Privacy Policy
Last updated: September 8, 2026
This policy explains what personal information Glyphware (“we,” “us”) collects through glyphware.ca and the client dashboard, why we collect it, who we share it with, and the choices you have. It's written in plain language, and covers exactly what this site actually does — not a generic template. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario law.
Information we collect
Contact form
Name, email address, company (optional), and whatever you write in the message field. Used only to respond to your inquiry.
Client accounts
If you create an account to use the client dashboard: name, email, a securely hashed password (we never store your actual password), and optionally company and phone number. New customer accounts are reviewed before activation.
Project data
Information related to work we do for you — support tickets, project requests, invoices, and signed agreements, including the typed name, timestamp, and IP address recorded at the moment you sign an agreement (our electronic-signature record).
Ask Glyph (AI chat and voice)
Messages you type or speak to the Glyph chat widget are sent to OpenAI to generate a response, and (for voice) to convert speech to text and text to speech. We don't use these conversations to train any AI model, and Glyph is not authorized to make binding commitments — pricing it quotes is an estimate, not a contract.
Payment information
Invoice payments are processed directly by Stripe. We never see or store your full card number — Stripe handles that under its own security standards (PCI DSS).
Cookies
We use one functional cookie to keep you signed in to the client dashboard. We don't use advertising or tracking cookies, and we don't run any third-party analytics on this site.
How we use your information
To respond to inquiries, deliver and manage the services you've engaged us for, process payments, send transactional emails (password resets, invoice and agreement notifications, account approval), and improve the site. We do not sell your personal information, and we do not use it for advertising.
Who we share it with
We use a small set of service providers to run this site and deliver our services, each of whom only receives the data needed to do their job:
- Stripe — payment processing for invoices.
- Resend — sending transactional emails (not marketing).
- OpenAI — powering the Ask Glyph chat and voice widget.
- Our hosting and database provider — storing account and project data securely.
We don't share your information with anyone else, except where required by law.
How long we keep it
We keep account and project data for as long as your account is active and for a reasonable period afterward for legal, accounting, and record-keeping purposes (signed agreements and invoices, in particular, are kept as our record of the work performed). Contact form submissions that don't turn into a project are periodically deleted.
Your rights
Under PIPEDA, you can ask us what personal information we hold about you, request that we correct inaccurate information, or ask us to delete it (subject to our legal obligation to retain certain records, like invoices and signed agreements). To make a request, email [email protected].
Security
The site is served entirely over HTTPS. Passwords are hashed (never stored in plain text), admin access is role-restricted, and every sensitive admin action is logged. No system is perfectly secure, but we take reasonable, industry-standard steps to protect your information.
Children's privacy
This site is intended for businesses and individuals seeking professional services, not children. We don't knowingly collect information from anyone under 16.
Changes to this policy
If we make a meaningful change to how we handle your information, we'll update the date at the top of this page.
Contact us
Questions about this policy or your data: [email protected] or the contact page.