Privacy Policy

Effective as of June 26, 2025

This Privacy Policy explains how AdChat Media Technology Inc. (“we,” “us,” “our”) collects, uses, and protects your information when you visit our website or use our services under the MixBright brand.

1. Who We Are

Legal Business Name: AdChat Media Technology Inc.
Jurisdiction: Ontario, Canada
Mailing Address: 1 King Street W, Suite 4800 – 169, Toronto, Ontario, Canada
Contact: support@mixbright.com

2. Information We Collect

We collect the following types of personal and usage information:

A. Information You Provide Directly

  • Waitlist Sign-up: Email address
  • Contact Form Submissions: First name, last name, email address, and message

B. Information Collected Automatically

When you visit our site, we use tools such as Google Analytics 4 (GA4) to collect standard usage data:

  • Browser type and version
  • Device type and operating system
  • Referring website
  • Pages visited and time spent
  • City and country (approximate location)
  • Click and interaction data
  • Other standard GA4 tracking data

Note: GA4 does not log or store IP addresses.

3. How We Use Your Information

We use the information we collect for the following purposes:

A. To Provide and Improve Our Services

  • To operate and maintain our website and waitlist functionality
  • To respond to inquiries submitted through the contact form
  • To analyze site usage and performance using Google Analytics 4

B. To Communicate With You

  • To follow up on your waitlist registration or contact request
  • To provide updates related to product availability or other relevant information

C. For Legal and Compliance Purposes

  • To comply with applicable laws and regulatory obligations
  • To enforce our Terms of Service and protect our legal rights

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Legal Bases for Processing Your Information

We rely on the following legal bases to collect and process your personal information, depending on your location:

For users in the European Economic Area (EEA), United Kingdom, and Switzerland (under GDPR):

  • Consent – You give clear consent for us to process your personal data for specific purposes (e.g. joining the waitlist, submitting a contact form).
  • Legitimate Interests – We process data to improve and protect our platform, provided those interests are not overridden by your rights.
  • Legal Obligation – We may process data to comply with legal requirements or requests from regulators.

For users in Canada (under PIPEDA and CASL):

  • Implied Consent – When you voluntarily submit personal information (e.g. by joining the waitlist or submitting a contact form), we assume your consent for related purposes.
  • We comply with Canada’s Anti-Spam Legislation (CASL) and only send commercial messages with appropriate consent.

For users in California (under CCPA/CPRA):

  • We do not sell or share your personal information for cross-context behavioral advertising.
  • You may request access to, or deletion of, your personal data at any time (see Section 8 below).

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including to:

  • Maintain and improve our services
  • Communicate with you (e.g. product updates or waitlist confirmation)
  • Comply with legal, regulatory, or contractual obligations

Specifically:

  • Email addresses collected through waitlist or contact forms are retained indefinitely, unless you request deletion.
  • Analytics data (e.g. GA4 event data) is retained according to the default or configured settings of each analytics provider, such as Google Analytics 4.
  • We periodically review our data retention practices to ensure they align with legal and business requirements.

If you wish to delete your personal data, you may contact us at privacy@mixbright.com (see Section 8).

6. How We Protect Your Information

We take reasonable administrative, technical, and physical safeguards to protect the personal data we collect and process. These measures are designed to prevent unauthorized access, loss, misuse, alteration, or disclosure of your data.

Examples include:

  • Data encryption during transmission (HTTPS/SSL)
  • Secure infrastructure: Our application is hosted on Heroku (a Salesforce company), and our website is hosted on Flywheel (a WP Engine company), both of which maintain strict security and privacy protocols.
  • Access control: Access to personal data is limited to authorized personnel only.
  • Routine security reviews to ensure ongoing protection of your data

Despite our efforts, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we follow industry best practices to reduce risk.

7. Your Rights and Choices

Depending on your location, you may have certain rights under applicable privacy laws, including but not limited to:

For Residents of the European Union / United Kingdom (GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete personal data
  • Delete your personal data (“right to be forgotten”)
  • Restrict or object to how we process your data
  • Data portability, allowing you to obtain and reuse your data across services
  • Withdraw consent at any time where consent is the legal basis for processing

For Residents of Canada (PIPEDA & CASL)

You have the right to:

  • Access your personal information
  • Challenge the accuracy and completeness of your data
  • Withdraw consent for the use of your information
  • Unsubscribe from marketing communications at any time

For Residents of California (CCPA / CPRA)

You have the right to:

  • Know what personal data is being collected and how it’s used
  • Request access to your data
  • Request deletion of your data
  • Opt-out of the sale of personal data (we do not sell your data)
  • Request correction of inaccurate data
  • Limit use and disclosure of sensitive personal information

To exercise any of these rights, please email us at privacy@mixbright.com. We may request verification of your identity before fulfilling any requests.

8. International Data Transfers

MixBright is operated by AdChat Media Technology Inc., based in Canada. However, our services are accessible globally and our infrastructure relies on third-party service providers that may store or process data in the United States, Canada, and other jurisdictions.

This means your personal data may be transferred to and processed in countries that may not have the same data protection laws as your country of residence. When we transfer personal data internationally, we take appropriate measures to ensure it is protected, including:

  • Relying on standard contractual clauses approved by the European Commission (for EU/EEA residents)
  • Processing only through vendors with established data protection and privacy frameworks (e.g., Google, Salesforce/Heroku)
  • Ensuring compliance with applicable laws like the GDPR, PIPEDA, and CCPA/CPRA

By using MixBright, you consent to the transfer, storage, and processing of your data in countries outside your jurisdiction.

9. Data Security

We take data security seriously and implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, or destruction.

Security measures include but are not limited to:

  • HTTPS encryption for all data transmitted between users and our servers
  • Secure hosting via trusted providers (e.g., Flywheel for our website and Heroku for our application infrastructure)
  • Restricted access controls and authentication protocols for internal data access
  • Routine monitoring of systems for vulnerabilities and potential threats

While we take these steps to protect your data, no system is completely secure. We cannot guarantee absolute security, and you use MixBright at your own risk. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable laws and regulations.

10. Data Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specifically:

  • Waitlist and contact form data (name, email, message) is retained indefinitely to manage future communications, unless you request deletion.
  • Analytics data (such as page views, click events, browser and location data collected via Google Analytics 4) is retained according to Google’s default retention settings, unless otherwise configured.
  • We do not currently use automated decision-making or profiling that would require specific retention disclosures under GDPR or other laws.

You can request deletion of your personal data at any time by contacting us at privacy@mixbright.com. If your data is no longer required for the stated purpose and no legal obligation requires its retention, we will delete it upon request.

11. Your Rights

Depending on your location and applicable data protection laws (including the General Data Protection Regulation (GDPR), Personal Information Protection and Electronic Documents Act (PIPEDA), and California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA)), you may have the following rights:

If you are in the European Union (GDPR):

You have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”).
  • Restrict or object to certain processing activities.
  • Port your data to another service provider.
  • Withdraw consent at any time for data processing based on consent.
  • Lodge a complaint with your local data protection authority.

If you are in Canada (PIPEDA):

You have the right to:

  • Access and correct your personal data.
  • Be informed about how your data is collected, used, and disclosed.
  • Challenge compliance by contacting our privacy officer at privacy@mixbright.com.

If you are in California (CCPA/CPRA):

You have the right to:

  • Know what personal data we collect, use, and disclose.
  • Access a copy of your personal information.
  • Request deletion of your personal information (with exceptions).
  • Correct inaccurate personal information.
  • Opt-out of the sale or sharing of personal data (Note: we do not sell or share personal data).
  • Limit use of sensitive personal information, if applicable.

To exercise any of these rights, please email us at privacy@mixbright.com. We may need to verify your identity before processing certain requests.

12. International Data Transfers

MixBright is operated from Canada, with infrastructure and service providers in the United States and potentially other countries. If you are located outside of Canada, please be aware that your information may be transferred to, stored, and processed in jurisdictions that may not have equivalent data protection laws to your home country.

We take appropriate steps to ensure your personal information is handled securely and in accordance with this Privacy Policy. These steps may include:

  • Data processing agreements with service providers that include Standard Contractual Clauses (SCCs) approved by the European Commission (for GDPR compliance).
  • Ensuring service providers provide adequate levels of data protection based on their certifications or legal frameworks (e.g., EU-U.S. Data Privacy Framework, if applicable).

By using our services or submitting your personal information, you consent to the transfer of your information to countries outside your own.

13. Data Retention

We retain personal information for as long as it is necessary to fulfill the purposes for which it was collected, including:

  • Providing services (such as maintaining your waitlist status or responding to inquiries)
  • Meeting legal, accounting, or reporting obligations
  • Improving and analyzing our platform performance and user engagement

Specifically:

  • Email addresses submitted via the waitlist or contact form may be retained indefinitely, unless you request deletion.
  • Analytics data (collected via Google Analytics and similar tools) is stored according to the retention settings within those platforms, typically aggregated and anonymized after a defined period.

We periodically review the data we hold and assess whether it is still necessary to retain it. If not, we securely delete or anonymize the data.

You may request deletion of your personal data at any time (see Section 9: “Your Rights”).

14. Children’s Privacy

Our website and services are not directed to, and we do not knowingly collect personal information from, children under the age of 16 (or the age of digital consent in your jurisdiction).

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at privacy@mixbright.com. We will take steps to remove that information from our records promptly.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we do, we will revise the “Last updated” date at the bottom of this page.

If the changes are material, we will notify you by posting a notice on our website or, if you have provided your email address, by contacting you directly.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

16. Contact Us

If you have any questions, concerns, or complaints about this Privacy Policy or our data practices, you may contact us at:

Legal Name: AdChat Media Technology Inc.
Business Name: MixBright
Jurisdiction: Ontario, Canada
Mailing Address: Toronto, Ontario, Canada
Email: privacy@mixbright.com

We are committed to resolving any concerns you may have and will respond promptly to all inquiries.