Privacy Policy

AscendCRM is a trade name of Ascentsai Inc. (“Ascentsai”, “AscendCRM”, “we”), a corporation registered in Alberta, Canada. This policy explains what we collect, why, and the choices you have. It applies to ascendcrm.ca and app.ascendcrm.ca.

We handle personal information in line with Canada’s federal privacy law (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). You have the right to access, correct, or delete your personal information, and to withdraw consent, subject to legal and contractual limits. To exercise these rights, email privacy@ascendcrm.ca, we respond within 30 days.

Account details you provide (name, email, business name), content you bring into the platform (customers, messages, invoices, documents), and technical data such as device and usage logs needed to run and secure the service.

When your customers book a time, fill in a form, accept a quote, or use your client portal, they share information (like a name, email, or phone number) with YOUR business. For that information, your business is the organization responsible under privacy law, and we process it on your behalf, under your instructions, to run those features. We never use it for our own purposes and never sell it.

To operate the product, connect your channels, generate AI suggestions you approve, provide support, and keep accounts secure. We do not sell personal information, and we do not use your business’s data to train AI models.

Your records, customers, invoices, documents, and the AI processing of them, are stored and processed in Canada, in Canadian regions of Amazon Web Services (AWS). Data is encrypted in transit and at rest, and every sign-in is protected with two-factor authentication.

Two situations involve service providers that may process data outside Canada, and only ever at your choice: (1) if you connect Stripe to take payments, your customers enter card details directly on Stripe’s secure payment pages, card numbers never touch our servers, and Stripe processes payments under its own terms and safeguards; (2) if you connect your own outside tools (for example Slack, Microsoft Teams, Google, Microsoft 365, or your email provider), the specific content you choose to send through them is handled by those providers under their terms. Disconnect any of them at any time.

Every record is scoped to your business (tenant) and enforced at the database layer with row-level security. One business can never see another’s data. Platform support access is time-limited and is recorded in your own activity log, there is no silent access.

At any time, the workspace owner can download everything in the workspace as one archive from Settings (one spreadsheet file per kind of record, plus a manifest). Uploaded files are downloaded per document. Nothing is held back and there is no fee.

We keep your data for as long as your workspace is open. When the owner closes the workspace from Settings, it becomes read-only for 30 days: during that time you can still export it, and you can reopen it with one click. On day 30, every record and file in the workspace is permanently deleted, and the only thing we keep is a receipt showing that the workspace existed and was deleted on that date. Our nightly backups are kept for 30 days, so a deleted workspace is gone from every copy we hold within 60 days of closing. Records the law requires YOUR business to keep (for example tax and payroll records) are yours to export before you close; we do not keep them for you.

We keep a record of every breach of security safeguards, whether or not it turns out to matter, as PIPEDA requires. If a breach creates a real risk of significant harm, we notify the affected businesses first (so they can decide what to tell their own customers), then the Privacy Commissioner of Canada and the Alberta Commissioner, as soon as feasible and within 72 hours of deciding there is such a risk. We tell you plainly what happened, what was involved, and what we are doing about it, and we follow a written incident-response procedure rather than improvising.

You can export your data, close your workspace, and disconnect any channel or integration at any time, all from Settings, without asking us. To access, correct or delete a specific piece of personal information (yours, or a request you have received from one of your customers), email privacy@ascendcrm.ca and we respond within 30 days.

AscendCRM is a general business tool. If your business handles health information or other highly sensitive categories, extra legal duties may apply to you (for example Alberta’s Health Information Act), make sure your use of any software, including ours, fits those obligations.

Questions about privacy, or a request about your information? Email privacy@ascendcrm.ca. Ascentsai Inc., Calgary, Alberta, Canada.