Privacy Policy

Last updated: June 2026

ThymeBean ("we", "us") collects and uses personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada, including Quebec's private-sector privacy requirements where they apply to our Montreal operations.

Accountability

Our Privacy Officer can be reached at [email protected]. We maintain policies and practices designed to protect personal information throughout the AI stack services we deliver.

What we collect

Name, email, phone number, organization, enquiry details, consultation preferences, technical logs when you use our website, and project data you voluntarily provide for precision module engagements.

Purpose

To respond to enquiries, deliver AI consulting and module implementation services, improve our website, maintain stack dashboards for clients under contract, and meet legal obligations in Canada.

Consent

We obtain meaningful consent before collection, except where permitted by law. You may withdraw consent for non-essential communications by contacting us.

Limiting collection and use

We collect only information reasonably required for stated purposes. We do not sell personal information.

Access and correction

You may request access to or correction of your personal information. We respond within 30 days where required by PIPEDA.

Safeguards

We use administrative, technical, and physical safeguards appropriate to the sensitivity of data, including encryption in transit where supported and access controls on production systems.

Complaints

If concerns remain unresolved, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca or the Commission d'accès à l'information du Québec where applicable.

Retention

We retain personal information only as long as necessary for stated purposes or as required by law and contractual audit obligations.

Cookies

Our cookie banner explains essential and analytics cookies. Non-essential cookies require acceptance stored in your browser localStorage under the key cookies_accepted_thymebean_one. See our banner on first visit for details.

Cross-border processing

Some cloud and model providers may process data outside Canada. Where this occurs, we use contractual safeguards and document subprocessors in client statements of work.

Children

Our services are directed to business clients. We do not knowingly collect information from individuals under 16.