Privacy policy

CoDreams Inc. is a Canadian federal corporation registered to do business in Ontario (business number 782291165). We do business as CoDreams; experiences.agency is an older web address of ours. In this policy, "we" and "us" mean CoDreams Inc.

We have named a privacy officer who is accountable for how we handle personal information. You can reach them at hello@codreams.ca.

It covers this website (codreams.ca and experiences.agency), how we find and talk to prospective customers, and the service we provide to the restaurants that subscribe to us.

If you are a guest of a restaurant (you ordered, booked a table or chatted on a restaurant's website that we run), the restaurant is the business you are dealing with and its own privacy page applies. We handle that information as the restaurant's service provider, only to run its site and tools, and we do not use it for our own marketing.

• Prospective customers. Business name, the owner or manager's name, and the business email, phone number and website, taken from the business's own public listings (such as its website or Google listing) or from you. We keep these in our customer records to decide who to contact and to keep track of our conversations.
• Sign-up and onboarding. What you type into our order and intake forms, and files you upload, such as your logo, photos and menu, so we can build your site.
• Billing. Stripe collects your card details and processes payments. We see your name, email, plan and payment status, never your full card number.
• Signing in. Your email address, and your phone number if you sign in with a text message code. One-time codes expire within minutes.
• Chat on this website. The messages you send our chat assistant are processed by an AI model to answer you. Please do not put sensitive personal details in the chat.
• Owner agent. When you ask us by text message, voice note or Telegram to update your site, we process the message (and transcribe voice notes) to make the change.
• AI voice receptionist. When a restaurant uses it, callers hear that they are speaking with an automated assistant. The call audio is transcribed and answered by AI in real time. We keep what the call produces, such as a reservation request, a message for the restaurant and the caller's number.
• Technical data. Our hosting provider keeps standard server logs (such as IP address, browser type and pages requested) for security and troubleshooting. Your language choice is remembered in your own browser. We do not use advertising trackers on this site.

We use this information only to answer you, provide and bill for the service, keep it secure, meet our legal obligations and, with your consent, tell you about our service. We do not sell personal information.

We ask for your consent when we collect personal information, unless the law lets us rely on implied consent, for example when you are already a customer, or you published a business contact address and our message is about your business.

Every marketing email we send identifies CoDreams Inc. and includes a working unsubscribe link. We honour unsubscribes promptly, and within 10 business days at the latest, as CASL requires. Messages you need in order to use the service, such as receipts, sign-in links and security codes, are not marketing and are sent regardless.

We use the following service providers. They process personal information only to provide their service to us, under their own security and confidentiality commitments.

Your information is processed outside Canada. Several of these providers store or process data in the United States or other countries. While it is there, it is subject to the laws of that country, and courts, law enforcement or national security authorities there may be able to access it. We choose providers with strong security practices and send them only what they need.

• Customer account and site content: while your subscription is active. After you cancel, we delete your site content when you ask us to.
• Billing and tax records: as long as Canadian tax law requires, generally six years.
• Prospect records: until you ask us to delete them or they are no longer useful. If you opt out, we keep only what we need to make sure we never contact you again.
• Sign-in codes: minutes. Server logs: the period our hosting provider keeps them.

All traffic to our sites is encrypted (HTTPS). Access to customer data is limited to the people and systems that need it, owner sign-ins are tied to each restaurant's own site, one-time codes are stored hashed, and our database and storage providers encrypt data at rest. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the Privacy Commissioner of Canada as the law requires.

You can ask us to:

• tell you what personal information we hold about you and how we have used it;
• correct anything that is wrong or incomplete;
• delete it, where we are not required to keep it;
• withdraw your consent, for example to marketing messages.

Email hello@codreams.ca. We may need to confirm who you are first. We reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

To stop marketing email from us, use the unsubscribe link in any message, or email hello@codreams.ca with the subject "Opt out". To stop text messages, reply STOP. If you are a restaurant guest, use the unsubscribe link in that restaurant's emails or contact the restaurant directly.

Our service is for businesses. We do not knowingly collect personal information from children.

We will update this page when our practices change and move the date at the top. If a change is significant, we will tell customers by email before it takes effect. See also our terms of service.