Privacy Policy
Last updated: May 4, 2026
About Us
This privacy policy applies to the AI Security Risk Assessment tool operated by 2456867 Ontario Inc., operating as Caye Group("Caye Group", "we", "us", or "our"), a corporation incorporated under the laws of Ontario, Canada. Our registered office is located in Ontario, Canada.
We are committed to protecting your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.
Information We Collect
When you use our AI Security Risk Assessment tool, we collect the following information:
- Name — provided voluntarily when you request your full security report
- Email address — provided voluntarily to receive your remediation plan
- AI tools selected — the list of AI tools you indicate your business uses
- Risk assessment results — the security risk score and report generated based on your tool selection
- Usage data — standard server logs including IP address and browser type, collected automatically
How We Use Your Information
We use your information for the following purposes:
- To generate and deliver your personalized AI security risk assessment
- To send you your security remediation plan by email
- To follow up with relevant AI security information and services that may be of interest to you
- To improve our assessment tool and services
- To comply with legal obligations
By submitting your name and email address, you consent to receiving communications from Caye Group related to your assessment results and our AI security services. You may withdraw your consent at any time by contacting us at the address below.
Third Party Services
To provide our service, we share certain information with the following third party providers:
- Anthropic, Inc. — your selected AI tools are transmitted to Anthropic's API to generate your security assessment. Anthropic is based in the United States. Your tool selections (not your name or email) are processed by Anthropic. Anthropic's privacy policy is available at anthropic.com.
- Supabase — your name, email, tool selections, and risk score are stored in a Supabase database. Supabase is based in the United States. Supabase's privacy policy is available at supabase.com.
- Vercel — our application is hosted on Vercel's infrastructure, based in the United States. Vercel's privacy policy is available at vercel.com.
- Upstash — we use Upstash Redis for rate limiting. IP addresses are temporarily processed for this purpose.
By using our service, you acknowledge that your information may be transferred to and processed in the United States. We take reasonable steps to ensure these providers maintain appropriate security standards.
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. If you wish to have your information deleted, please contact us and we will remove your data within 30 days of your request.
Your Rights
Under PIPEDA, you have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Withdraw consent to our use of your information
- Request deletion of your personal information
- File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. All data is transmitted over encrypted HTTPS connections. Access to stored personal information is restricted through row-level security controls.
Cookies and Tracking
Our tool does not use cookies for tracking or advertising purposes. Standard server logs are maintained for security and operational purposes only.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by updating the date at the top of this page. Continued use of our service after changes constitutes acceptance of the updated policy.
Contact Us
For any privacy-related questions, requests, or complaints, please contact our Privacy Officer: