Privacy Policy

1. Overview

Beacon Labs Inc. ("Beacon Labs," "we," "us") operates beaconlabs.ca and the products listed in Section 5. We respect your privacy and aim to be plain about what we collect, why we collect it, and what choices you have.

This policy applies to information collected through our websites, mobile apps, and related services. It does not cover third-party services we link to but do not operate (e.g. Stripe Checkout pages, Calendly booking pages).

2. Information we collect

We collect three broad categories of information:

• Information you give us. Account details (name, email), form submissions (contact, questionnaire), payment details (handled by our payment processor — see Section 4), and content you create within our products.
• Information collected automatically. Standard server logs (IP address, browser type, request timestamps), and product analytics needed to keep the services running and improve them.
• Information from third parties. If you sign in via a third-party provider, we receive the basic profile information that provider shares.

3. How we use information

We use information to:

• Provide and operate our products
• Communicate with you about your account, purchases, and service updates
• Process payments and prevent fraud
• Improve our products based on aggregate usage patterns
• Comply with legal obligations

We do not sell personal information. We do not use personal information for cross-context behavioral advertising.

4. Third-party processors

We rely on a small set of well-known service providers to operate our products. Each processes data on our behalf under their own terms and privacy policies:

• Stripe — payments, subscription billing, tax calculation
• Resend — transactional email delivery
• Vercel — application hosting, CDN, blob storage
• Neon — managed Postgres database hosting
• Clerk — authentication (HippoHub only)
• Anthropic — AI features powered by Claude (where applicable)
• Cloudflare — DNS, content delivery, edge security
• Calendly — meeting scheduling (audit calls)

Each processor receives only the information needed to perform its function. We do not share information with advertisers or data brokers.

5. Product-specific practices

Each Beacon Labs product collects and uses information slightly differently. The sections below describe practices specific to each.

5.1 RecruitOS

RecruitOS is a multi-tenant recruitment and onboarding platform used by travel agencies to attract, vet, and onboard new agents. Data collected through RecruitOS includes applicant contact information, resumes/work history submitted via application forms, application status, and onboarding progress. This data is owned by the operating agency (the customer organization) and processed by Beacon Labs on the agency's behalf. Applicants who are not hired can request deletion of their records at any time.

5.2 AgencyOS

AgencyOS is a multi-tenant SaaS platform used by travel agencies and their agents. Data collected through AgencyOS includes business contact information, trip and reservation details, payment records, course progress, and community posts. This data is owned by the operating agency (the customer organization) and processed by Beacon Labs on the agency's behalf.

Payment card data is handled exclusively by Stripe and (where applicable) Basis Theory; Beacon Labs does not store raw card numbers.

5.3 PaceAI

PaceAI collects the tasks, projects, and notes you create within the app, your email address for account purposes, and (if you enable it) AI-generated briefings powered by Anthropic's Claude API. Briefings are generated from your own task data and are not shared with anyone other than the third-party AI processor named in Section 4.

5.4 HydrateAI

HydrateAI stores hydration logs locally on your device. The app does not transmit your hydration history to Beacon Labs servers unless you explicitly opt in to a future cloud-sync feature. The "AI scheduling" feature operates locally on your device and does not call any AI service.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export the personal information we hold about you. You may also have the right to opt out of certain uses or to object to processing.

• Canada (PIPEDA, provincial privacy acts): You can request access to and correction of your personal information.
• European Economic Area / UK (GDPR): You have the rights of access, rectification, erasure, restriction, portability, and objection.
• California (CCPA/CPRA): You have the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information (we do neither).

To exercise any of these rights, email hello@beaconlabs.ca. We will respond within the timeframe required by applicable law.

7. Data retention

We retain information for as long as necessary to provide the services and meet legal obligations. Account data is retained until you delete your account or request deletion. Backups are retained for a limited period and then permanently deleted.

8. Children's privacy

Our products are not directed at children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top. Material changes will be communicated by email or in-app notice where appropriate.

10. Contact

Questions or concerns about this policy or your data? Reach us at hello@beaconlabs.ca.

Beacon Labs Inc.
Canada