Policies — privacy, terms, responsible AI

Privacy Policy

Stryfe Growth Labs Inc. (“Stryfe”, “we”, “us”) respects your privacy. This policy explains what personal information we collect, why we collect it, and what we do with it. We are based in British Columbia and handle personal information in line with British Columbia’s Personal Information Protection Act (PIPA) and, where it applies, Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

Information you give us: your name, business name, email address, phone number, and anything else you include when you contact us, book a call, or become a client.
Client operational data: when we build and run automation for you, we process the data that agent needs to work — customer records, calendar entries, message and call content, product and inventory data, and similar business information.
Website usage data: basic, aggregate information about pages visited and how you arrived, used only to understand what is useful on this site.

Why we collect it

To respond to your enquiry and provide the services you have asked for.
To build, operate, monitor, and improve the automation we run for you.
To send you service communications, invoices, and reports.
To meet our legal, tax, and record-keeping obligations.

Consent

We collect, use, and disclose personal information with your knowledge and consent, except where the law permits or requires otherwise. You can withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide some or all of the services.

How we handle client data

We access only the data the automation genuinely needs to do its job.
We do not sell client data or end-customer data to anyone, ever.
We do not use your data or your customers’ data to train general-purpose AI models, and would only ever do so with your written authorisation.
Third-party AI, hosting, and workflow providers we use have their own retention terms. We configure them to enterprise or API terms where those are available, but we cannot guarantee that no provider ever retains prompts or outputs. We will tell you the known practices for your build on request.
You remain the owner and, where applicable, the controller of your data. We act on your instructions.
Access on our side is limited to the people working on your engagement.

Service providers and cross-border processing

We use third-party providers to deliver our services — for example AI model providers, cloud hosting, telephony, email, scheduling, and analytics. These providers may store or process information outside Canada, including in the United States, where it may be accessible to foreign courts and law enforcement under the laws of that country. We choose providers that offer appropriate safeguards and contractual protections, and we tell you which providers your engagement uses before we build.

Retention

We keep personal information only as long as needed for the purpose it was collected, or as required by law. When an engagement ends, we return or delete client operational data on request, subject to any records we are legally required to retain. Enquiry correspondence is kept for a reasonable period for business record-keeping.

Security

We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including access controls, encryption in transit, credential management, and least-privilege access to your systems. No method of transmission or storage is perfectly secure, and we do not claim otherwise. If a breach occurs that could reasonably be expected to result in significant harm, we will notify affected individuals and the Office of the Information and Privacy Commissioner for British Columbia, and the Office of the Privacy Commissioner of Canada where federal law applies, as required.

Your rights

You may ask us what personal information we hold about you, ask for a copy, ask us to correct anything inaccurate, or ask us to delete it where we are not required to keep it. Email ryany@stryfegrowthlabs.ca and we will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Information and Privacy Commissioner for British Columbia, or the Office of the Privacy Commissioner of Canada where federal law applies.

Electronic messages (CASL)

Commercial electronic messages we send include our identity and contact information and a working unsubscribe mechanism. If we build outreach agents for you, we configure them to do the same, and we will not build a system designed to evade CASL requirements.

Children

Our services are sold to businesses and are not directed at children. We do not knowingly collect personal information from children.

Terms of Service

These terms govern your use of this website and, where no separate signed agreement exists, our services. Where you have signed a services agreement or statement of work with us, that document takes precedence over these terms if the two conflict.

Our services

We design, build, deploy, and manage AI agents and related automation. The specific scope, deliverables, fees, and timelines for any engagement are set out in a written proposal or statement of work agreed by both parties.

Fees and payment

Build fees are quoted as a fixed amount and are typically invoiced part in advance and part on launch, as set out in your statement of work.
Management fees are billed monthly in advance and cover hosting, monitoring, tuning, reporting, and support.
Third-party costs passed through to you (for example model usage, telephony minutes, or platform subscriptions) are identified in your quote.
Invoices are due within 15 days unless your statement of work says otherwise. Overdue amounts accrue interest at 1.5% per month (19.56% per year), and we may suspend services on accounts more than 30 days past due.
Billing disputes must be raised in writing within 30 days of the invoice date.
Deposits and setup fees are non-refundable except where the law requires otherwise.
All fees are in Canadian dollars unless stated otherwise and are exclusive of applicable taxes.

Your responsibilities

Provide timely access to the systems, accounts, and information the build requires.
Ensure you have the right to give us access to any data you provide, and that your use of the agent complies with the laws that apply to your business and industry.
Review and approve agent behaviour, scripts, and guardrails before launch.
Keep your own account credentials secure.

Intellectual property

You own your data, your customer records, your brand assets, and the content produced for your business. You may use that output in the ordinary course of your business.

We retain ownership of everything underneath it: our workflows, workflow definitions, prompt libraries, automation frameworks, connectors, architecture, templates, documentation, and general know-how, including improvements made during your engagement. Where we host your build on our own workflow-automation subscription, that subscription and the workflow definitions running on it remain ours — the arrangement gives you access, not ownership, in the same way a subscription gives you access to content without transferring it.

You do not own the workflows. Unless a statement of work expressly transfers specific custom-built material to you on full payment, you receive a perpetual, non-exclusive, non-transferable licence to use what we configured for you, for your own internal business use, for as long as you keep the hosting or account access needed to run it and are not in material breach. That licence does not include the right to resell, sublicense, reverse engineer, copy, or extract the underlying framework.

Confidentiality

Each party will keep the other’s non-public information confidential and use it only to perform or receive the services. This obligation survives the end of the engagement.

Nature of AI systems

AI systems are probabilistic. Even a well-built, well-tested agent can occasionally produce an incorrect, incomplete, or unexpected output. We reduce this risk with guardrails, testing, human escalation paths, and monitoring — but we do not warrant that any agent will be error-free, uninterrupted, or fit for a purpose outside the agreed scope. You are responsible for the human review appropriate to your industry, particularly for anything with legal, financial, medical, or safety consequences.

Third-party platforms

Our agents depend on third-party services and APIs. Those providers can change pricing, terms, rate limits, or availability without our control. Where a change materially affects your agent, we will tell you and propose a path forward, but we are not liable for a third party’s outage or policy change.

Limitation of liability

To the maximum extent permitted by law, neither party is liable to the other for indirect, incidental, special, or consequential damages, or for lost profits, revenue, or data. Our total aggregate liability arising out of or relating to the services is limited to the total fees you paid or owe us under the applicable statement of work in the twelve (12) months before the event giving rise to the claim. Liability arising from a confirmed security incident or a breach of confidentiality is subject to a separate cap of two times that amount. These caps do not apply to your payment obligations, to deliberate misconduct or fraud, or to anything that cannot be limited under applicable law.

Term and termination

Management engagements run month to month after any initial term stated in your statement of work, and either party may end them with 30 days’ written notice. We may suspend or end services immediately for non-payment after notice, or for use that breaches the Acceptable Use policy below. On termination we will help you transition, hand back your data, and provide reasonable documentation.

Who you are contracting with

Stryfe Growth Labs Inc. is a corporation incorporated under the Business Corporations Act (British Columbia), with its registered office in British Columbia, Canada. Your agreement is with the company. “Stryfe Growth Labs”, “we”, and “us” in these policies mean Stryfe Growth Labs Inc.

Insurance

We carry commercial general liability, professional liability (errors and omissions), and cyber liability insurance. If your procurement process needs a certificate of insurance, ask and we will send one.

Governing law

These terms are governed by the laws of the Province of British Columbia and the federal laws of Canada that apply in it. The parties submit to the exclusive jurisdiction of the courts of that province.

Changes

We may update these terms. Material changes affecting active clients will be communicated directly. Continued use of the services after a change means acceptance of the updated terms.

Responsible AI Policy

We build systems that talk to real customers on behalf of real businesses. That comes with obligations, and we would rather state them publicly than be asked about them later.

Disclosure

We do not build agents that claim to be human. When a person directly asks whether they are speaking with an AI, our agents answer honestly. Where a channel or jurisdiction requires up-front disclosure, we configure the agent to give it. We will decline work that requires deceiving people about who or what they are dealing with.

Human escalation

Every agent we deploy has a defined path to a human being. Nobody should be stuck in a loop with a system that cannot help them, and no agent we build is designed to make reaching a person difficult.

Scope and guardrails

Before launch we document what each agent may do, what it must never do on its own, and what it must escalate. High-consequence actions — contractual commitments, and anything touching medical, legal, or financial matters — are gated behind human approval by default. Money handling is prohibited outright: see No Financial Access.

Actions that always need a human

Whatever a statement of work permits, these categories are held for human approval before anything acts on them:

Financial transactions, payments, and refunds.
Binding commitments and contract signatures.
Changes to financial accounts.
Hiring, credit, insurance, housing, or other legally significant decisions about a person.
Legal notices and regulatory filings.
Deletion of records the law requires you to keep.
Anything a reasonable person would rely on as professional legal, medical, or financial advice.

You are responsible for the final decision to rely on, publish, send, or act on any output, and for how that output is used outside our systems.

Only what is written down

Your statement of work lists exactly what the automation may do — draft messages, send email or SMS, answer calls, book appointments, update records, publish content, draft purchase orders, and so on. Anything not expressly authorised there is not authorised.

Verify before you rely on it

AI output is probabilistic. The same input can produce different results, and output can be incomplete, outdated, biased, or simply wrong. Check material output before relying on it, particularly anything published externally or used in a legal, medical, financial, employment, or housing context. We build to a professional standard of care; we do not guarantee the accuracy of any output.

Testing before customers

Agents are tested against realistic scenarios, including adversarial and edge cases, and you review the transcripts before anything goes live.

Accuracy and grounding

Agents are grounded in your approved source material. Where an agent does not know something, it is configured to say so and escalate rather than guess.

Fairness

We do not build agents that screen, price, or prioritise people on protected grounds. If a client asks us to, we decline.

Data minimisation

Agents are given the narrowest access that lets them do the job. We do not connect systems “just in case”.

Monitoring and accountability

Live agents are monitored, and conversations are logged so that behaviour can be reviewed, audited, and corrected. Where an agent gets something materially wrong, we tell you — we do not quietly patch it and hope you did not notice.

Work we decline

Anything requiring financial access or money handling — see No Financial Access, which is absolute.
Impersonating a specific real person without their documented consent.
Deceptive, manipulative, or high-pressure sales tactics aimed at vulnerable people.
Mass unsolicited messaging designed to evade anti-spam law.
Surveillance of employees or customers without their knowledge.
Generating regulated advice presented as coming from a licensed professional.

No Financial Access — Absolute

We do not build financial agents, and we never give any agent the ability to move, spend, or commit money. This applies without exception, to every client, on every engagement, regardless of what is offered or requested.

What this means in practice

No agent we design, build, deploy, or manage will ever be given credentials for, or permission to:

Access a bank account, credit union account, or any deposit account.
Initiate, approve, schedule, or cancel a payment, transfer, e-transfer, wire, ACH, EFT, or direct debit.
Hold, use, or transact with a credit card, debit card, or stored payment method.
Buy, sell, trade, or hold securities, cryptocurrency, commodities, or any other financial asset.
Take out, guarantee, or repay a loan, line of credit, or other financing.
Issue refunds, chargebacks, or credits from a payment processor.
Enter into a binding purchase, contract, or financial commitment on your behalf.
Access payroll systems to run, alter, or release pay.
Access accounting or tax systems in any mode other than read-only reporting.

Where money is adjacent to an agent’s job

Some of our agents work near commercial processes. The boundary does not move:

Our inventory agent drafts purchase orders. A human being reviews, approves, and sends every one. The agent never transmits an order or commits your business to a spend.
Our sales and property agents can quote your published prices and take a customer to your own checkout or booking page. They never capture, store, or process card details, and they never complete a transaction.
Any agent that reads financial data does so read-only, for reporting and forecasting, and cannot write to those systems.

The contract allows an exception we do not use

Our Master Services Agreement and Acceptable AI Use Policy both contemplate a narrow case where a written, legally-reviewed statement of work could authorise an automated financial action. That clause exists because the agreement is drafted to industry standard. We do not use it. No statement of work we issue authorises an automated financial action, and we will not draft one that does. If the two documents ever appear to disagree, this policy is the stricter of the two and this policy is what we do.

We will not take the work

If a project requires an agent to hold financial permissions, we will decline it. We will not build it under a different label, we will not build it with additional safeguards, and we will not build it because a client accepts the risk in writing. There is no tier, price, or contract term that unlocks this. If you need financial automation, engage a regulated provider built for it.

Why we are absolute about it

AI systems are probabilistic and can be manipulated by the people who talk to them. An agent that can be socially engineered into a conversation can be socially engineered into a transaction. The only reliable control is to never grant the capability in the first place. We decline engagements that require it.

No financial advice

We are not licensed financial advisors, and nothing we build is designed to produce investment, tax, lending, or accounting advice. We do not configure agents to give it, and we will decline requests to make an agent appear qualified to do so.

Holding us to it

This policy is a term of every engagement. If you ever discover an agent we built holding a financial permission, tell us at ryany@stryfegrowthlabs.ca and we will revoke it immediately and tell you how it happened.

Acceptable Use

When you use an agent we built, you agree not to use it — or ask us to configure it — to:

Break any applicable law, including privacy, anti-spam, consumer protection, and advertising law.
Send unsolicited commercial messages to people who have not consented, or ignore unsubscribe requests.
Harass, threaten, defraud, or deliberately mislead anyone.
Impersonate another business or a specific real individual.
Process personal information you do not have the right to process.
Generate content that is unlawful, hateful, or sexually exploitative.
Attempt to bypass the guardrails, rate limits, or safety configuration of what we deliver.
Grant it any financial permission, credential, or payment capability — whether by reconfiguring it yourself or by connecting it to a system that carries one.
Generate deepfakes or misleading synthetic media.
Conduct surveillance without lawful authority.
Carry out credential theft, deploy malware, or scrape without authorisation.
Re-identify individuals from de-identified or aggregated data.
Process highly sensitive personal information — health records, financial account numbers, government ID, biometrics — without our prior written approval.
Make unsupervised medical, legal, credit, employment, housing, or insurance decisions about a person.
Attempt prompt injection, or otherwise extract our system instructions, another client’s data, or our proprietary configurations.

Where we run outbound email, SMS, or calling for you, you are responsible for the lawful sourcing of any contact list. You may not upload a purchased or scraped list and ask us to message it. You are also responsible for consent records, suppression lists, calling-hour rules, and approving scripts before use.

We may suspend or terminate services for breach of this policy. Where the breach is serious or creates legal risk, we may do so immediately.

Cookies & Tracking

This website is built to work without advertising cookies or cross-site trackers. We do not run third-party advertising pixels on it.

If we later add privacy-respecting analytics to understand which pages are useful, we will list the provider here and, where consent is required, ask for it before anything non-essential is set. Fonts on this site are loaded from Google Fonts, which means your browser makes a request to Google’s servers to fetch them; if you would prefer no third-party font request at all, we can self-host them — email us and we will.

You can block or delete cookies through your browser settings at any time. The site will continue to work.

Accessibility

We aim to meet WCAG 2.1 Level AA on this website and in the interfaces we deliver to clients. That means keyboard navigation, visible focus states, sufficient colour contrast, meaningful alternative text, semantic structure, and respect for the reduced-motion preference in your operating system.

If you hit a barrier on this site, or need information from it in another format, email ryany@stryfegrowthlabs.ca and we will fix it and get you what you need.

Contact

Questions about anything on this page, or a privacy request, both reach the same inbox: ryany@stryfegrowthlabs.ca.

Stryfe Growth Labs Inc.
Incorporated in British Columbia, Canada
Commercial general liability, professional liability, and cyber insured

We are a remote business and do not operate a public office. If you need a mailing address for a formal notice or a privacy request, email ryany@stryfegrowthlabs.ca and we will provide one.

Last updated: 2 September 2026