Murexa.ai Inc. Privacy Policy

Effective Date: 22 September 2026
Last Updated: 22 September 2026

1. Introduction

Murexa.ai Inc. ("Murexa", "we", "us", or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and protect personal information in connection with our website at murexa.ai (the "Website") and our general business activities.

Privacy laws in Canada define "personal information" as any information about an identifiable individual. This Privacy Policy is governed by the Personal Information Protection and Electronic Documents Act, S.C. 2000, c. 5 ("PIPEDA") and applicable federal Canadian law.

Please read this Privacy Policy carefully. By accessing or using our Website or contacting us, you consent to the collection, use, and disclosure of your personal information as described in this policy. If you do not agree with this policy, please do not use our Website.

2. Scope of This Policy

This Privacy Policy applies to personal information Murexa collects:

  • through our Website, including via contact and inquiry forms;
  • in email, telephone, and other communications between you and Murexa; and
  • in the course of our business activities, including sales, contracting, and client service.

This Privacy Policy applies to information Murexa collects for its own purposes — for example, when a prospective client contacts us, when someone visits our Website, or when we communicate with business contacts.

This Privacy Policy does not govern personal information that Murexa processes on behalf of its business clients ("Clients") in the course of providing its AI automation solutions or platform services. When Murexa provides services to a Client, that Client controls the personal information of its own customers ("End Users"), and Murexa processes that personal information only on the Client's instructions, in accordance with the applicable data processing agreement between Murexa and that Client. End Users whose personal information is processed through a Client's services should direct any privacy inquiries or rights requests to that Client directly.

3. Personal Information We Collect

3.1 Information You Provide to Us

We may collect the following types of personal information that you provide directly:

  • your name, business name, job title, and contact information (including email address, telephone number, and mailing address) when you contact us, complete a form on our Website, or communicate with us by email or telephone;
  • the content of your communications with us, including inquiries, requests, and correspondence; and
  • any other information you choose to provide to us.

3.2 Information Collected Automatically

When you visit our Website, we may automatically collect certain technical information, including:

  • your IP address and approximate geographic location;
  • browser type and version, operating system, and device information;
  • pages viewed, links clicked, and time spent on pages; and
  • referring URLs.

4. How We Use Personal Information

We use the personal information we collect for the following purposes:

  • to respond to your inquiries and communicate with you about our services;
  • to assess your needs and determine whether our services are suitable for you;
  • to enter into and administer contracts with you or your organization;
  • to send you information about Murexa's services that may be of interest to you, where you have consented or where permitted by applicable law;
  • to comply with our legal and regulatory obligations; and
  • to operate, maintain, and improve our Website and business operations.

We will not use your personal information for any purpose other than those identified above without first obtaining your consent or as otherwise permitted by PIPEDA.

5. Disclosure of Personal Information

We do not sell your personal information. We may disclose your personal information to the following categories of recipients:

Service providers

We share personal information with third-party service providers who assist us in operating our business. These may include cloud hosting providers, email and communications platforms, and business management software. These providers are contractually required to protect your personal information and to use it only for the purposes for which it was disclosed.

Our service providers include:

  • Supabase (database hosting for information submitted through our Website);
  • Vercel (Website hosting and privacy-focused Website analytics);
  • Cloudflare (Website security and spam protection on our forms); and
  • Microsoft (email and business communications).

Legal and regulatory requirements

We may disclose personal information where required by applicable law, court order, or the request of a governmental or regulatory authority, or where we reasonably believe disclosure is necessary to protect our rights, the rights of others, or public safety.

Business transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our business or assets, personal information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

6. Cross-Border Data Transfers

Some of our service providers may be located outside of Canada, including in the United States. When personal information is transferred outside Canada, it may be subject to the laws of the jurisdiction where it is held, including laws that may permit disclosure to government authorities without notice to you.

We take reasonable contractual and organizational steps to ensure that personal information transferred outside Canada receives a level of protection consistent with PIPEDA requirements.

Information you submit through our Website is stored in Canada. Our Website hosting and security providers may process information in the United States when delivering the Website to you.

7. Retention of Personal Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, or as needed to resolve disputes and enforce our agreements. When personal information is no longer required, we securely destroy, erase, or anonymize it.

Personal information submitted through our Website is retained for 24 months, unless we have an ongoing business relationship with you or a longer period is required by law.

8. Security Safeguards

We implement and maintain commercially reasonable physical, administrative, and technical safeguards to protect personal information against unauthorized access, collection, use, disclosure, copying, modification, disposal, or destruction. Our security practices for Client Personal Information processed under our client agreements are described in the applicable data processing agreements.

No method of transmission over the internet or electronic storage is completely secure. While we take all reasonable steps to protect your personal information, we cannot guarantee absolute security. If you have reason to believe that your personal information has been compromised, please contact us at the address set out in section 11.

9. Marketing Communications

We may send you commercial electronic messages about our services where you have provided express consent or where we have an existing business relationship with you that gives rise to implied consent under Canada's Anti-Spam Legislation, S.C. 2010, c. 23 ("CASL").

You may withdraw your consent to receive marketing communications at any time by clicking "unsubscribe" in any marketing email we send you, or by contacting us at the address set out in section 11. Withdrawal of consent will not affect the lawfulness of any communications sent prior to withdrawal.

10. Your Rights and Choices

Subject to applicable law, you have the right to:

  • request access to the personal information we hold about you;
  • request correction of any inaccurate or incomplete personal information;
  • withdraw consent to the collection, use, or disclosure of your personal information, subject to legal and contractual restrictions and reasonable notice; and
  • ask questions or raise concerns about how we handle your personal information.

To exercise any of these rights or to make a privacy-related inquiry or complaint, please contact our Privacy Officer using the information in section 11. We will respond to requests within the timeframes required by applicable law.

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

11. Contact — Privacy Officer

For questions, concerns, or requests regarding this Privacy Policy or our personal information management practices, please contact:

Privacy Officer
Murexa.ai Inc.
support@murexa.ai

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post any updated policy on our Website with a revised effective date. We encourage you to review this policy periodically.

Where changes to this Privacy Policy are material and affect the way we collect, use, or disclose personal information, we will provide notice by email or a prominent notice on our Website prior to the changes taking effect, and we will obtain your consent where required by applicable law.

13. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, including PIPEDA. Any disputes arising under this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of Ontario.

← Back to the city