Privacy Policy
Last updated: June 28, 2026
This policy explains what personal information Deiji collects, why, and how it is handled. Deiji is a sole proprietorship based in Ontario, Canada, and complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
1. Who we are
Deiji ("we", "us") — a sole proprietorship registered in Ontario, Canada.
20 Bay Street, 11th Floor, Toronto, ON M5J 2N8, Canada.
Privacy contact: hello@wearedeiji.com.
2. What we collect and why
The Outserve Auditor (free AI tool)
- Your email address — used solely as an identifier to send your single-use access link and to enforce fair-use limits. It is not added to any marketing list.
- Usage events — we log the fact that a message was sent (your email + a timestamp) to enforce the monthly limit. No message content is stored in these records.
- Anonymous conversation themes — to understand how the tool is used and improve our content, we keep a short, generic summary of the topics discussed (a few tags + one sentence). These records contain no email, no timestamp, and no transcript, and cannot be traced back to you.
- Technical data — your IP address and similar data may be processed transiently to prevent abuse (bot/spam protection) and for analytics.
Your conversation messages are sent to our AI provider to generate a response and are not retained by us beyond producing the reply.
Contact form
Your name, email, and message are used only to reply to you. The form delivers the message to our email inbox through our email provider — it is not written to any database, sold, or shared. It remains only in our email account, like any email you might send us directly.
Newsletter
If you subscribe to The Outserve Letter, your email is used to send it. You consent when you sign up and can unsubscribe at any time using the link in every email.
Analytics
We use privacy-conscious product analytics to understand how the site and tools are used (for example, which pages are visited and which features are used). This may involve cookies or similar identifiers and your IP address.
3. Consent and legal basis
We rely on your consent and on the legitimate purposes described above. Where we ask for information (e.g. the contact form's consent checkbox, or newsletter signup), providing it is your choice. You can withdraw consent at any time, subject to legal or contractual limits, by contacting us.
4. Service providers (sub-processors)
We use the following third parties to operate our site and tools. Each receives only the data needed for its function. Several are based in the United States, so some data is processed outside Canada (see Section 5).
| Provider | Purpose | Data involved |
|---|---|---|
| Anthropic (US) | AI model powering the Auditor | Conversation messages |
| Supabase | Database for access + usage limits | Email, usage events, anonymous themes |
| Resend (US) | Sending email (access links, contact replies) | Email, name, message |
| Beehiiv (US) | Newsletter delivery | |
| PostHog | Product analytics | Usage data, IP |
| Cloudflare Turnstile | Bot/spam protection (captcha) | IP, captcha token |
| mailcheck.ai | Work-email validation | Email domain only (not the full address) |
| Cal.com | Call scheduling | Name, email, booking details (if you book) |
| Google Maps | Map embed on the contact page | Standard request data |
| Netlify (US) | Website hosting | Standard request/log data |
5. International data transfers
Some of our providers process data in the United States. While stored or processed abroad, information may be accessible to foreign authorities under that country's laws. We use providers that commit to protecting your information at a level comparable to Canadian standards. By using our tools, you acknowledge this cross-border processing.
6. Data retention
- Access links expire after 30 minutes; sessions after 30 days.
- Usage events and anonymous themes are kept to operate and improve the tools.
- Contact messages remain in our email inbox; we keep them only as long as needed to handle your enquiry.
- We delete personal information when it is no longer needed, or on valid request.
7. Your rights
Under PIPEDA you may request access to the personal information we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent. To exercise any of these, email hello@wearedeiji.com and we will respond within a reasonable time.
8. Cookies and analytics
We use a limited set of cookies/identifiers for analytics and security. You can control cookies through your browser settings. If you are located in Quebec, tracking technologies are treated as opt-in in line with Quebec's Law 25.
9. Security
We use reputable providers and reasonable technical safeguards (such as encryption in transit and access controls) to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the authorities if a breach poses a real risk of significant harm.
10. Children
Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect their information.
11. Changes
We may update this policy from time to time. The "last updated" date above reflects the latest version.
12. Contact & complaints
Questions or concerns: hello@wearedeiji.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC) at priv.gc.ca.