Sageframe Privacy Policy
Effective date: September 19, 2026
Starbuilders Consulting Ltd. ("Starbuilders," "we," "us") is a corporation incorporated in British Columbia, Canada. This policy governs personal information we handle through the Sageframe platform, its websites, and account tools (the "Service"). It is governed by British Columbia's Personal Information Protection Act ("PIPA") and, for personal information that crosses provincial or national borders, the federal Personal Information Protection and Electronic Documents Act ("PIPEDA").
1. The Service and your AI Host
Sageframe provides software and licensed text that you use through a third-party AI assistant you select and connect (your "AI Host"; the "Third-Party AI Host" defined in our Terms of Service). Sageframe does not provide any artificial-intelligence or language-model service. Your AI Host performs all reasoning and produces all output, and your use of it is governed by its provider's privacy policy, not this one.
2. Content generated through your AI Host
When you use the Service through your AI Host, the information your AI Host sends passes through our systems only to respond to the request. We do not store or retain it, use it to profile you, or record it in our logs, and we do not hold your prompts, the information you or your AI Host enter, your AI Host's reasoning, or any recommendation.
3. Information we collect
We collect and store:
(a) your email address, when you register, sign in, or are added to an Organization;
(b) billing and entitlement records synced from Stripe: an identifier for your Stripe customer record and the Product or Products your subscription grants; and
(c) for an Organization, an identifier for the Organization and its Seat count.
Stripe collects and handles your payment card details through its hosted checkout. We do not receive or store your card number.
The Service uses only cookies necessary to operate it, such as to keep you signed in. We do not use advertising or analytics cookies.
4. Purposes
We use this information only to provide the Service and grant access per Seat, operate billing and prevent payment fraud, verify identity and manage accounts and Organization membership, and meet legal, tax, and accounting obligations. We do not sell personal information or use it for advertising.
5. Consent
You consent to the collection, use, and disclosure described in this policy by providing your information and using the Service. Providing information to a service provider to process on our behalf for these purposes is a use, not a disclosure requiring separate consent, and we remain accountable for it. You may withdraw consent subject to legal and contractual limits; if you withdraw consent necessary to provide the Service, we may be unable to provide it.
6. Service providers and cross-border processing
We remain accountable for personal information our service providers process on our behalf and require them by contract to provide comparable protection.
| Provider | Role | Personal information handled | Location |
|---|---|---|---|
| Vercel | Hosting; runs the Service and captures our logs | Operational request and log data, not including the contents of your requests | United States |
| Neon | Database | Email, Stripe customer identifier, entitlement records, Organization identifier, Seat count | United States |
| Stripe | Payments and billing | Email and payment card details via hosted checkout (card details do not reach us) | United States |
| Stytch | Identity, sign-in, team membership, email verification | Email, Organization and team membership | United States |
Our service providers store and process personal information in the United States. While it is in the United States, it may be accessible to United States courts, law enforcement, and government authorities under United States law, including for national security.
7. Retention
We retain your email and billing and entitlement records while your account or Organization membership is active, and afterward only as long as needed to meet legal, tax, and accounting obligations and to preserve billing records. We then destroy the information or remove the means of associating it with you.
8. Safeguards
We protect personal information with safeguards appropriate to its sensitivity, including access controls, encryption in transit, and minimizing what we collect. No safeguard is absolute, and we do not guarantee complete security.
9. Your rights
You may request access to the personal information we hold about you and correction of inaccurate or incomplete information, by contacting us under Section 12. We respond within the period PIPA requires (currently 30 days) and may first verify your identity. You may also complain to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca) or, for cross-border matters, the Office of the Privacy Commissioner of Canada (priv.gc.ca).
10. Children
The Service is for business and professional use and is not directed to children or to others who cannot give meaningful consent. We do not knowingly collect their personal information. Canadian privacy law sets no fixed age threshold.
11. Changes
We may update this policy. We will post the updated policy with a new effective date and take reasonable steps to notify you of material changes.
12. Contact
We have designated a privacy officer responsible for our compliance with PIPA and PIPEDA. To exercise your rights, ask a question, or make a complaint, contact:
Privacy Officer
Starbuilders Consulting Ltd.
6135 Metral Dr, Nanaimo, BC V9T 2L7
support@sageframe.ai
13. Scope
This policy applies to subscribers in Canada and the United States, including California, and meets the requirements of British Columbia's PIPA and Canada's PIPEDA. We do not sell or share personal information.