Last updated: June 22, 2026
Twelverays ("Twelverays", "we", "us", or "our") respects privacy and handles personal information in connection with our website, marketing, sales, client services, payment processing, recruitment, business operations, and professional services.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information. It applies to our website, forms, meeting booking, communications, client engagements, proposals, payments, and related business activities.
Twelverays primarily serves businesses, governments, and nonprofits in Canada and the United States. Our website and services are not directed to children or to individual consumers.
Twelverays has designated a privacy contact for questions, requests, and complaints about our privacy practices.
Privacy Contact
Twelverays
Email: [email protected]
The personal information we collect depends on your relationship with us.
When you visit our website, we may collect:
When you contact us, submit a form, book a meeting, request a proposal, subscribe to communications, or communicate with us, we may collect:
When we provide services, we may collect and process information provided by or on behalf of clients, including:
For client-provided project data, Twelverays generally acts as a service provider, processor, contractor, or similar role, as applicable. The client is responsible for having the lawful authority, notices, consents, rights, and permissions needed to provide that data to us.
When you request or accept a proposal, sign a statement of work, or pay us, we may collect:
We use third-party payment processors such as Stripe. We do not directly store complete payment card numbers.
If you apply for a role or contact us about work opportunities, we may collect:
We do not intentionally request sensitive or regulated personal information unless it is necessary for a specific project and approved in the applicable statement of work or in writing. Sensitive or regulated information may include health information, financial account information, government identifiers, children's data, biometric data, precise geolocation, criminal records, special-category information, or legally privileged material.
Clients must not provide sensitive or regulated information unless expressly approved by Twelverays. If a client provides such information, the client remains responsible for lawful authority, notices, consents, safeguards, minimization, and compliance.
Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children. Clients must not provide children's data unless expressly approved in a statement of work or by Twelverays in writing.
We may use personal information to:
We use cookies, pixels, tags, scripts, local storage, and similar technologies for website operation, analytics, security, advertising, retargeting, attribution, performance measurement, and service improvement.
These technologies may collect or receive information such as IP address, device and browser information, pages visited, events, referrers, campaign parameters, approximate location, advertising identifiers, and cookie identifiers.
Representative tools and providers may include:
You can control some cookies through your browser settings, device settings, ad platform settings, and industry opt-out tools. Blocking cookies may affect website functionality, analytics, personalization, attribution, or security features.
Some browsers offer "Do Not Track" or similar signals. Because there is no uniform industry standard for those signals, our website may not respond to them unless legally required.
We may send marketing communications, newsletters, event invitations, educational content, service updates, or business development messages where permitted by law, including where we have consent or an existing business relationship.
Commercial electronic messages will identify Twelverays and include an unsubscribe mechanism where required. You may unsubscribe from marketing communications at any time. We may still send transactional, service, billing, legal, security, or project-related messages.
We may disclose personal information to:
We do not sell personal information as our business model. We may use advertising and analytics tools that involve sharing online identifiers or website activity with advertising and analytics providers. Some laws may treat certain advertising, analytics, retargeting, or cross-context behavioral advertising activities as "sharing" or similar concepts. You can contact us at [email protected] with questions or requests.
For client project data, Twelverays processes information to provide the services described in the applicable statement of work and related instructions. This may include CRM records, customer and prospect data, analytics data, advertising audiences, website data, sales pipeline data, support records, email or marketing records, and other business data.
Clients are responsible for:
Twelverays may use approved vendors, contractors, subprocessors, and service providers to process client project data for service delivery, security, operations, and support.
We may use AI tools, automation tools, analytics tools, and machine learning tools to help provide services, improve workflows, analyze data, draft content, summarize information, generate recommendations, or support internal operations.
AI-assisted outputs may be inaccurate, incomplete, or unsuitable without human review. Clients are responsible for reviewing and approving final use of AI-assisted outputs in their business, campaigns, systems, or public materials.
We do not intentionally provide sensitive or regulated information to third-party AI tools unless approved for a specific engagement or permitted by the applicable statement of work.
Twelverays works with clients, vendors, contractors, and service providers in Canada, the United States, and other locations. Personal information may be processed, stored, accessed, or transferred outside your province, state, or country, including in Canada and the United States.
When information is processed in another jurisdiction, it may be subject to the laws of that jurisdiction, including lawful access by courts, law enforcement, regulators, or government authorities.
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide services, manage client relationships, complete projects, administer accounts, maintain business records, comply with legal, tax, accounting, insurance, contractual, and regulatory obligations, resolve disputes, collect payments, protect security, maintain backups, and exercise legal rights.
Retention periods vary depending on the type of information, the engagement, legal requirements, backup cycles, limitation periods, and legitimate business needs.
We use reasonable administrative, technical, physical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, loss, theft, alteration, and destruction.
No method of transmission, storage, hosting, internet communication, third-party platform, or security control is completely secure. We cannot guarantee absolute security, especially for third-party platforms, client-controlled systems, client-provided access, or internet transmission.
Clients are responsible for maintaining appropriate security controls for their own systems, accounts, users, credentials, platforms, and data.
Depending on applicable law and your relationship with us, you may have rights to request access to personal information, correction of inaccurate information, deletion where applicable, withdrawal of consent, restriction or objection where applicable, information about our privacy practices, or review of a privacy complaint.
To make a request, contact [email protected].
We may need to verify your identity or authority before responding. Some requests may be limited by legal, contractual, security, backup, confidentiality, privilege, accounting, tax, dispute, business-record, or legitimate business reasons.
Withdrawing consent may affect our ability to provide services, respond to requests, or continue certain communications. We may continue to collect, use, or disclose information where permitted or required by law.
Twelverays primarily provides B2B services in Canada and the United States. We do not believe our current business model is based on selling personal information. Some U.S. privacy laws, including California privacy law, may apply only to businesses that meet specific thresholds or processing criteria.
If a U.S. privacy law applies to your personal information, we will handle applicable requests as required by that law. You may contact [email protected] with privacy questions or requests.
We may disclose or transfer personal information in connection with a merger, acquisition, financing, restructuring, sale of assets, change of control, due diligence process, bankruptcy, or similar business transaction. The recipient will be required to handle personal information consistently with applicable law.
Our website, communications, and deliverables may link to third-party websites, platforms, plugins, applications, or services. We are not responsible for the privacy practices, security, content, or terms of third parties. You should review their privacy notices and terms.
We may update this Privacy Policy from time to time. The updated version will be posted on our website with a new "Last updated" date. Changes apply when posted unless otherwise stated.
For privacy questions, requests, or complaints, contact:
Twelverays
Email: [email protected]