Privacy Policy

PRIVACY POLICY

Updated at 9-JAN-2026

ASSK-MI Solutions Inc. o/a A2Z Solutions (“A2Z Solutions”, “we”, “us”, or “our”) is committed to protecting personal information and handling it responsibly in accordance with applicable privacy laws, including PIPEDA (Canada), GDPR (EU/UK), CCPA/CPRA (California), and other applicable regulations.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you access our websites, software platform, and related services.

1. Scope of This Policy

This Privacy Policy applies to:

visitors to our websites (a2zs.net, .ca, .co, .site, and subdomains)
customers and subscribers to our software platform (the “Services”)
authorized users of customer accounts
end users whose data is processed through the platform on behalf of customers

2. Roles & Responsibilities

2.1 Data Controller vs Data Processor

For personal data processed through the A2Z Solutions CRM:

The subscribing business is the Data Controller
A2Z Solutions is the Data Processor

This means:

the subscribing business determines why and how personal data is processed
A2Z Solutions processes data only according to the customer’s instructions

Customers are responsible for ensuring they have lawful authority to collect, use, and process personal data.

3. Information We Collect

3.1 Information You Provide

We may collect:

name, email, phone number
business name and contact details
billing and payment information
login credentials
communications with support
content uploaded into the platform (contacts, messages, files, automations)

3.2 Information Collected Automatically

When you use our Site or Services, we may collect:

IP address
device and browser information
login activity and timestamps
usage logs
cookies and tracking technologies (see Cookie Policy)

3.3 Information Processed on Behalf of Customers

Customers may upload or generate personal data through the platform, including:

customer contact information
messages (SMS, email, calls, WhatsApp, etc.)
interaction history
notes and tags
automation outputs

A2Z Solutions does not own this data.

4. How We Use Information

We use personal information to:

provide and operate the Services
authenticate users
process payments
provide customer support
improve platform performance
monitor security and prevent fraud
comply with legal obligations
communicate important service notices

We do not sell personal data.

5. Legal Bases for Processing (GDPR)

Where applicable, we process data based on:

contract performance
legitimate interests (platform security, improvement)
consent (cookies, marketing)
legal obligations

6. Data Retention

We retain personal data only as long as necessary:

account data: retained while account is active
billing records: retained as required by law
logs and security data: retained for operational and security purposes
customer data: deleted or returned upon account termination, subject to legal retention requirements

Customers are responsible for exporting their data prior to termination.

7. Data Sharing & Subprocessors

We may share personal data with trusted service providers (“subprocessors”) for:

hosting
payment processing
messaging and telephony
analytics
security and monitoring

These providers are contractually required to protect personal data and use it only for authorized purposes.

A current list of subprocessors is available upon request.

8. International Data Transfers

Personal data may be processed or stored outside your jurisdiction, including in Canada, the United States, and other countries where our service providers operate.

We use appropriate safeguards such as contractual protections to ensure data remains protected.

9. Security Measures

We implement administrative, technical, and physical safeguards to protect personal information, including:

access controls
encryption where applicable
monitoring and logging
restricted staff access

No system is 100% secure, but we take reasonable steps to reduce risk.

10. Your Rights

Depending on your location, you may have the right to:

access your personal data
correct inaccurate data
request deletion
restrict processing
object to processing
request data portability
withdraw consent (where applicable)

Requests can be made by contacting us at [email protected].

11. Cookies & Tracking

We use cookies and similar technologies as described in our Cookie Policy.
You may manage preferences through our consent tools.

12. Children’s Privacy

Our Services are not intended for children under 13. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Site or Services after changes constitutes acceptance of the updated policy.

14. Complaints

If you have any complaints about how we process your personal data, please contact us through the contact methods listed in the Contact Information section so that we can, where possible, resolve the issue. If you feel we have not addressed your concern in a satisfactory manner you may contact a supervisory authority. You also have the right to directly make a complaint to a supervisory authority. You can lodge a complaint with a supervisory authority by contacting the Information Commissioner's Office in the UK, Data Protection Commission in Ireland.