Protection Act principles, we take reasonable steps to verify the age of users when personal data is collected.

11 International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area and Canada, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. For transfers from Canada, we rely on contractual protections consistent with PIPEDA's requirements for cross-border data transfers. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].

12 User Rights (GDPR Articles 15-22)

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation:

Access (Art. 15)

Request a copy of data we hold about you.

Rectification (Art. 16)

Correct inaccurate or incomplete data.

Erasure (Art. 17)

Request deletion ("right to be forgotten").

Restriction (Art. 18)

Limit how we process your data.

Portability (Art. 20)

Receive your data in a structured, machine-readable format.

Objection (Art. 21)

Object to processing based on legitimate interest.

Withdraw Consent (Art. 7.3)

Revoke consent at any time without penalty.

To exercise any right, email us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

  • EU users: https://edpb.europa.eu
  • UK users: https://ico.org.uk

Canadian residents can also file complaints with the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca regarding the handling of their personal information under PIPEDA.

13 What Data We Collect

We collect the following categories of data through our website:

Full name
Email address
Phone number
IP address
Browser type and version
Device type and operating system
Cookies and tracking identifiers
Usage data (pages visited, time on site, click paths)
Form submission content
Conversion events (form submits, calls)

14 Legal Basis for Processing (GDPR Art. 6)

Data Type Legal Basis
Contact form data Consent (Art. 6.1.a) and contract performance (Art. 6.1.b)
Analytics data Consent (Art. 6.1.a)
Marketing / remarketing data Consent (Art. 6.1.a)
Security and fraud prevention Legitimate interest (Art. 6.1.f)

For Canadian residents, all data processing is conducted in compliance with PIPEDA, which requires meaningful consent for the collection, use, and disclosure of personal information. Where we rely on legitimate interest as a legal basis for EEA/UK users, we conduct a balancing test to verify that the processing does not override your fundamental rights and freedoms.

15 Retention Periods

Contact form submissions 2 years
Analytics data (GA4) 14 months
Marketing cookies (Google Ads) Up to 540 days
Email communications Duration of relationship + 1 year
Server logs 90 days
Cookie consent records 3 years (audit requirement)

At the end of each retention period, data is securely deleted or anonymized so that it can no longer be associated with any individual. You may request early deletion at any time by contacting us.

Policy Metadata

Last Updated: February 12, 2026
Effective Date: February 12, 2026

Changes to this Privacy Policy will be communicated via a banner on our homepage a minimum of 14 days before taking effect. We encourage you to review this page periodically. The current version of this policy will always be available at this URL.

Contact Us About This Policy

If you have any questions, concerns, or requests related to this Privacy Policy or how we handle your data, please reach out to us:

NovaMind AI Inc.
155 University Avenue, Suite 400, Toronto, ON M5H 3B7, Canada