Privacy Policy

This Privacy Policy explains how Get ResQ Ltd., Get ResQ US Ltd., and any of their subsidiaries (collectively, "ResQ," "ResQ AI," "we," "us," or "our") collect, use, disclose, retain, and protect personal information when you visit resqai.com or another website that links to this Policy, communicate with us, request a Growth Score or consultation, or use our products and services. Our services include AI-assisted websites, managed advertising, Nora AI Receptionist, Customer Insights, related growth, analytics, communications, and support services, and any other products or services we may offer, add, or modify from time to time (each individually a "Service" and collectively the "Services").

This Policy does not replace a customer's own privacy notice. When ResQ processes personal information on behalf of a business customer, that customer may be responsible for providing additional notices and responding to requests relating to its data.

1. Who We Are and How to Contact Us

Get ResQ Ltd. is the principal entity responsible for personal information collected through the Site. Get ResQ US Ltd. or another ResQ subsidiary may also be responsible where it contracts with you or provides the applicable Service. Get ResQ Ltd. has designated a Privacy Officer who can be contacted as described below.

Canada office: 18 King Street East, Suite 1100, Toronto, Ontario M5C 1C4, Canada.

Privacy inquiries and requests: privacy@getresq.com. You may also write to the address above, Attention: Privacy Officer.

Response timelines. We will acknowledge a privacy request within ten (10) business days of receiving it and will provide a substantive response within thirty (30) days, or within forty-five (45) days where a longer period applies under United States state privacy law. Where applicable law permits an extension, we may extend our response period once and will notify you of the extension and the reason for it before the original period ends. If we require additional information to verify your identity or authority, the response period may begin when we receive that information.

2. Personal Information We Collect

Information you provide. We may collect your name, business name, the names, titles, and business contact details of your directors, officers, and employees, job title, email address, telephone number, business and service addresses, service area, website URL, trade and service categories, account information, communications preferences, billing details, support requests, and other information you choose to provide.

Growth Score and consultation information. We may collect your responses about your business, marketing, website, customer acquisition, call handling, average job value, service categories, growth priorities, and related operational information to generate an assessment, contact you about your request, and recommend Services.

Customer and product information. Customers may provide website content, logos, photographs, advertising materials, account permissions, contact lists, customer records, job or transaction history, communication history, scheduling information, business rules, call scripts, and other data needed to provide the Services.

Nora and call information. Depending on the customer's configuration and applicable law, we may process caller names, telephone numbers, business information, service addresses, descriptions of service needs, appointment information, call audio, recordings, transcripts, summaries, call outcomes, and related metadata. Callers should not provide highly sensitive information that is unnecessary for the service request.

Where this information is stored. Call audio, recordings, transcripts, summaries, and related records are hosted on cloud infrastructure operated by Amazon Web Services (AWS) in data centres located in Canada and the United States. Telecommunications, transcription, and AI providers that support these features may also process this information as described in Sections 5 and 11.

Information collected automatically. We and our providers may collect IP address, device and browser information, approximate location, pages or features viewed, referring URLs, timestamps, interactions, advertising and cookie identifiers, campaign parameters, click identifiers, form and video engagement, call-attribution data, and diagnostic or security logs.

Information from other sources. We may receive information from customers, affiliates, referral partners, advertising and analytics providers, scheduling services, public business sources, social networks, telecommunications providers, and other vendors.

3. How We Use Personal Information

We may use personal information to provide, configure, maintain, support, secure, and improve the Services; generate Growth Scores and growth assessments; respond to inquiries; schedule meetings; create and manage accounts; build and host customer websites; manage advertising campaigns; route, record, transcribe, summarize, and respond to calls; provide customer insights and communications tools; process payments; measure performance and attribution; detect fraud and abuse; enforce agreements; comply with law; and protect ResQ, our customers, users, and the public.

We may also use personal information to send product news, resources, offers, and other marketing where permitted by law. Every marketing email we send contains an unsubscribe link, and you may also unsubscribe at any time by emailing privacy@getresq.com or by writing to the Privacy Officer at the address in Section 1. We will action an unsubscribe request promptly and, in any event, within the period required by applicable law. Withdrawing marketing consent does not prevent us from sending transactional or service-related communications.

We may create aggregated or de-identified information and use it for analytics, benchmarking, product improvement, and business purposes. We will not attempt to re-identify information that we maintain as de-identified except as permitted by law.

4. Cookies, Analytics and Advertising

We use cookies, pixels, tags, local storage, software development kits, call-attribution tools, and similar technologies. These technologies may support essential site functions, save preferences, measure site and campaign performance, attribute leads, prevent fraud, personalize experiences, and deliver or measure advertising.

Consent banner. Where required, we obtain consent before using nonessential analytics, personalization, or advertising technologies. When you first visit the Site, a consent banner allows you to Accept All, Reject All Nonessential, or accept only strictly necessary technologies, and to manage each category individually. Nonessential technologies remain disabled until you make a choice.

You can use the Cookie Settings or Your Privacy Choices link in our website footer to review or change your choices at any time. Rejecting nonessential technologies does not disable cookies that are necessary to operate and secure the website.

Effect of rejecting or withdrawing consent. Declining or withdrawing consent for us to collect, use, or process information through these technologies may materially affect our ability to provide all or part of the Site, the Services, or a requested feature, and in some cases may mean a Service cannot be provided at all. Measurement, attribution, personalization, and certain support functions may be degraded or unavailable.

Our advertising and analytics partners may include Google, Meta, Microsoft, LinkedIn, Reddit, and other providers identified in our Cookie Policy or preference center. Depending on the technology and applicable law, disclosures to advertising partners may be treated as a sale, sharing, or processing for targeted advertising, even when no money is exchanged.

Consent choices are intended to apply to browser-based tags and corresponding server-side advertising events, including enhanced conversions, conversion APIs, audience syncing, and offline conversion uploads where required. You may need to renew your choice if you use another browser or device or delete cookies.

Where legally required, we process recognized opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale, sharing, or targeted advertising for the browser or device sending the signal.

5. How We Disclose Personal Information

We may disclose personal information to hosting and infrastructure providers; customer relationship management, scheduling, support, payment, email, and messaging providers; advertising and analytics platforms; telecommunications, call-tracking, recording, transcription, and AI providers; professional advisers; security and fraud-prevention vendors; affiliates; and other providers that help us operate our business and deliver the Services.

We may disclose information to a customer when you interact with that customer through a ResQ-powered website, advertisement, telephone number, Nora, or another Service. That customer's handling of your information is governed by its own privacy practices.

We may disclose information when reasonably necessary to comply with law, legal process, or governmental requests; enforce agreements; investigate fraud, abuse, or security incidents; or protect rights, property, safety, and the integrity of the Services.

If ResQ is involved in a merger, financing, acquisition, reorganization, sale of assets, insolvency, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

6. Customer Data and Our Role

For certain Services, a business customer determines why and how personal information is processed, and ResQ processes that information on the customer's behalf under our agreement and Data Processing Addendum. Requests relating to that information should generally be directed to the relevant customer. We may assist the customer in responding.

Customers are responsible for having lawful rights and permissions to provide personal information to ResQ, configure recording and communications, use marketing tools, and instruct ResQ to process data. ResQ may independently process limited information for account administration, billing, security, legal compliance, and our own permitted business purposes.

7. AI, Recording and Automated Processing

Some Services use artificial intelligence to answer or route calls, generate transcripts or summaries, identify potential opportunities, recommend actions, assist with website or advertising content, and automate workflows. AI outputs may be incomplete or inaccurate and should be reviewed before being used for important decisions.

Where required, callers will be informed that they are interacting with an AI assistant and that a call may be recorded or transcribed. Customers are responsible for additional notices or consents required for their configuration, industry, or jurisdiction.

ResQ does not use customer content to train general-purpose third-party AI models unless expressly agreed with the customer and permitted by applicable law.

8. Legal Bases and Consent

Depending on the applicable law and context, we process personal information with consent, to perform or take steps toward a contract, to comply with legal obligations, and for legitimate business purposes that comply with applicable federal, state, and local laws in the United States and applicable federal and provincial laws in Canada, and that are not overridden by applicable privacy rights.

Where consent is required, you may withdraw it, subject to legal or contractual restrictions and reasonable notice. Withdrawing your consent, or declining to provide personal information that we need, may materially affect our ability to provide all or part of the Services you have requested, and in some cases may mean that we can no longer provide a Service at all. Where this is the case, we will tell you before acting on the withdrawal. Withdrawal of consent does not affect processing carried out before the withdrawal took effect, or processing we are permitted or required by law to continue.

Canadian residents may be asked to provide express consent for marketing communications and nonessential tracking. A request for a Growth Score or consultation does not, by itself, require you to consent to unrelated ongoing marketing.

9. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the Services, maintain business and consent records, comply with legal, tax, accounting, and reporting obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.

Retention periods vary based on the type and sensitivity of information, the customer's instructions, account status, legal requirements, and operational needs. When information is no longer required, we delete, de-identify, or securely dispose of it, subject to backup cycles, legal holds, and permitted archival records.

If you have questions about our retention practices, or would like more detail about how long a particular category of information is kept, contact our Privacy Officer at privacy@getresq.com.

10. Security and Privacy Incidents

We use administrative, technical, and physical safeguards designed to protect personal information, including access controls and measures appropriate to the nature of the information. No security measure or method of transmission is completely secure, and we cannot guarantee absolute security.

We maintain processes to assess and respond to suspected privacy and security incidents and will provide notifications when required by applicable law.

Incident-notification requirements differ by jurisdiction. Where United States federal or state law, or Canadian federal or provincial law, imposes more specific requirements as to the timing, content, method, or recipients of a breach notification — including notification to individuals, business customers, regulators, or attorneys general — we will comply with those requirements. Where we act as a service provider or processor for a business customer, we will notify that customer without undue delay so that it can meet its own notification obligations.

11. International and Cross-Border Processing

ResQ and our providers may process and store personal information in Canada and the United States, including on Amazon Web Services (AWS) infrastructure, and in other jurisdictions where we or our providers operate. Information in another jurisdiction may be subject to that jurisdiction's laws and lawful access by courts, law-enforcement agencies, or governmental authorities. We use contractual and other safeguards where required.

12. Your Privacy Rights

Depending on where you live and subject to exceptions, you may have rights to request access to, correction of, or deletion of personal information; obtain a portable copy; withdraw consent; object to or restrict certain processing; opt out of sale, sharing, or targeted advertising; limit certain uses of sensitive personal information; or appeal a decision concerning a request.

To exercise a right, contact privacy@getresq.com or use an applicable privacy request mechanism linked from our website. We will acknowledge and respond within the timelines described in Section 1. We may verify your identity and authority before responding. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.

If we deny a request, you may have a right to appeal or complain to the applicable privacy regulator. Canadian residents may contact the Office of the Privacy Commissioner of Canada or the relevant provincial regulator.

13. Marketing Communications

You may unsubscribe from marketing email using the unsubscribe link included in every marketing message, by emailing privacy@getresq.com, or by writing to the Privacy Officer at the address in Section 1. We may retain limited information on a suppression list to honor your choice. For marketing texts, reply STOP where available or use the method described in the message. You may revoke consent to automated or artificial-voice marketing calls through the method provided at the time of consent or by contacting us.

Consent to marketing is not a condition of purchasing the Services. Transactional, account, security, and requested-service communications may continue after a marketing opt-out.

14. SMS Communications

ResQ may send automated or non-automated text messages relating to a demo or Growth Score request, appointment scheduling, account activity, service updates, or marketing where permitted by law and with any required consent. Message frequency varies, and message and data rates may apply. Consent to marketing texts is not a condition of purchasing Services.

We do not share telephone numbers or SMS consent information with third parties for their own marketing or promotional purposes. We may disclose this information to telecommunications aggregators, carriers, and providers that support our messaging services. To opt out, reply STOP to a message. Reply HELP for assistance or contact privacy@getresq.com. Opting out of marketing texts does not prevent non-marketing communications where permitted by law.

15. Children

The Services are designed for businesses. You must be at least 18 years old or the age of legal majority where you live to create an account or purchase Services. The Services are not directed to children, and we do not knowingly collect personal information from children in circumstances requiring parental consent. If you believe a child has provided personal information, contact us.

16. Third-Party Sites and Services

The Services may link to or integrate with third-party sites and platforms. Their privacy practices are governed by their own notices. ResQ is not responsible for third-party privacy practices except to the extent required by law or contract.

17. Changes to This Policy

We may update this Policy to reflect changes in our Services, practices, vendors, or legal obligations. We will post the updated Policy at resqai.com/privacy (or a successor location we identify) and revise the effective date. If required, we will provide additional notice or obtain consent before a material change takes effect.

By continuing to use some or all of the ResQ AI Services after an updated Policy takes effect, you consent to the terms of that Policy. If you do not agree to an updated Policy, you should stop using the Services and may contact our Privacy Officer to discuss your options.

18. Contact Us

Privacy Officer, ResQ, 18 King Street East, Suite 1100, Toronto, Ontario M5C 1C4, Canada.

Email: privacy@getresq.com.