Privacy, in plain words

Who we are

Vif Labs takes AI-built apps to production, builds custom software, and integrates AI into products and operations, for founders and companies in Canada and the United States. Vif Labs is a business name of Coral Moon Ventures Inc., a company incorporated in Ontario, Canada. When this policy says “we” or “us”, it means that company. Our sister studio, Vif Studios, has its own privacy policy, and so does Coral Moon Ventures.

We follow Canada’s federal privacy law for businesses, the Personal Information Protection and Electronic Documents Act (PIPEDA). Our Privacy Officer is accountable for how we handle personal information and can be reached at privacy@viflabs.com.

What we collect

What you send us, through the contact form or by email:

• your name and email address
• your company or product name, if you give it
• a link to your app or repository, if you give one
• anything you tell us about your app, your idea or the job you want AI to do

If you become a client, the contact and billing details we need to do the work and invoice it.

What every website needs to work. Our host briefly processes your IP address to deliver pages and to stop the contact form being flooded with spam. We don’t use it to identify you, and we run no analytics.

Your app, code and data

To review or work on an app, or to build an AI feature, we may need access to its code, its hosting, its accounts and the data it holds. That data can include information about your own customers. When it does, we handle it on your behalf and on your instructions, as a service provider: we look only at what the work needs, we don’t copy customer data out of your systems unless a task requires it, and we never use it for anything else.

You decide what access to give us, and you can remove it at any time. When the work ends, we hand back or remove any access you gave us and delete any copies of your code or data we no longer need. Where your app holds personal information, you remain responsible for it to your own customers; we can help you meet those obligations. If we discover that your customers’ data has been exposed, whether through an existing flaw we find or anything on our side, we tell you promptly so you can meet your own duty to notify.

How we use it

To reply to you, to review your app, to prepare a quote, and to do the work if you become a client. We don’t sell or rent your information, and we don’t add you to a mailing list. If we ever start a newsletter, you will have to tick a box to join it.

AI and your information

We use third-party AI services in our work: to help us read, write, test and review code, to help us build AI features and models, and to help us draft quotes and replies. When AI helps with your app, it may process the parts of your code and app that the task needs. When we build an AI feature or model for you, it may process the data you give us for that purpose. When AI helps us reply to you, it may also process your message and contact details.

We use these services only to do the work you asked for, never to sell or profile you. A person reviews every change before it reaches you, and reads every reply before it is sent. If you would rather your customers’ data never went to an AI service, tell us, and we will use test or masked data for those tasks.

Who receives it

These service providers handle information on our behalf, only for the purposes above:

• Cloudflare hosts this website and runs the contact form.
• Resend delivers contact form messages to our inbox.
• Google Workspace is where our email and working files are kept.
• Anthropic (Claude) is the AI service that helps us with code and correspondence, as described above. Our account is set so that what we send is not used to train its models.
• The AI providers your project uses, when we build an AI feature or model for you. We name them in the scope, and the accounts are yours.
• The code host and cloud accounts you choose, when you give us access to your app. Those stay yours.

We may also share information where the law requires it, for example to answer a valid court order.

Information outside Canada

Some of these providers store or process information outside Canada, including in the United States. While it is there, it may be accessible to courts and authorities under that country’s laws. We choose providers that protect information to a standard comparable to ours, and their terms with us limit what they may do with it.

How long we keep it

• Enquiries that don’t lead to work are deleted two years after our last contact.
• If you have a free review and don’t go ahead, we remove the access you gave us and delete our copies of your code when you tell us.
• If you become a client, project files are deleted two years after the work ends, and any access you gave us is removed when the work ends.
• Any personal information about your own customers that we had to copy for a task is deleted as soon as the work ends.

Invoices and billing records are kept for six years, because Canadian tax law requires it. We keep only what those records need.

How we protect it

This site only works over an encrypted connection, the contact form checks for spam, and access to your information and your app is limited to the person doing your work. No method is perfect. If a breach ever put your information at real risk of significant harm, we would tell you as soon as we could, report it to the Office of the Privacy Commissioner of Canada, and keep a record of it, as the law requires.

Cookies and tracking

None. This site sets no cookies and runs no analytics or advertising trackers.

Your rights

You can ask to see the personal information we hold about you, ask us to correct it or delete it, or withdraw your consent to our using it, subject to legal and contractual limits (we can’t delete invoices the tax law says we must keep, for example). Write to privacy@viflabs.com and we will reply within 30 days. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

Changes to this policy

If we change how we handle personal information, we will update this page and the date at the top. If a change is significant, we will tell clients directly.

Contact our Privacy Officer

Coral Moon Ventures Inc., operating as Vif Labs, Kitchener-Waterloo, Ontario, Canada. Email privacy@viflabs.com.