1.Scope of this policy
This policy applies to personal information that McKenzie Labs, Inc. and its subsidiaries and operating companies (collectively, “McKenzie Labs,” “we,” or “us”) process when you visit our websites, use our products, or interact with us. Specific Operating Companies or products — particularly those in regulated fields such as healthcare or national security — may publish supplemental privacy notices that provide additional or differing detail; where a supplemental notice applies, it controls for that product to the extent of any conflict.
2.Information we collect
2.1 Information you provide
- Account and profile data — name, email, organization, role, and credentials.
- Communications — messages, inquiries, support requests, and partnership outreach.
- Billing data — where paid Services apply, billing contact and transaction details (payment card data is handled by our payment processors, not stored by us).
- Content and configurations — data you submit to the Services, including canEYE rule sets and approval preferences.
2.2 Information collected automatically
- Device and log data — IP address, browser and device type, operating system, and timestamps.
- Usage data — pages viewed, features used, actions taken, and referring links.
- Cookies and similar technologies — as described in Section 7.
2.3 Information from third parties
We may receive information from service providers, analytics and security vendors, identity or business-verification providers, and from AI assistants or integrations you choose to connect, consistent with their terms and your permissions.
3.How we use information
We use personal information to:
- provide, operate, maintain, and secure the Services;
- authenticate users and administer Accounts;
- enforce canEYE rules and process actions queued for your approval;
- respond to inquiries and provide customer and technical support;
- process transactions and send related communications;
- monitor, analyze, and improve performance, reliability, and safety;
- detect, prevent, and investigate fraud, abuse, and security incidents;
- comply with legal, regulatory, export-control, and contractual obligations; and
- send administrative or, where permitted, marketing communications (which you may opt out of).
We do not sell your personal information, and we do not use the content of your Customer Data to train general-purpose AI models except with your explicit, separate consent.
4.Legal bases for processing
Where the GDPR or similar laws apply, we rely on one or more of the following legal bases: performance of a contract with you; your consent (which you may withdraw); compliance with a legal obligation; and our legitimate interests in operating, securing, and improving the Services, balanced against your rights.
5.How canEYE handles your data
canEYE is an AI control layer designed around data minimization. It operates on the rules you set and on the metadata of the actions a Connected Assistant proposes — for example, the type of action, the assistant requesting it, and whether your rules permit it. canEYE is designed not to require access to the content of the underlying data, documents, or communications it governs, except to the limited extent necessary to present an action for your approval and enforce your rules.
Your canEYE rule sets and approval history are treated as Customer Data: used to operate the control layer, retained under Section 8, and never sold. High-consequence actions such as signing agreements or moving money are always protected and withheld from automatic execution by default.
8.Data retention
We retain personal information for as long as needed to provide the Services, maintain your Account, comply with legal, tax, and regulatory obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose [insert specific retention schedule]. When information is no longer needed, we delete or de-identify it.
9.Data security
We maintain administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and regulators as required by law.
10.International transfers
We may process and store information in countries other than your own, including the United States. Where required, we use appropriate safeguards — such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms — for cross-border transfers. Contact us for more information about these safeguards.
11.Your rights & choices
Depending on where you live, you may have the right to:
| Right | What it means |
|---|---|
| Access | Request a copy of the personal information we hold about you. |
| Correction | Ask us to correct inaccurate or incomplete information. |
| Deletion | Ask us to delete your personal information, subject to legal exceptions. |
| Portability | Receive certain information in a portable, machine-readable format. |
| Restriction / objection | Limit or object to certain processing, including direct marketing. |
| Withdraw consent | Withdraw consent where processing is based on it, without affecting prior processing. |
| Non-discrimination | Not be discriminated against for exercising your privacy rights. |
To exercise your rights, contact us at privacy@mckenzielabs.com. We will verify your request and respond within the time required by applicable law. If we decline, you may appeal or lodge a complaint with your local data-protection authority. Authorized agents may submit requests on your behalf where the law permits.
12.Children’s privacy
The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.
13.Third-party links & services
The Services may link to or interoperate with third-party websites and services, including AI assistants you connect. We are not responsible for their privacy practices. Review the privacy notices of any third-party service you use.
14.Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date and, for material changes, provide additional notice where required. Your continued use of the Services after the changes take effect constitutes acceptance of the updated policy.
15.Contact us
For privacy questions or to exercise your rights, contact McKenzie Labs, Inc.:
privacy@mckenzielabs.com
[Insert registered entity name, mailing address, and, where required, the name and contact of your data-protection officer or EU/UK representative.]