Privacy Policy

Canon AI — Operated by NeverRest Technologies Effective Date: April 4, 2026 Last Updated: April 4, 2026

The Short Version

You send us tasks. We process your business data to complete those tasks. We do not sell your data. We do not store your payment information. We use trusted sub-processors (OpenAI, Anthropic, Google, Stripe, Vercel) to operate the Service. Your data stays isolated from other customers at all times.

1. Who We Are

NeverRest Technologies ("we," "us," "our") operates Canon, an AI-powered business operations platform accessed via messaging (iMessage, Telegram, Discord). This Privacy Policy explains what data we collect, why, and what we do with it.

Contact: support@trykanon.ai

2. What Data We Collect

Data You Provide

  • Account information: Name, email address, phone number, business name
  • Task data: The content of messages you send to Canon, including any business data, files, images, or documents you share for task execution
  • Communication preferences: Which messaging platforms you use, notification settings

Data We Collect Automatically

  • Usage data: Task types, completion times, feature usage patterns
  • Device and connection data: IP address, device type, operating system, messaging platform version
  • Log data: Timestamps, error reports, service performance metrics

Data We Do NOT Collect

  • Payment card numbers or bank details. All payment processing is handled by Stripe. We receive only transaction confirmation (amount, date, subscription status). We never see or store your full card number, CVV, or bank account details.
  • Biometric data
  • Location data (beyond what your IP address reveals)

3. How We Use Your Data

We use your data for these purposes only:

| Purpose | Data Used | Legal Basis | |---------|-----------|-------------| | Execute your tasks | Task data, files, business info | Contract performance | | Maintain your account | Name, email, phone | Contract performance | | Process payments | Transaction data (via Stripe) | Contract performance | | Improve the Service | Anonymized usage patterns | Legitimate interest | | Communicate with you | Contact info, messaging platform | Contract performance | | Prevent fraud and abuse | Account activity, IP address | Legitimate interest | | Comply with legal obligations | As required by law | Legal obligation |

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties for their marketing purposes.

4. How Your Data Is Processed by AI

When you send a task to Canon, your data is processed by AI models to execute that task. This means:

  • Your task content is sent to AI model providers (OpenAI, Anthropic, Google) for processing
  • These providers process your data according to their enterprise API terms, which prohibit using your data to train their models
  • AI processing is necessary to deliver the Service — it is the core function of what Canon does

We select AI providers that offer enterprise-grade data handling agreements. Your data is transmitted via encrypted connections and is not retained by these providers beyond the processing window.

5. Sub-Processors

We use the following third-party services to operate Canon:

| Sub-Processor | Purpose | Data Accessed | |---------------|---------|---------------| | OpenAI | AI task processing | Task content | | Anthropic | AI task processing | Task content | | Google | AI task processing | Task content | | Stripe | Payment processing | Payment method, billing address | | Vercel | Web hosting and deployment | Usage data, IP address | | Supabase | Database and authentication | Account data, task records | | Apple (iMessage) | Messaging delivery | Message content | | Telegram | Messaging delivery | Message content | | Discord | Messaging delivery | Message content |

Each sub-processor is bound by data processing agreements that limit how they can use your data.

6. Data Isolation

Your business data is isolated from every other customer. Canon maintains strict data boundaries:

  • Your tasks, deliverables, and business information are never accessible to other customers
  • Our AI agents operate within isolated execution environments per customer
  • No customer data is used to improve service for other customers

7. Data Retention

  • Active accounts: We retain your data for the duration of your subscription plus 30 days after cancellation.
  • After termination: Your task data and deliverables are permanently deleted 30 days after account closure unless you request an export.
  • Anonymized analytics: Aggregated, non-identifying usage data may be retained indefinitely to improve the Service.
  • Legal requirements: We may retain certain data longer if required by law.

8. Data Security

We implement industry-standard security measures including:

  • Encryption in transit (TLS 1.3) for all data transmission
  • Encryption at rest for stored data
  • Access controls limiting employee access to customer data
  • Regular security audits of our infrastructure
  • Incident response procedures for potential data breaches

No system is 100% secure. We cannot guarantee absolute security, but we take reasonable measures to protect your data.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the data we hold about you
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal retention requirements)
  • Export: Request your data in a portable, machine-readable format
  • Objection: Object to certain processing activities

To exercise any of these rights, contact support@trykanon.ai. We will respond within 30 days.

10. Children's Privacy

Canon is not intended for use by anyone under 18. We do not knowingly collect data from minors. If we discover that a minor has provided us with personal data, we will delete it promptly.

11. International Data Transfers

Canon is operated from the United States. If you access the Service from outside the US, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. California Privacy Rights (CCPA)

If you are a California resident:

  • We do not sell your personal information
  • You have the right to know what data we collect and how it is used
  • You have the right to request deletion of your data
  • You have the right to non-discrimination for exercising your privacy rights
  • To make a request, contact support@trykanon.ai

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the messaging platform you use to access Canon at least 30 days before the changes take effect.

14. Contact

NeverRest Technologies Email: support@trykanon.ai Website: trykanon.ai Jurisdiction: Texas, USA

This policy is written in plain language because your privacy is too important to hide behind legal jargon. If anything is unclear, ask us.

© 2026 Canon AI. All rights reserved.