Privacy Policy

What we collect

You give us: name, email, company, and meeting details when you book via Cal.com or write to us. Account email, workspace content, and payment details when you sign up for AI Suite (payments go through Stripe).

We collect automatically: pages viewed, device and browser data, approximate location from IP, and a visitor id for the marketing assistant (spj_native_assistant_vid). If you accept analytics, we also load PostHog (including optional session replay with input masking), Google Analytics, and RB2B.

Workspace files, prompts, and agent transcripts live in your AI Suite workspace so the product can run. We do not sell personal data, and we do not use your workspace content to train models.

How we use it

• Run the marketing site, assistant, and AI Suite product.
• Respond to bookings, email, and support.
• Meter credits, bill subscriptions, and prevent abuse.
• Improve the product when you have accepted analytics.

Processors

We use these providers to run the site and AI Suite. They process personal information only to provide the service. Processing may happen in Canada, the United States, or another region that provider documents for our account.

• Railway hosts the AI Suite application at suite.sundaypyjamas.com.
• Vercel AI Gateway routes SundayPyjamas Cloud model calls. Prompts and outputs pass through the gateway. We read a generation receipt back from the gateway for billing: an id, token counts, and cost.
• Amazon Web Services runs the AWS-native path: Amazon Bedrock, Lambda, S3, S3 Vectors, and AgentCore. That path defaults to the United States (us-east-1) unless the deployment sets another region. A storage bucket you connect stays in your own AWS account.
• Supabase stores AI Suite accounts, sessions, and workspace records.
• Resend sends invite and notification email.
• Stripe processes payments on the product.
• Cal.com handles discovery-call bookings.
• PostHog, Google Analytics, and RB2B load only when analytics are accepted.

The model provider selected for a call also processes the prompt and the output. A Canada inference pin keeps Google and Vertex calls in Canada (northamerica-northeast1). For Anthropic and Claude, a Canada pin is sent to the United States until Anthropic offers a Canada region.

Your rights

You can ask to access, correct, or delete personal data we hold, or withdraw analytics consent. Email contact@sundaypyjamas.com — we respond within 30 days. If you have an AI Suite account, you can also manage workspace data from product settings. We follow PIPEDA for Canadian residents, including Quebec's Law 25 consent and transparency rules, and we honour similar access and deletion requests from elsewhere.

Retention

• Marketing leads and booking records: 24 months after our last contact, then deleted or anonymized.
• AI Suite account and workspace data: for the life of the account, deleted within 30 days of a deletion request.
• Billing and tax records: 7 years, as Canadian tax law requires.
• Analytics events: per each vendor's retention settings — ask us and we'll tell you the current values.

Children

Our services are not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.

Security incidents

If a breach of our safeguards creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner of Canada as PIPEDA requires, and take steps to reduce the harm.

Changes to this policy

We may update this policy; the date at the top always shows the current version. If we change how cookies or analytics work in a material way, we will ask for fresh consent through the cookie banner.