Privacy Policy
MEDIALYST.AI PRIVACY POLICY
Last Updated: October 1, 2025 Effective Date: October 1, 2025
SECTION 1: INTRODUCTION
1.1 Our Commitment to Privacy
Solar Flare Ventures Inc., operating as Medialyst ("Medialyst," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Medialyst.ai website, web application, mobile applications, application programming interfaces (APIs), and all related services, features, content, and functionality (collectively, the "Service" or "Services").
We believe in transparency and are committed to being upfront about our privacy practices. This Privacy Policy is designed to help you understand:
- What information we collect and why we collect it;
- How we use your information;
- When and with whom we share your information;
- How we protect your information;
- Your rights and choices regarding your information; and
- How to contact us with questions or concerns.
1.2 Scope of This Policy
This Privacy Policy applies to all users of the Service, including:
(a) Website visitors who browse medialyst.ai without creating an account;
(b) Registered users who create accounts and use the Service;
(c) Organization administrators and team members using Organization Accounts;
(d) API users who access the Service programmatically;
(e) Journalists and media professionals whose information appears in our database; and
(f) Any other individuals whose personal data we process in connection with the Service.
This Privacy Policy does not apply to third-party websites, applications, or services that may be linked to or integrated with our Service, even if accessible through our Service. We encourage you to review the privacy policies of any third-party services you access.
1.3 Controller Information
For purposes of data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA), Solar Flare Ventures Inc. is the data controller responsible for your personal information.
Solar Flare Ventures Inc. Operating as Medialyst Kitchener, ON N2G 2L2 Canada
1.4 Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Privacy Inquiries: Email: [email protected]
Data Protection Officer: Email: [email protected]
Mailing Address: Solar Flare Ventures Inc. Attn: Privacy Team Kitchener, ON N2G 2L2, Canada
For EU Residents: We have appointed a representative in the European Union. Contact: [email protected]
For UK Residents: We have appointed a representative in the United Kingdom. Contact: [email protected]
1.5 Key Definitions
For purposes of this Privacy Policy:
"Personal Data" or "Personal Information" means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you or your household.
"Processing" means any operation performed on Personal Data, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, or destruction.
"Journalist Data" means Personal Data about journalists, editors, reporters, bloggers, and other media professionals that is contained in our media database.
"User Content" means any content, materials, data, press releases, media materials, or other information that you submit, upload, transmit, or otherwise make available through the Service.
"AI Outputs" means content, recommendations, analyses, or other outputs generated by our artificial intelligence systems.
"Organization Account" means an account that allows multiple users from the same organization to access the Service under a single subscription.
SECTION 2: INFORMATION WE COLLECT
We collect information in several ways: directly from you, automatically when you use the Service, and from third-party sources. This section describes the types of information we collect and our sources.
2.1 Information You Provide Directly
When you interact with our Service, you may provide us with the following types of information:
2.1.1 Account Registration Information
When you create a Medialyst account, we collect:
- Identity Information: Full name, username, and profile photo (optional);
- Contact Information: Email address and phone number (optional);
- Professional Information: Company name, job title, industry, and company size;
- Authentication Information: Password (stored in encrypted form) or third-party authentication credentials;
- Preferences: Communication preferences, language settings, and notification preferences.
2.1.2 Payment Information
When you purchase a subscription or make a payment, we collect:
- Billing Information: Billing name, billing address, and company name for invoicing;
- Payment Method: Credit card number, expiration date, and security code.
Important: Payment card information is processed directly by our third-party payment processor, Stripe, Inc. Medialyst does not store complete payment card numbers on our systems. We receive only a tokenized reference, the last four digits of your card, card type, and expiration date for record-keeping and customer service purposes.
2.1.3 Press Releases and Campaign Content
When you use the Service, you may submit:
- Press Releases: The full text of press releases, media advisories, and related communications;
- Campaign Information: Campaign names, descriptions, target audiences, and goals;
- Company Information: Information about your company, products, services, and news for inclusion in pitches;
- Media Assets: Images, logos, documents, and other files you upload (if applicable).
2.1.4 Custom Prompts and Workflow Configurations
We collect information about how you configure and use the Service, including:
- Custom Prompts: Any custom prompts or instructions you create for AI features;
- Workflow Configurations: Your saved workflow settings, recipe configurations, and automation rules;
- Preferences: Filtering criteria, sorting preferences, and saved searches;
- Column Configurations: Custom columns, formulas, and data processing settings you create.
2.1.5 Communications and Support
When you communicate with us, we collect:
- Support Requests: The content of your support tickets, chat messages, and email communications;
- Feedback: Any feedback, suggestions, or ideas you provide;
- Survey Responses: Your responses to surveys, questionnaires, or feedback forms;
- Call Recordings: If you consent, recordings of support or sales calls.
2.2 Information Collected Automatically
When you access or use the Service, we automatically collect certain information:
2.2.1 Log Data
Our servers automatically record information when you access the Service, including:
- IP Address: Your Internet Protocol address;
- Browser Information: Browser type, version, and language settings;
- Device Information: Device type, operating system, and unique device identifiers;
- Access Times: Date and time of your visits;
- Referring URLs: The website or source that referred you to our Service;
- Exit Pages: The pages you visited before leaving our Service.
2.2.2 Usage Data
We collect information about how you use the Service, including:
- Pages Viewed: Which pages and features you access;
- Actions Taken: Clicks, scrolls, form submissions, and other interactions;
- Time on Page: How long you spend on different pages or features;
- Feature Usage: Which features you use and how frequently;
- Search Queries: Search terms you enter within the Service;
- Navigation Paths: The sequence of pages you visit.
2.2.3 Campaign Analytics
We collect information about your campaigns and activities, including:
- Campaign Metrics: Number of campaigns created, journalists discovered, and exports performed;
- Search Statistics: Keywords used, search results returned, and filters applied;
- Journalist Interactions: Which journalist profiles you view, save, or export;
- Email Metrics: If applicable, email open rates, click rates, and bounce rates.
2.2.4 Performance Data
We collect technical performance information, including:
- Load Times: How long pages and features take to load;
- Error Logs: Technical errors, crashes, and exceptions;
- Performance Metrics: Response times, throughput, and resource utilization;
- API Usage: API calls, response times, and error rates (for API users).
2.3 Information from Third Parties
We may receive information about you from third-party sources:
2.3.1 Single Sign-On Providers
If you choose to register or log in using a third-party service (such as Google), we receive:
- Profile Information: Name, email address, and profile picture from your third-party account;
- Authentication Tokens: Tokens that allow us to authenticate you without storing your third-party password;
- Account Identifiers: Your unique identifier on the third-party platform.
We only receive information that you authorize the third-party service to share with us.
2.3.2 Payment Processor
Our payment processor, Stripe, may provide us with:
- Payment Status: Confirmation of successful or failed payments;
- Subscription Status: Changes to your subscription status;
- Billing Updates: Updated card information (last four digits and expiration only) if you update your payment method through Stripe;
- Fraud Signals: Indicators of potentially fraudulent transactions.
2.3.3 Analytics Providers
We may receive aggregated or anonymized analytics data from third-party analytics providers to help us understand usage trends and improve the Service.
2.4 Cookies and Similar Technologies
We use cookies and similar tracking technologies to collect and store information about your interactions with our Service.
2.4.1 Types of Cookies We Use
| Cookie Type | Purpose | Examples |
|---|---|---|
| Strictly Necessary | Essential for the Service to function; cannot be disabled | Session cookies, authentication cookies, security cookies |
| Functional | Remember your preferences and settings | Language preferences, display settings, saved filters |
| Analytics | Help us understand how visitors use the Service | Page views, feature usage, user journeys |
| Marketing | Track the effectiveness of our marketing campaigns | Conversion tracking, retargeting (if applicable) |
2.4.2 Cookie Consent (EU/UK Users)
If you are located in the European Union, European Economic Area, or United Kingdom, we will request your consent before placing non-essential cookies on your device. You can manage your cookie preferences at any time through our cookie consent tool or by adjusting your browser settings.
2.4.3 Managing Cookies
You can control cookies through your browser settings. Most browsers allow you to:
- View what cookies are stored on your device;
- Delete all or specific cookies;
- Block all cookies or cookies from specific sites;
- Block third-party cookies;
- Accept all cookies;
- Receive notification before a cookie is stored.
Please note that disabling certain cookies may affect the functionality of the Service.
SECTION 3: HOW WE USE YOUR INFORMATION
We use the information we collect for various purposes related to providing, maintaining, and improving the Service. This section describes our purposes for processing your information.
3.1 Providing and Operating the Service
We use your information to:
- Create and manage your account;
- Authenticate your identity and provide secure access;
- Process your press releases and campaign content;
- Generate journalist recommendations and matches;
- Provide AI-powered analysis and suggestions;
- Enable workflow automation and campaign management;
- Process exports and data downloads;
- Provide customer support and respond to inquiries.
3.2 AI Processing and Analysis
We use your information to provide AI-powered features, including:
- Press Release Analysis: Analyzing your press releases to extract keywords, themes, and newsworthy elements;
- Journalist Matching: Identifying journalists whose coverage areas align with your content;
- Beat Analysis: Analyzing journalist writing patterns and topical focus areas;
- Relevance Scoring: Calculating match scores between your content and journalist profiles;
- Outreach Suggestions: Generating personalized pitch suggestions and email drafts;
- Keyword Generation: Identifying optimal search terms for journalist discovery.
3.3 Email Finding and Validation
We use information to provide contact discovery services:
- Finding professional email addresses for journalists;
- Validating email address deliverability;
- Providing confidence scores for contact information;
- Preventing bounces and delivery failures.
3.4 Payment Processing
We use your payment information to:
- Process subscription payments and one-time purchases;
- Manage billing cycles and renewals;
- Issue invoices and receipts;
- Handle refunds and credits;
- Prevent and detect payment fraud.
3.5 Customer Support
We use your information to:
- Respond to your support requests and inquiries;
- Troubleshoot technical issues;
- Provide guidance on using the Service;
- Follow up on resolved issues.
3.6 Service Improvement and Analytics
We use information to:
- Analyze usage patterns and trends;
- Identify popular features and areas for improvement;
- Test new features and functionality;
- Monitor Service performance and reliability;
- Conduct research and development.
3.7 Security and Fraud Prevention
We use information to:
- Protect against unauthorized access to accounts;
- Detect and prevent fraudulent activity;
- Monitor for security threats and vulnerabilities;
- Enforce our Terms of Service;
- Investigate potential violations.
3.8 Legal Compliance
We use information to:
- Comply with applicable laws and regulations;
- Respond to legal process and government requests;
- Establish, exercise, or defend legal claims;
- Protect our rights and the rights of others.
3.9 Marketing Communications
With your consent or where permitted by law, we use information to:
- Send newsletters and product updates;
- Notify you of new features and improvements;
- Provide promotional offers and discounts;
- Invite you to events, webinars, and surveys.
You may opt out of marketing communications at any time by clicking the unsubscribe link in any email or by updating your preferences in your account settings.
3.10 Legal Basis for Processing (GDPR)
For users in the European Economic Area and United Kingdom, we process your Personal Data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Providing the Service | Performance of contract |
| Payment processing | Performance of contract |
| Customer support | Performance of contract / Legitimate interests |
| Security and fraud prevention | Legitimate interests |
| Service improvement | Legitimate interests |
| Analytics | Legitimate interests (with consent for cookies in EU/UK) |
| Legal compliance | Legal obligation |
| Marketing communications | Consent / Legitimate interests (existing customers) |
| AI processing | Performance of contract / Legitimate interests |
SECTION 4: AI AND MACHINE LEARNING PROCESSING
4.1 How AI Is Used in the Service
Medialyst uses artificial intelligence and machine learning technologies to power core features of the Service. Understanding how we use AI is important for your privacy.
4.1.1 Press Release Analysis
Our AI systems analyze press releases you submit to:
- Understand content, themes, and key messages;
- Extract topics, industries, and relevant categories;
- Identify entities (companies, people, products);
- Assess newsworthiness and media appeal;
- Generate optimized search parameters.
4.1.2 Journalist Matching and Recommendations
AI systems help identify relevant journalists by:
- Analyzing journalist coverage patterns and beat areas;
- Calculating relevance scores for journalist-story matches;
- Ranking journalists by likelihood of interest;
- Identifying emerging coverage trends.
4.1.3 Content Generation
AI assists with content creation by:
- Generating personalized pitch suggestions;
- Creating email subject lines and opening hooks;
- Suggesting relevant journalist articles to reference;
- Providing writing assistance and optimization.
4.2 Third-Party AI Providers
We use third-party AI providers, including OpenAI, LLC, to power certain AI features. When you use AI-powered features:
Data Transmitted to AI Providers:
- Press release text and campaign content;
- Search queries and journalist criteria;
- Prompts and instructions for content generation.
Data NOT Transmitted to AI Providers:
- Your account credentials or password;
- Payment card information;
- Complete exported journalist lists;
- Your personal contact information (unless included in content you submit).
4.3 AI Training Disclosure
YOUR USER CONTENT IS NOT USED TO TRAIN OUR AI MODELS OR THIRD-PARTY AI MODELS.
We access AI services through API-only access, which means:
- Your content is processed to generate outputs but is not used to train underlying models;
- We have Data Processing Agreements with AI providers that prohibit use of customer data for training;
- Your press releases and campaign content remain confidential.
If we ever change this policy, we will provide at least sixty (60) days' notice and obtain your consent where required by law.
4.4 AI Accuracy and Limitations
AI-generated content may contain:
- Inaccuracies or "hallucinations" (plausible but incorrect information);
- Outdated information not reflecting current circumstances;
- Suggestions that may not be appropriate for your specific situation;
- Biases present in training data.
We recommend that you:
- Always review AI outputs before use;
- Verify factual claims independently;
- Use AI suggestions as starting points, not final products;
- Apply your professional judgment to all AI recommendations.
4.5 AI-Generated Content Ownership
- You retain all rights to content you submit;
- We grant you a license to use AI outputs generated from your inputs;
- AI outputs may be similar to outputs provided to other users with similar inputs;
- US copyright protection may not apply to purely AI-generated content.
SECTION 5: JOURNALIST CONTACT DATABASE
This section describes how we collect, process, and manage information about journalists and media professionals whose profiles appear in our database.
5.1 Sources of Journalist Data
We collect journalist data from the following sources:
(a) Publicly Available Information:
- Published articles, bylines, and author biographies;
- Official author pages on publication websites;
- Professional biographies on personal websites;
- Press releases attributing authorship;
- Public speaking engagements and conference appearances.
(b) Professional Social Media:
- LinkedIn profiles designated as public;
- Twitter/X accounts used for professional purposes;
- Other professional networking platforms.
(c) Third-Party Data Providers:
- Hunter.io: Business contact enrichment platform.
(d) Email Validation Services:
- DeBounce: Email verification services;
- Instantly: Email deliverability verification.
(e) User-Contributed Data:
- Media lists uploaded by users;
- Profile corrections submitted by users or journalists.
5.2 Types of Journalist Data Collected
| Data Category | Specific Elements |
|---|---|
| Identity | Full name, professional aliases, pen names |
| Contact | Professional email address(es), work phone (if public) |
| Employment | Publication affiliations, job title, staff/freelance status |
| Expertise | Beat/coverage areas, topics, industry focus |
| Published Work | Article headlines, publication dates, article URLs |
| Social Presence | LinkedIn URL, Twitter handle, professional website |
| Geographic | Publication location, bureau assignment |
Data We Do NOT Collect:
- Personal home addresses or personal email addresses;
- Sensitive personal data (race, religion, health, etc.);
- Financial information;
- Information about private lives or family members.
5.3 Legal Basis for Processing Journalist Data
We process journalist data based on legitimate interest (GDPR Article 6(1)(f)) for B2B communications purposes. We have conducted a legitimate interests assessment and determined that:
- Data is limited to professional information journalists have made public;
- Journalists expect professional communications as part of their role;
- Processing provides professional benefit (relevant story opportunities);
- We implement robust safeguards including easy opt-out mechanisms.
5.4 Journalist Rights
Journalists whose data appears in our database have the following rights:
(a) Right to Access: Confirm whether we process your data and obtain a copy;
(b) Right to Correction: Request correction of inaccurate or incomplete data;
(c) Right to Deletion: Request removal from our database;
(d) Right to Object: Object to processing of your data;
(e) Right to Restriction: Request restriction of processing in certain circumstances;
(f) Right to Complain: Lodge a complaint with a supervisory authority.
5.5 Journalist Opt-Out and Profile Management
To Opt Out / Request Deletion:
Email: [email protected] (Subject: "Journalist Opt-Out Request") Online: medialyst.ai/journalist-optout
Include: Your name, professional email address(es), and publication affiliations.
Upon receiving your request, we will:
- Acknowledge within 5 business days;
- Verify your identity;
- Process within 30 calendar days;
- Confirm completion;
- Add you to our permanent suppression list.
To Claim/Manage Your Profile:
Email: [email protected] (Subject: "Profile Claim Request")
Once verified, you may review, correct, or update your information.
SECTION 6: HOW WE SHARE INFORMATION
We may share your information in the following circumstances:
6.1 Service Providers
We share information with third-party service providers who process data on our behalf:
| Provider Type | Examples | Purpose |
|---|---|---|
| Cloud Hosting | AWS, Vercel | Infrastructure and data storage |
| Payment Processing | Stripe | Payment and subscription management |
| AI Services | OpenAI | AI-powered features |
| Search Services | Serper.dev | Journalist and article discovery |
| Email Enrichment | Hunter.io | Contact data discovery |
| Email Validation | DeBounce, Instantly | Email deliverability verification |
| Analytics | PostHog | Usage analytics and product improvement |
| Customer Support | Intercom | Support ticket management |
6.2 Business Purposes
(a) Aggregated Data: We may share aggregated, de-identified data that cannot identify individuals for research, benchmarking, and marketing purposes.
(b) No Sale of Personal Information: We do NOT sell personal information as defined under the CCPA/CPRA.
(c) No Third-Party Marketing: We do NOT share personal information with third parties for their direct marketing purposes.
6.3 Legal Requirements
We may disclose information when we believe necessary to:
- Comply with applicable laws, regulations, or legal process;
- Respond to lawful requests from government authorities;
- Protect our rights, property, or safety;
- Prevent fraud or security threats;
- Enforce our Terms of Service.
6.4 Business Transfers
In connection with a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the acquiring entity. We will:
- Ensure the acquiring entity agrees to protect your information;
- Provide notice as required by law;
- Honor existing opt-out requests and suppression lists.
SECTION 7: DATA RETENTION
We retain personal information only as long as necessary for the purposes described in this Privacy Policy.
7.1 Retention Periods
| Data Category | Retention Period |
|---|---|
| Active Accounts | While account is active + 30 days |
| Deleted Accounts | Deleted within 30 days of request |
| Payment Records | 7 years (legal/tax requirements) |
| Support Tickets | 2 years from resolution |
| Analytics Data | 26 months |
| Marketing Data | Until opt-out or consent withdrawal |
| Journalist Database | Continuously updated; outdated data removed periodically |
| Backup Systems | 90 days rolling retention |
7.2 Deletion and Anonymization
When data reaches end of retention:
- Data is securely deleted using industry-standard methods;
- Where deletion is not feasible, data is anonymized;
- Deletion from backups occurs within 90 days.
SECTION 8: YOUR RIGHTS AND CHOICES
8.1 Rights for All Users
Regardless of location, you have the right to:
- Access: Request a copy of your personal data;
- Correction: Request correction of inaccurate data;
- Deletion: Request deletion of your account and data;
- Portability: Request your data in a portable format;
- Marketing Opt-Out: Unsubscribe from marketing communications;
- Cookie Preferences: Manage cookie settings.
How to Exercise:
- Account settings: medialyst.ai/settings/privacy
- Email: [email protected]
8.2 GDPR Rights (EU/EEA/UK Users)
If you are in the EU, EEA, or UK, you also have:
- Right to Restrict Processing: Limit how we use your data;
- Right to Object: Object to processing based on legitimate interests;
- Right to Withdraw Consent: Where processing is based on consent;
- Right to Complain: Lodge a complaint with a supervisory authority.
Response Time: 30 days (extendable to 60 days for complex requests)
Supervisory Authorities:
- EU: https://edpb.europa.eu/about-edpb/about-edpb/members_en
- UK: Information Commissioner's Office (ico.org.uk)
8.3 CCPA/CPRA Rights (California Residents)
If you are a California resident, you have:
- Right to Know: What personal information we collect, use, and disclose;
- Right to Delete: Request deletion of personal information;
- Right to Opt-Out of Sale: We do NOT sell personal information;
- Right to Non-Discrimination: Equal service regardless of exercising rights;
- Right to Correct: Request correction of inaccurate information;
- Right to Limit Sensitive Data: Limit use of sensitive personal information.
Response Time: 45 days (extendable to 90 days)
Contact:
- Online: medialyst.ai/privacy/ccpa-request
- Email: [email protected]
SECTION 9: INTERNATIONAL DATA TRANSFERS
9.1 Location of Processing
Medialyst is based in Canada. Your information will be transferred to and processed in Canada, the United States, and other countries where our service providers operate.
9.2 Safeguards for EU/UK Users
For transfers from the EU, EEA, or UK, we implement:
- EU-US Data Privacy Framework (where applicable);
- Standard Contractual Clauses (SCCs) approved by the European Commission;
- UK International Data Transfer Agreement (IDTA) for UK transfers;
- Transfer Impact Assessments to evaluate data protection in destination countries;
- Supplementary Measures including encryption and access controls.
9.3 Your Consent
By using the Service, you consent to the transfer of your data to Canada, the United States, and other countries as described. You may withdraw consent by discontinuing use and requesting deletion of your data.
SECTION 10: SECURITY
10.1 Our Security Measures
We implement comprehensive security measures including:
Technical Safeguards:
- Encryption in transit (TLS 1.2+) and at rest (AES-256);
- Secure authentication and access controls;
- Regular security testing and vulnerability assessments;
- Network security (firewalls, intrusion detection);
- Secure software development practices.
Organizational Safeguards:
- Employee security training;
- Background checks for personnel with data access;
- Confidentiality agreements;
- Security policies and procedures;
- Vendor security assessments.
Incident Response:
- 24/7 monitoring of critical systems;
- Documented incident response procedures;
- Breach notification within 72 hours (GDPR requirement);
- User notification for high-risk breaches.
10.2 Limitations
No security measures are perfect. We cannot guarantee absolute security. You are responsible for:
- Maintaining confidential login credentials;
- Using strong, unique passwords;
- Reporting suspected unauthorized access immediately.
SECTION 11: CHILDREN'S PRIVACY
The Service is intended for business use and is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.
If we discover we have collected information from a child, we will delete it promptly. If you believe a child has provided information to us, please contact [email protected].
SECTION 12: THIRD-PARTY LINKS
The Service may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
SECTION 13: DO NOT TRACK SIGNALS
Due to lack of a uniform standard, we do not currently respond to Do Not Track (DNT) browser signals. We do recognize and honor Global Privacy Control (GPC) signals as valid opt-out requests under applicable state privacy laws.
SECTION 14: CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. When we make changes:
- We will update the "Last Updated" date;
- For material changes, we will provide notice via email and/or prominent website notice at least 30 days before the changes take effect;
- Your continued use after changes take effect constitutes acceptance.
Prior versions are available upon request by contacting [email protected].
SECTION 15: CONTACT INFORMATION
Privacy Inquiries
Email: [email protected]
Data Protection Officer
Email: [email protected]
Mailing Address
Solar Flare Ventures Inc. Attn: Privacy Team Kitchener, ON N2G 2L2 Canada
EU Representative
Solar Flare Ventures Inc. Email: [email protected]
UK Representative
Solar Flare Ventures Inc. Email: [email protected]
California Privacy
Email: [email protected]
Journalist Data Requests
Email: [email protected]
SECTION 16: ADDITIONAL JURISDICTION-SPECIFIC DISCLOSURES
16.1 Canada (PIPEDA)
As a Canadian company, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Canadian residents have the right to:
- Access: Request access to your personal information held by us;
- Correction: Request correction of inaccurate or incomplete personal information;
- Withdrawal of Consent: Withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions;
- Complaint: File a complaint with the Office of the Privacy Commissioner of Canada.
Contact: [email protected] with subject "Canadian Privacy Request"
Office of the Privacy Commissioner of Canada: www.priv.gc.ca
16.2 Virginia (VCDPA)
Virginia residents have rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising and sale of personal data. Contact: [email protected] with subject "Virginia Privacy Request."
16.3 Colorado (CPA)
Colorado residents have similar rights. We honor Global Privacy Control (GPC) as a universal opt-out mechanism. Contact: [email protected] with subject "Colorado Privacy Request."
16.4 Connecticut (CTDPA)
Connecticut residents have rights to access, correct, delete, obtain a copy of, and opt out of targeted advertising, sale, and profiling. Contact: [email protected] with subject "Connecticut Privacy Request."
16.5 Other Jurisdictions
We are committed to complying with all applicable privacy laws as they become effective. If you are a resident of a jurisdiction with privacy legislation, you may exercise your rights by contacting [email protected].
BY USING THE MEDIALYST.AI SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.