Last updated: August 7, 2026 · Effective for all Northline accounts and website visitors
Northline Technologies Inc. ("Northline," "we," "us," or "our") provides an AI-powered lead-qualification and customer messaging platform for Canadian businesses — including realtors, property managers, contractors, and other small businesses ("Business Customers") — and processes messages from the customers, leads, and prospective tenants or buyers who message those businesses through our platform ("Leads" or "End Users").
This policy explains how we collect, use, disclose, and protect personal information in the course of operating Northline, in compliance with the Personal Information Protection and Electronic Documents Act ("PIPEDA"), Quebec's Act respecting the protection of personal information in the private sector ("Law 25"), and Canada's Anti-Spam Legislation ("CASL").
Privacy Officer: Northline has designated Kayvon Seyedi, Founder, as our Privacy Officer, responsible for our compliance with this policy and applicable privacy law. You can reach them using the contact details in Section 18.
What we collect depends on how you interact with Northline:
| If you are a... | We may collect |
|---|---|
| Business Customer (you sign up for an account) | Full name, business name, email address, phone number, a securely hashed password, plan/billing selection, and — once payment is added — billing information processed by our payment provider (see Section 7). |
| Lead / End User (you message a business through Northline) | Name and contact details you provide, the content of your conversation, and information our AI extracts from that conversation to help the business respond to you (for example: what you're looking for, budget range, timeline, or urgency). |
| Any website visitor | Technical information such as IP address, browser type, and pages visited, collected through standard web server logs and any analytics tools we use (see Section 13). |
| Job applicant (Careers page) | Name, email, phone, area of interest, and anything you choose to share in your application. |
We do not knowingly collect sensitive categories of personal information (such as health information, government identification numbers, or financial account numbers) except where a Business Customer independently chooses to discuss such details within a conversation — we ask both Business Customers and Leads to avoid sharing highly sensitive information through the platform where possible.
We collect and use personal information only for purposes we identify at or before the time of collection, including:
We do not sell personal information, and we do not use Lead conversation data to train AI models beyond what's needed to generate that individual conversation's response.
By creating a Business Customer account, you consent to the collection, use, and disclosure of personal information as described in this policy. Where a Lead messages a Business Customer through Northline, that Lead's continued participation in the conversation constitutes consent to our processing of their message content for the purpose of that conversation, consistent with PIPEDA's consent framework.
You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us using the details in Section 18. Withdrawing consent may limit or prevent our ability to provide the service to you.
Northline's core feature is a conversational AI that responds to Leads on behalf of a Business Customer, asks qualifying questions, and extracts structured details from the conversation (such as need, budget, timeline, or urgency) to help the Business Customer follow up efficiently.
The AI is configured by each Business Customer to ask about topics relevant to their business. Business Customers are responsible for configuring their AI setup in a way that does not solicit categories of information beyond what's reasonably needed to qualify a lead.
Northline's account and conversation data is stored on infrastructure operated with Canadian data residency in mind. However, as described in Section 6, conversation content is transmitted to Anthropic for AI processing, and may be processed on servers located in the United States or other jurisdictions.
Anthropic's Data Processing Addendum is automatically incorporated into the commercial terms covering our use of their API. Under that agreement: Anthropic does not use the content of our API requests to train its models; operational logs are automatically deleted after 7 days by default; and Standard Contractual Clauses govern the international transfer of any personal data processed. Amazon Web Services (AWS) is Anthropic's primary sub-processor for this infrastructure.
If you have concerns about cross-border processing of your information, contact us using Section 18 — Business Customers can also discuss configuring their AI Setup to minimize sensitive details requested from Leads.
We keep personal information only as long as reasonably necessary to fulfill the purposes described in this policy, or as required by law:
You may request earlier deletion of your information — see Section 11.
We maintain physical, technical, and organizational safeguards appropriate to the sensitivity of the information, including:
No method of transmission or storage is 100% secure. If a breach occurs that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law (see Section 16).
Subject to limited exceptions, you have the right to:
To exercise any of these rights, contact us using Section 18. We will respond within the timeframe required by applicable law.
If you are a resident of Quebec, Law 25 provides additional protections, including:
Northline's platform sends text messages and emails on behalf of Business Customers to Leads who have engaged in conversation with that business. Business Customers are responsible for ensuring their own use of the platform complies with CASL, including obtaining consent before sending commercial electronic messages and honouring unsubscribe requests.
Any marketing communications sent by Northline itself (about our own product) include a working unsubscribe mechanism, and we honour opt-out requests promptly.
Northline is intended for business use and is not directed at children. We do not knowingly collect personal information from individuals under the age of 13. If we learn we have inadvertently collected such information, we will delete it promptly.
If we become aware of a breach of security safeguards involving personal information that creates a real risk of significant harm, we will notify affected individuals and report to the Office of the Privacy Commissioner of Canada, as required under PIPEDA, and will maintain records of all such breaches as required by law.
We may update this policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date, and where changes are material, we will provide additional notice (such as an email to Business Customers).
Questions, concerns, or requests regarding this policy or your personal information can be directed to our Privacy Officer:
If you're not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, for Quebec residents, the Commission d'accès à l'information du Québec.