Privacy Policy

1. Who we are

McCarthy's AI is operated by Verta Ventures Inc., a corporation existing under the laws of Ontario, Canada, with its registered address at 80 Mill Street, No. 1209, Toronto, Ontario, M5A 4T3, Canada ("McCarthy's", "we", "us" or "our").

We have named a person who is accountable for our compliance with this policy and with privacy law. You can reach them at support@mccarthys.ai, or by mail at the address above, marked "Attention: Privacy".

2. What this policy covers

This policy covers our website, our sales and support conversations, and the consulting, training, AI build and data partnership services we provide.

When a business hires us, a written agreement governs the work and the information that business gives us. If that agreement and this policy differ on how we handle the client's information, the agreement controls.

This policy doesn't cover other companies' practices, including the services we link to and the tools our clients choose.

3. Information we collect

Information you give us:

• Your name, work email, phone number, company and job title, when you book a call or email us.
• What you tell us about your business and its goals, on calls and in email.
• Your résumé and the details you send, if you apply for a job.
• Billing contacts and payment details for invoices, if your business becomes a client.

Information from our work with clients: to deliver a project, we may work with a client's staff and systems. That can include staff names and work contact details, training attendance, and the documents, records and tools a client gives us access to. We use this information only to do the work the client asked for.

Information collected automatically: our hosting provider records technical information when you load a page, such as your IP address, browser, device and the pages you request. We use it to deliver the site, keep it secure and fix problems.

This site doesn't use advertising cookies or analytics trackers. If you pause the site's animations, your browser keeps that setting until you close the tab. The AI readiness check runs in your browser, and we don't receive your answers unless you send them to us. Videos on our insight pages load from YouTube's privacy-enhanced mode only after you press play, and from then on YouTube's privacy policy applies.

4. How we use information

• To reply to your messages and schedule calls.
• To prepare proposals, deliver our services and run training.
• To send invoices and manage our relationship with clients.
• To improve our services and our website, and to keep them secure.
• To meet our legal, tax and accounting obligations.

With your consent, we may also send you occasional emails about our services and research (see Section 11). We don't sell personal information, and we don't use it for targeted advertising.

5. Consent and legal bases

We collect, use and share personal information with your consent, except where the law allows or requires otherwise. Consent may be express or implied, depending on the information and how sensitive it is. For example, when you email us, you consent to us using your email address to reply.

You can withdraw consent at any time by contacting us, subject to legal or contractual limits. If you do, we may not be able to provide some services.

If you're in the UK or the European Economic Area, we rely on these legal bases: performing a contract with you or your employer, our legitimate interest in responding to and serving business clients, your consent where we ask for it, and compliance with the law.

6. How we share information

• Service providers that help us run the business, such as website hosting, email, scheduling, CRM and accounting tools. They may use the information only to provide their services to us, under contract. When you book a call, the details you enter go to our scheduling provider and to us.
• Our data partners, only as described in Section 7.
• Professional advisers, such as lawyers and accountants, who owe us a duty of confidentiality.
• Authorities, when the law requires it, or when we need to protect our rights, our clients or the public.
• A buyer or successor, if we're part of a merger, sale or other business transfer. This policy continues to apply to the information.

7. Data partnerships

Some clients license de-identified records of how their business works to frontier labs and businesses that train AI agents, through our data partners. Each deal runs under a written agreement the client signs.

With the client's written approval, our data partners prepare de-identified copies of those records with personal information and client details taken out. Client records, such as the contents of a CRM, aren't part of what's licensed.

If your business asks to explore a data deal, we introduce you to our data partners with your permission. We don't pass on personal information from our website or sales conversations for any other reason.

8. International transfers

We're based in Canada. Our service providers may store or process information in Canada, the United States or other countries. Information processed in another country is subject to that country's laws, and courts, law enforcement and authorities there may be able to access it.

We require our service providers to protect personal information with safeguards comparable to ours. For information about people in the UK or the European Economic Area, we rely on transfer safeguards that UK and EU law recognize.

9. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires, such as for tax and accounting records. We keep client project information for as long as the client's agreement says. When we no longer need information, we delete or anonymize it.

10. How we protect information

We use administrative, technical and physical safeguards suited to the sensitivity of the information, including access controls and encrypted connections. No system is perfectly secure, so we can't guarantee the security of information sent to us over the internet.

If a breach creates a real risk of significant harm, we'll notify the people affected and the regulators, as the law requires.

11. Marketing emails

We send marketing emails only with your consent, as Canada's Anti-Spam Legislation (CASL) and similar laws require. Every email has an unsubscribe link, or you can write to support@mccarthys.ai.

12. Your rights

Depending on where you live, you can ask us to:

• show you the personal information we hold about you;
• correct it, or delete it;
• stop using it for a purpose you consented to;
• give you a copy in a portable format (UK and EEA);
• limit or stop some uses of it (UK and EEA).

Residents of US states with privacy laws, such as California, can also ask what we collect and how we use it. We don't sell personal information or share it for cross-context behavioural advertising.

To make a request, email support@mccarthys.ai. We may need to confirm your identity first. We'll reply within the time the law sets, and we won't treat you differently for using your rights.

13. Children

Our services are for businesses. We don't knowingly collect personal information from anyone under 18. If you think a child has given us information, contact us and we'll delete it.

14. Links to other sites

Our site links to other websites and services, such as our scheduling tool and our social media pages. Their own privacy policies apply.

15. Changes to this policy

We'll update this policy when our practices change. The date at the top shows the latest version. If a change is significant, we'll tell our clients directly.

16. Contact us or make a complaint

Send questions, requests and complaints to McCarthy's AI (operated by Verta Ventures Inc.), Attention: Privacy, 80 Mill Street, No. 1209, Toronto, Ontario, M5A 4T3, Canada, or email support@mccarthys.ai.

If we can't resolve your concern, you can contact the Office of the Privacy Commissioner of Canada. In the UK, you can contact the Information Commissioner's Office. Elsewhere, you can contact your local data protection authority.