Last updated 26 August 2026
This explains what personal data we collect, why, and what you can ask us to do about it. It covers two different groups of people: visitors to this website, and the customers who speak to an AI receptionist we run on a business's behalf.
Cheyans AI Recep is based in Ontario, Canada, and is operated by Cheyan.
Before publishing: if you are incorporated, add your registered company name and business number here. If you are a sole proprietor, add a contact address. Then delete this box.
For enquiries about this policy or about your data, email cheyan@cheyan.agency.
Our privacy officer is Cheyan, reachable at cheyan@cheyan.agency. PIPEDA requires a named individual be accountable for the personal information in your custody — there is no regulator to register with, but the named person is mandatory.
We handle personal data in two distinct ways, and your rights differ depending on which applies.
As controller. When you contact us about our service, we decide what to do with your details. That is this website's enquiry form, our email, and our own WhatsApp and phone lines.
As processor. When we run an AI receptionist for a business, that business is the controller. They decide what is collected and why; we act on their instructions under a written agreement. If you spoke to a receptionist we operate and want your data removed, contact that business, and we will support them in doing it.
| What | Why | Basis |
|---|---|---|
| Name, business name, email, phone, business type, and anything you write in the message box | To arrange and run your demo, and to reply to you | Consent, implied by you contacting us |
| Email correspondence | To keep a record of what was agreed | Consent, and our need to keep records |
| Billing details, for customers | To invoice and to meet accounting duties | Contract, and CRA record-keeping |
| Aggregate website analytics | To see which pages work and which do not | Consent, implied for basic analytics, express where cookies are used |
We do not buy contact lists, we do not sell your data, and we do not use your enquiry to market unrelated products.
When we run an AI receptionist for a business, it will typically capture a caller's name, phone number, the reason for their call and the appointment booked, along with a transcript and sometimes a recording. That data belongs to the business we run it for. We store it only as long as they instruct us to, and we do not use it for any purpose of our own, including training models, unless that business has agreed to it in writing.
Before publishing: this section describes services you run for clients. If you are not operating any yet, delete it and the "Two roles" section above.
We use a small number of suppliers to run the service. Each is bound by a data processing agreement and may only act on our instructions.
Some of these operate outside Canada, including in the United States. PIPEDA permits this but requires we say so plainly: while your personal information is in another country it is subject to that country's laws and may be accessible to its courts and law enforcement. We use contractual protections to keep the standard of care comparable to our own.
This site loads a webfont from Google Fonts. That means Google receives your IP address when the page loads. If you would rather it did not, we can serve the font from our own server instead, and we are happy to do so on request.
This website sets no cookies and does not track you. Nothing is stored on your device, and there is no analytics.
[If you add analytics later, say which tool, whether it sets cookies, and ask for consent before any non-essential cookie. Consent has to be meaningful under PIPEDA: if a reasonable person would not expect the collection, implied consent is not enough.]
Under PIPEDA you can ask what personal information we hold about you, why we collected it and who we have disclosed it to; ask us to correct anything inaccurate; and withdraw your consent, subject to legal and contractual limits we will explain at the time.
PIPEDA gives no general right to erasure the way UK GDPR does. Where we can delete, we will; where a record must be kept for tax or contractual reasons we will tell you which, and for how long.
Email cheyan@cheyan.agency and we will respond within one month. There is no charge.
If you are unhappy with how we have handled it, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or on 1-800-282-1376. In Alberta, British Columbia or Quebec your provincial commissioner may be the right office instead. We would rather you came to us first so we can put it right.
Our AI receptionist holds conversations, answers questions and books appointments. It does not make decisions that produce legal effects for you or that significantly affect you in a similar way. A human is always reachable, and you can ask to speak to one at any point in a call or a message.
Data is encrypted in transit and at rest. Access is limited to the people who need it, protected by multi-factor authentication. If a breach creates a real risk of significant harm, PIPEDA requires us to report it to the Office of the Privacy Commissioner and notify you as soon as feasible, and to log every breach for 24 months whether or not it was reportable.
If we change this policy we will update the date at the top. Material changes affecting existing customers will be notified by email.