NighthawkAI
Privacy Policy
Website: go.nighthawkai.ca
Effective Date: April 25, 2026
Last Updated: April 25, 2026
1. Introduction
This Privacy Policy describes how NighthawkAI ("we", "us", "our") collects, uses, stores, and discloses personal information through the website located at go.nighthawkai.ca and related services (the "Platform").
We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA), S.C. 2000, c. 5, and any regulations made under it. This policy explains how we handle personal information in accordance with PIPEDA's 10 fair information principles.
By using the Platform, you agree to the collection and use of information as described here. If you do not agree, please stop using the Platform and contact us to have your information removed.
2. Who We Are
NighthawkAI is a marketing intelligence and lead conversion service. We operate advertising detection and AI-powered lead capture systems for local businesses in Canada.
Operating Name: NighthawkAI
Website: go.nighthawkai.ca
Province: Saskatchewan, Canada
Privacy Contact: [email protected]
We have designated a Privacy Officer responsible for overseeing compliance with this policy and PIPEDA. You can reach them at the email address above.
3. Scope of This Policy
This policy applies to:
• Personal information collected through the Platform at go.nighthawkai.ca
• Personal information collected through SMS text campaigns connected to the Platform
• Personal information provided by businesses that use our services
• Personal information about individuals who interact with AI-powered lead capture tools we operate on behalf of our business clients
This policy does not apply to third-party websites or services linked from our Platform. Those services have their own privacy policies.
4. What Personal Information We Collect
We collect only the information that is necessary for the purposes described in this policy.
4.1 Information Collected Directly From You
• Full name
• Email address
• Phone number (including mobile numbers used for SMS interactions)
• Business name and role (if you are a business client or prospect)
• Appointment details and booking preferences
• Any information you voluntarily provide in messages or forms
4.2 Information Collected Automatically
• IP address
• Browser type and version
• Device type
• Pages visited and time spent on the Platform
• Referring URL
• Cookies and similar tracking technologies (see Section 10)
4.3 Information Collected Through SMS
When an individual texts a keyword associated with a radio advertising campaign we manage, we collect:
• Mobile phone number
• Message content
• Date and time of the message
• Responses to automated AI conversation flows
This collection happens in connection with radio advertising campaigns run by our business clients. The purpose is to qualify leads and book appointments on behalf of those clients.
4.4 Information Received From Third Parties
We may receive information from third-party sources to supplement what we have collected directly, including:
• Business contact information from publicly available sources or commercial data providers
• Business profile information (website, phone number, industry) from search engine data providers
We use this information only for the purposes described in Section 5.
5. Why We Collect Personal Information
We collect personal information only for specific, identified purposes. We identify these purposes at or before the time of collection.
Our purposes include:
• Delivering AI-powered lead capture and appointment booking services to business clients
• Qualifying leads generated through radio advertising campaigns
• Following up with leads by SMS, voice, or email on behalf of business clients who have authorized us to do so
• Operating and improving the Platform
• Communicating with business clients about their accounts and campaigns
• Sending outreach to businesses that may benefit from our services, where permitted by law
• Complying with legal obligations
• Fraud prevention and security
We do not collect personal information indiscriminately. We do not use personal information for purposes other than those listed above without first obtaining consent or as permitted by law.
6. Consent
We obtain consent before or at the time we collect personal information, except where collection without consent is authorized or required by law.
6.1 Express Consent
We obtain express (explicit) consent when:
• You submit your information through a form on the Platform
• You text a keyword and receive a disclosure that your information will be used for lead capture and appointment booking
• You sign up as a business client and accept our terms
6.2 Implied Consent
In some cases, we rely on implied consent. For example, when a business provides a contact email address on their public website and we use it to send a relevant commercial message, we rely on implied consent as permitted under Canada's Anti-Spam Legislation (CASL), where the conditions of CASL are met.
6.3 Withdrawing Consent
You can withdraw your consent at any time, subject to legal or contractual restrictions. To withdraw consent:
• Email us at [email protected] with your name and the specific consent you are withdrawing
• Reply STOP to any SMS message to opt out of text communications
• Click the unsubscribe link in any email we send
Withdrawing consent may limit our ability to provide certain services to you or on your behalf.
7. How We Use and Disclose Personal Information
We use personal information only for the purposes for which it was collected, with your consent, or as permitted by PIPEDA.
7.1 Use Within Our Organization
• Operating and maintaining the Platform
• Managing and following up with leads on behalf of business clients
• Improving our AI conversation flows and lead qualification process
• Communicating with business clients about their campaigns
• Internal reporting and analytics
7.2 Disclosure to Third Parties
We do not sell personal information. We may disclose personal information to the following categories of third parties for the purposes described in this policy:
• Business clients: We share lead information (name, phone number, appointment details) with the specific business client whose campaign generated the lead. The client's own privacy practices govern how they handle that information afterward.
• Technology providers: We use software platforms to operate the Platform. These include CRM software, SMS delivery services, email delivery services, database hosting providers, and AI processing services. These providers process personal information on our behalf under contractual obligations consistent with PIPEDA.
• Analytics providers: We use analytics tools to understand how the Platform is used. These tools may collect IP addresses and behavioral data.
• Legal and government authorities: We may disclose personal information where required by law, court order, or lawful government request.
• Business transfers: If NighthawkAI is sold, merged, or restructured, personal information may be transferred to the new owner as part of that transaction. We will notify affected individuals in that event.
We do not disclose personal information to third parties for their own marketing purposes.
8. How Long We Keep Your Information
We keep personal information only as long as necessary for the purposes for which it was collected, or as required by law.
• Lead records (name, phone, appointment details): retained for a maximum of 24 months from the date of last activity, or until the business client relationship ends, whichever comes first
• Business client account information: retained for the duration of the client relationship plus 7 years, to satisfy accounting and tax record requirements
• Website analytics data: retained for up to 14 months
• SMS message logs: retained for 12 months from the date of the conversation
• Email correspondence: retained for up to 3 years
When personal information is no longer needed, we securely destroy or de-identify it.
9. Your Rights Under PIPEDA
As a Canadian resident, you have the following rights with respect to your personal information:
9.1 Right to Access
You have the right to request access to the personal information we hold about you. We will respond within 30 days of receiving a written request. We may charge a reasonable fee for access requests that are unusually complex.
9.2 Right to Correct
If you believe personal information we hold about you is inaccurate or incomplete, you can ask us to correct it. We will make the correction or, where we disagree, note your objection in your file.
9.3 Right to Withdraw Consent
As described in Section 6.3, you can withdraw consent for us to use your personal information, subject to legal or contractual restrictions.
9.4 Right to Complain
If you believe we have not handled your personal information in compliance with PIPEDA, you can:
• First, contact our Privacy Officer at [email protected]. We will investigate and respond within 30 days.
• If you are not satisfied with our response, you can file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or by calling 1-800-282-1376.
9.5 How to Submit a Request
To exercise any of the above rights, contact us at [email protected]. Include your full name, contact information, and a description of your request. We may ask you to verify your identity before we process your request.
10. Cookies and Tracking Technologies
The Platform uses cookies and similar technologies to operate and improve the service.
10.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help us recognize your device across sessions and remember your preferences.
10.2 Types of Cookies We Use
Strictly Necessary Cookies: These are required for the Platform to function. They enable things like session management and security. You cannot opt out of these.
Analytics Cookies: These help us understand how visitors use the Platform. They collect data such as pages visited and time on site. This data is aggregated and does not identify individuals.
Functional Cookies: These remember your preferences to improve your experience.
10.3 Your Choices
You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Blocking strictly necessary cookies will affect Platform functionality.
We do not use cookies to track you across unrelated third-party websites.
11. Security Safeguards
We use physical, technical, and organizational safeguards appropriate to the sensitivity of the personal information we hold.
Our safeguards include:
• Encrypted data transmission using TLS/HTTPS
• Access controls limiting who can view personal information to those who need it
• Database security measures including authentication and access logging
• Regular review of security practices
• Contractual requirements for third-party service providers to maintain appropriate security
No system is completely secure. If we become aware of a security breach that creates a real risk of significant harm to individuals, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.
12. Cross-Border Transfers
Some of our third-party service providers are located outside of Canada, including in the United States. When we transfer personal information to these providers, it may be subject to the laws of those jurisdictions.
We take steps to ensure that personal information transferred outside Canada receives comparable protection to what is required under PIPEDA. This includes entering into contracts with service providers that require them to protect personal information to a standard comparable to PIPEDA.
By using the Platform, you acknowledge that your personal information may be transferred to and processed in countries outside Canada.
13. Children's Privacy
The Platform is not directed at individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal information from someone under 18, we will delete that information promptly.
If you believe we have collected information from a minor, contact us at [email protected].
14. Third-Party Links and Services
The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this document and, where appropriate, notify you by email or through a notice on the Platform.
We encourage you to review this policy periodically. Continued use of the Platform after changes are posted means you accept the updated policy.
16. Contact Us
For any questions, concerns, or requests related to this Privacy Policy or our handling of your personal information, contact our Privacy Officer:
Organization: NighthawkAI
Email: [email protected]
Location: Martensville, Saskatchewan, Canada
We will acknowledge your request within 5 business days and respond in full within 30 days. If we need more time, we will notify you and explain why.
If you are not satisfied with our response, you have the right to contact the Office of the Privacy Commissioner of Canada:
• Website: www.priv.gc.ca
• Phone: 1-800-282-1376