Privacy Policy

Last updated October 1, 2026

BYOB (getbyob.com, "BYOB", "we") is based in Montreal, Quebec, Canada. BYOB is a platform where business owners ("owners") run a business with an AI CEO and AI agents. This policy explains what personal information we handle, why, and your choices. Questions or requests: hello@getbyob.com. Our person in charge of the protection of personal information can be reached at the same address.

Information we collect

• Account information from owners: name, email address, mobile number, and sign-in records.
• Business information owners provide or agents create: the business idea and plan, website content, documents, tasks, settings and spending limits.
• Contacts of the business: names, business email addresses, business phone numbers and notes about prospects and customers, collected from public business sources or from people who contact the business through its website, email or phone.
• Communications sent and received for the business: emails, text messages, call transcripts, call recordings and voicemails.
• Payment information: card details are entered on Stripe's page and never reach BYOB. We keep only the card brand, last four digits and expiry for display.
• Connected accounts: when an owner connects an advertising or business account (for example Meta, Google or TikTok), we receive the access the owner grants, such as campaign settings, ad performance and leads from lead forms, solely to run that owner's campaigns.
• Usage and technical data: website visits to business sites (page and referrer), and a session cookie to keep owners signed in. We do not use advertising cookies on BYOB.

How we use it

• To provide the service: run the owner's business tasks, send the owner's emails and calls, publish their site and report results.
• To keep it safe: prevent abuse, enforce spending limits and protect accounts.
• To bill and support owners.

We do not sell personal information. We do not use data from connected advertising or Google accounts for any purpose other than providing the features the owner asked for, and we do not use it to train AI models. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We share information only with providers that help us run BYOB, under contract and only as needed: AI model providers (such as Anthropic) to generate the agents' work; AgentMail for email; Callbay (call4.me) and Twilio for calls and texts; Stripe for card setup; Cloudflare for domains and DNS; Railway for hosting and databases; and the advertising platforms an owner connects. Some providers process data outside Canada, including in the United States.

Owners and their contacts

Each owner decides what their business does with its contacts. BYOB processes those contacts on the owner's behalf. Outreach includes an opt-out, and anyone who asks not to be contacted is marked "do not contact".

Retention

We keep account and business data while the account is open. When an owner deletes their account or asks us to, we delete it within 30 days, except records we must keep by law, such as billing records.

Your rights

You can ask to access, correct or delete your personal information, or withdraw consent, by emailing hello@getbyob.com. If you were contacted by a business that uses BYOB, write to us and we will help, or contact that business directly. You can also complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

Security

Each owner's data is kept separate and is enforced by the database itself. Data is encrypted in transit. Access to production systems is restricted.

Children

BYOB is for adults running businesses. We do not knowingly collect information from children.

Changes

We will post changes here and update the date above. For significant changes we will tell owners by email.