Privacy Policy

Entity: Didaktos (Vancouver, British Columbia, Canada)
Website: didaktos.ca

​

1. Purpose & Scope
Didaktos ("we", "us", or "our") is an AI Studio & Learning Partner headquartered in Vancouver, British Columbia. We provide professional workflow audits, bespoke AI agent integrations, asynchronous digital courses, downloadable execution protocols (Didaktos ProShop), and continuous advisory retainer services.

This Privacy Policy governs the collection, use, disclosure, and safeguarding of personal and operational information across didaktos.ca, our Thinkific learning portal, and all associated digital touchpoints. We operate in strict compliance with the British Columbia Personal Information Protection Act (BC PIPA), the federal Personal Information Protection and Electronic Documents Act (PIPEDA), and emerging Canadian algorithmic transparency and data standards under Bill C-36.

2. Information We Collect
We collect only the personal and operational data necessary to deliver our educational and consulting services:
a) Contact & Account Data: First and last name, business email address, professional title, and organization name.
b) Diagnostic & Operational Intake Data: Workstream descriptions, operational bottlenecks, software infrastructure details (e.g., Google Workspace, Microsoft 365), and task delegation goals submitted via audit forms.
c) Educational & Platform Data: Course progress, assessment completion, and workshop participation tracked via our Thinkific LMS environment.
d) Transactional Records: Billing names, business addresses, and transaction identifiers. (Note: All payment card details are tokenized and processed directly by PCI-DSS Level 1 providers; Didaktos never stores or views raw credit card information).

3. How We Use Information
We utilize collected information strictly for:
- Diagnostic Processing: Analyzing operational workflows to generate executive diagnostic reports and roadmaps (The Architect’s Method™ and The Educational Blueprint™).
- Educational Delivery: Administering course access, prerequisite verification, and digital credentialing on Thinkific.
- Technical Integrations: Custom-configuring native AI Gems, single-agent workflows, and protocols within authorized client tenants.
- Administrative Management: Processing payments, issuing CRA-compliant tax invoices via QuickBooks Online, and scheduling consultations.
- Opt-In Communications: Distributing our community newsletter, research insights, and event updates solely where affirmative, explicit consent has been provided.

4. AI Governance, Data Hygiene & Model Ingestion Boundaries
Data integrity and corporate confidentiality form the core of our methodology:
a) Zero Public AI Training: Diagnostic intake data, corporate workflows, and client operational materials are never ingested into, shared with, or used to train public foundation models (including Google Gemini, Anthropic Claude, or OpenAI models).
b) Native Tenant Architecture: Bespoke agents and workflow automations are engineered directly within the client’s own verified corporate tenant (e.g., Google Workspace). Didaktos does not host, mirror, or retain client proprietary operating data on external third-party shadow servers.
c) Algorithmic Transparency: We employ custom internal AI agents for preliminary administrative intake triage and routine bookkeeping under direct human supervision. In alignment with Bill C-36 governance principles, all strategic deliverables, diagnostic analyses, and bespoke blueprints undergo direct verification and oversight by our Lead Learning Architect (Human-in-the-Loop).

5. Disclosure & Trusted Subprocessors
We do not sell, rent, lease, or monetize personal or business data under any circumstances. Data is shared exclusively with verified infrastructure providers strictly required to operate our services:
- Cloud & Productivity Infrastructure: Google Cloud / Google Workspace (Enterprise-grade security and storage).
- Learning Management: Thinkific Labs Inc. (Asynchronous course delivery and student portals).
- Web & Client Management: Wix.com Ltd. (Website hosting and intake form processing).
- Financial & Accounting Systems: Intuit QuickBooks Online (CRA-compliant bookkeeping) and Stripe / PayPal (PCI-DSS Level 1 payment processing).
- Legal & Regulatory Compliance: Disclosures required by law, subpoena, or competent regulatory authorities pursuant to Canadian federal or provincial statutes.

6. Data Security & Storage
We maintain physical, organizational, and technological safeguards proportional to the sensitivity of the information collected. All digital communications are encrypted in transit (TLS/SSL) and at rest. Access to diagnostic records and client account data is restricted strictly to authorized personnel authenticated through multi-factor authentication (MFA).

7. Data Retention & Deletion
We retain operational and diagnostic intake data only for as long as necessary to fulfill the consulting engagement, provide ongoing retainer advisory, or satisfy statutory Canadian tax and legal record-keeping requirements (typically six years for financial records under CRA rules). Once retention is no longer required, operational data is securely purged or anonymized.

8. Your Rights Under Canadian Privacy Law (BC PIPA & PIPEDA)
Subject to verified identity confirmation, you have the right to:
- Request access to any personal information we hold regarding your profile.
- Request corrections or updates to inaccurate or incomplete records.
- Withdraw consent for marketing communications or optional processing activities at any time.
- Request the secure deletion or anonymization of your diagnostic and profile data, subject to mandatory legal or accounting retention obligations.