Privacy Policy

This Privacy Policy explains how Rehash Digital Inc., doing business as Rehash Digital (“Rehash,” “we,” “us,” or “our”), collects, uses, discloses, retains, and protects information when you use rehash.digital, Rehash Navigator, the Software Finder, trial guides, assessments, consultations, managed consulting services, software pages, affiliate links, vendor-introduction flows, resources, forms, and related communications.

Rehash provides field service software, systems, AI, implementation, optimization, and strategic consulting for business users. The site and services are intended for business use in Canada and the United States, excluding Quebec.

If you have questions about this Privacy Policy or your information, contact us at privacy@rehash.digital.

1. What this policy covers

This Privacy Policy applies to information collected through:

• rehash.digital;
• Rehash Navigator and related interactive tools;
• the Software Finder and other recommendation or routing tools;
• trial guides, Foundations resources, downloads, and gated resources;
• contact forms, consultation forms, booking flows, and email inquiries;
• Field Service Systems Assessments and Applied Assessments;
• Implementation Readiness, Implementation Management, AI Systems Deployment, Systems Tuning & Optimization, Strategic Project Scoping, Strategic Projects, and other managed consulting services;
• software pages, vendor-introduction requests, affiliate links, referral links, and partner-related pages;
• YouTube calls to action and related landing pages;
• payment, scheduling, email, CRM, analytics, hosting, security, AI, and other service-provider systems that support Rehash.

This Privacy Policy does not apply to third-party websites, software vendors, payment processors, calendar tools, AI providers, affiliate networks, social platforms, or other third-party services that Rehash does not own or control. Those third parties are governed by their own terms and privacy policies.

2. Business-use limitation

The site and services are intended for business users, not consumers or children. You should only provide information that you are authorized to provide on behalf of yourself or your business.

The site and services are not directed to residents or businesses located in Quebec. Rehash may decline inquiries, purchases, consultations, accounts, or services where Quebec law, language, privacy, consumer, or other requirements would apply and Rehash has not accepted that engagement in writing.

3. Information we collect

The information we collect depends on how you interact with Rehash.

3.1 Contact and identity information

We may collect:

• name;
• business name;
• role or title;
• email address;
• phone number if you provide it;
• mailing or billing address;
• account registration details;
• sign-in or single sign-on information;
• communication preferences;
• terms, privacy, and consent records.

3.2 Business and operating-context information

We may collect business information that helps Rehash generate results, recommendations, assessments, consulting outputs, or service scopes, including:

• trade, vertical, service category, or service mix;
• region, market, or service area;
• team size, role mix, contractor split, or headcount composition;
• revenue band, growth stage, growth trajectory, or other business-size indicators;
• current software, tools, integrations, systems, and vendors;
• workflow, handoff, role, reporting, dispatch, invoicing, marketing, sales, operations, and customer-communication information;
• stated goals, constraints, priorities, friction points, maturity signals, and implementation concerns;
• software requirements, vendor preferences, vendor notes, migration considerations, and adoption constraints;
• AI-readiness, AI use-case, review-rule, and AI Systems Deployment context;
• free-text notes or other information you choose to provide.

3.3 Navigator, Software Finder, and recommendation information

When you use Rehash Navigator, the Software Finder, /start, trial guides, or similar tools, we may collect or generate:

• anonymous session information;
• route, surface, or entry point;
• form responses and answers;
• business profile details;
• generated results and recommendation outputs;
• recommendation branch, result type, or routing status;
• account-linked history if you register, sign in, book a consultation, or otherwise identify yourself;
• model, logic, or version information used to generate the result;
• consent, preference, and policy-version records;
• CTA, booking, affiliate, or vendor-introduction events.

Anonymous-first tools are designed to let you begin without providing an email address. When you use them, your answers, the results we generate, and related session activity may be stored on our servers and tied to an anonymous session identifier — not your name or email — so we can operate the tools, route you appropriately, apply rate limits, prevent abuse, and understand usage. This anonymous activity is not linked to your identity unless you register, sign in, book a consultation, request a vendor introduction, or otherwise identify yourself, at which point we may connect your prior session to your business profile or account so your history can support future recommendations for your business. We retain anonymous session data for a limited period (generally up to 90 days) unless you identify yourself or a longer period is needed for security, fraud prevention, or legal reasons. Anonymous data collected before you provide the applicable consent is not used for cohort or model-improvement purposes.

3.4 Assessment and client-service information

For consultations, assessments, managed consulting services, and client work, we may collect information you provide or authorize us to review, including:

• current-state business context;
• software, system, workflow, process, implementation, AI, reporting, growth, and operations information;
• meeting notes, project notes, email threads, forms, call summaries, and service records;
• documents, spreadsheets, exports, screenshots, reports, or files you provide;
• source-to-revenue, agency, lead-response, booking, follow-up, retention, referral, or marketing accountability information;
• implementation-readiness, data-quality, field-mapping, migration-readiness, vendor-comparison, or project-planning information;
• Context Core, report, roadmap, recommendation, and deliverable inputs.

3.5 Payment, booking, and transaction information

If you book a paid session, purchase a product, pay an invoice, pay a deposit, or otherwise transact with Rehash, we may collect:

• product or service purchased;
• order, booking, invoice, or payment status;
• billing contact details;
• tax, accounting, and transaction records;
• access, entitlement, or fulfillment status.

Payments may be processed through third-party providers such as Stripe, HubSpot Commerce, Wise, Calendly payment integrations, bank transfer, e-transfer, or other payment providers we adopt. Rehash does not intend to store full payment-card details.

3.6 Usage, attribution, security, and technical information

We may collect technical and usage information such as:

• pages viewed;
• routes, clicks, events, CTAs, and downloads;
• referral source, campaign tags, UTM parameters, and affiliate-click metadata;
• approximate device, browser, and location information;
• cookies, local storage, pixels, tags, anonymous session identifiers, or similar technologies;
• error logs, rate-limit records, audit logs, and security-relevant events;
• hashed or HMAC-derived address data where address-derived data is needed for security, fraud prevention, abuse prevention, rate limiting, analytics, attribution, or compliance.

Rehash does not intend to store raw IP addresses where address-derived data is needed. We may use hashed, HMAC-derived, or otherwise transformed values for limited operational, security, attribution, consent, or compliance purposes.

4. How Rehash uses business and assessment data

Rehash uses business and assessment data in three main ways.

4.1 Your data to produce your results

We use your answers, business profile, context, and submissions to generate your current Navigator result, Software Finder result, trial-guide output, assessment output, consultation preparation, recommendation, report, roadmap, project scope, or service deliverable.

This use is necessary to provide the requested result or service.

4.2 Your history to improve your future recommendations

If you register, sign in, book a consultation, become a client, or otherwise identify yourself, we may use your prior interaction history, saved results, business profile, and account-linked information to improve future recommendations and service context for your business.

This may help Rehash avoid asking the same questions repeatedly, carry forward your business context, prepare for consultations, maintain your recommendation history, and improve future recommendations for your business.

4.3 Anonymized or aggregated data to improve Rehash products, models, recommendations, and benchmarks

When you register or otherwise accept the applicable Privacy Policy and Terms, that acceptance includes permission for Rehash to use anonymized and/or aggregated business and assessment data to improve Rehash products, recommendation logic, models, services, educational resources, and cohort benchmarks.

This use is limited to information that does not reasonably identify you or your business. Your specific business numbers, scores, answers, recommendations, Context Core, assessment details, and internal Rehash scoring outputs are not published or shown to other businesses.

You may opt out of future cohort and model-improvement use through the account or admin portal when that feature is available. If you opt out, Rehash will stop using your identifiable account-linked information for future cohort or model-improvement uses. Opting out does not require Rehash to remove anonymized, aggregated, or non-identifying insights that were already created and no longer identify you or your business.

5. Per-client firewall and benchmark limits

Rehash does not make one business’s specific profile, numbers, scores, answers, reports, Context Core, internal Impact Score, or recommendations available to another business.

Rehash may use anonymized or aggregated patterns to create directional cohort ranges, benchmarks, examples, product improvements, service improvements, and recommendation improvements. Cohort outputs are intended to be directional and non-identifying. Rehash may suppress, generalize, or withhold cohort outputs where the cohort is too small or specific enough that a business could reasonably be identified.

6. Consent and choices

We collect, use, and disclose information with consent, where consent is required, or as otherwise permitted or required by law.

Consent may be collected through forms, account registration, checkout flows, booking flows, terms and privacy acceptance, email opt-ins, vendor-introduction prompts, service agreements, statements of work, or other notices.

Privacy and Terms acceptance controls are not pre-checked. If you register for an account, the registration process may require you to accept the Privacy Policy and Terms. That acceptance includes the data uses described in this Policy, including anonymized or aggregated product, model, recommendation, and benchmark improvement, subject to the opt-out option described above.

Marketing email is not automatically required for access to gated resources unless the form clearly says otherwise and you provide the applicable consent. Where possible, asset delivery and marketing consent will be treated separately.

Vendor introductions require consent before Rehash shares relevant contact or business information with a vendor or partner.

7. AI-assisted processing

Rehash may use third-party AI providers and AI-assisted tools to help draft, summarize, compare, structure, format, retrieve, or analyze information. AI may assist with Navigator outputs, Software Finder outputs, trial guides, assessments, reports, recommendations, Context Cores, consulting work, and internal operations.

Rehash will not knowingly submit client data to AI tools that train public models on that data. Where available, Rehash will configure provider settings to avoid model training on client data.

AI-assisted outputs can be incomplete, inaccurate, outdated, or unsuitable. Rehash uses human validation for paid assessments and other high-stakes client-facing outputs as described in the Terms. Rehash does not promise autonomous AI management, hallucination-free AI, custom AI software, guaranteed AI outputs, or unreviewed AI decisions unless a separate written agreement expressly says otherwise.

8. When we disclose information

We may disclose information as follows.

8.1 Service providers

We may disclose information to service providers that help us operate the site, Navigator, Software Finder, email, CRM, forms, analytics, hosting, security, authentication, scheduling, payment processing, AI tooling, file storage, project management, and other business functions.

8.2 Vendors, partners, and implementation providers

If you request a vendor introduction, partner referral, implementation introduction, or related handoff, we may disclose relevant contact and business information to that vendor, partner, or provider with your consent.

8.3 Payment and booking providers

If you book, pay, purchase, or subscribe through an external tool, relevant transaction and booking information may be processed by the applicable provider.

8.4 Professional advisors and legal requirements

We may disclose information to lawyers, accountants, insurers, auditors, consultants, or other professional advisors. We may also disclose information if required or permitted by law, regulation, court order, legal process, lawful request, investigation, or enforcement need.

8.5 Business transactions

If Rehash is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law.

8.6 With your direction or consent

We may disclose information for other purposes with your direction or consent.

9. Cookies, analytics, and attribution

We may use cookies, local storage, pixels, tags, and similar technologies to:

• operate the site and Navigator;
• maintain anonymous session continuity;
• remember preferences;
• understand traffic and engagement;
• attribute CTAs, campaigns, affiliate clicks, booking paths, and gated-resource activity;
• detect abuse, prevent fraud, and apply rate limits.

Where required, we will provide notice or choice for non-essential cookies or tracking technologies. Browser settings may allow you to block or delete cookies, but some features may not work properly without them.

10. Email communications

We may send transactional or service-related messages when needed to deliver requested resources, bookings, purchases, consultations, accounts, assessments, or services.

We may send marketing emails only where permitted by law and based on the applicable consent or legal basis. Marketing emails will identify Rehash and include an unsubscribe mechanism. If you unsubscribe, we may retain limited information needed to honour your preference.

11. Retention

We keep information only as long as needed for the purposes described in this Policy, unless a longer period is required or permitted by law, contract, tax, accounting, audit, security, dispute-resolution, or legitimate business requirements.

Anonymous Navigator and Software Finder activity — including answers, generated results, and related session events — is retained for a limited period, generally up to 90 days, unless you register, sign in, book a consultation, request a vendor introduction, or otherwise identify yourself (in which case it may be connected to your account), or a longer period is required for security, fraud prevention, accounting, audit, or legal reasons. When that period ends, we delete, anonymize, or aggregate the information.

Consent records are retained as long as needed to prove consent, honour preferences, manage legal obligations, and comply with applicable law.

Payment, invoice, and tax records are retained as required for tax, accounting, legal, and business purposes.

Anonymized, aggregated, or non-identifying information may be retained for longer because it no longer reasonably identifies you or your business.

When information is no longer needed, we will delete, anonymize, aggregate, or otherwise dispose of it using reasonable measures.

12. Deletion, withdrawal, and derived aggregate insights

You may request deletion of information or withdraw consent where permitted by law, subject to legal, contractual, accounting, security, backup, technical, and legitimate business limits.

If you request deletion, Rehash will delete, anonymize, or otherwise handle your personal information as required and as reasonably possible. Deletion does not require Rehash to remove anonymized, aggregated, or non-identifying insights that were created before the request and no longer identify you or your business.

If you withdraw consent for future cohort or model-improvement use, Rehash will stop using your identifiable account-linked information for future cohort or model-improvement uses, subject to reasonable technical and operational limits. Withdrawal does not affect anonymized, aggregated, or non-identifying insights that were already created and no longer identify you or your business.

13. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the nature of the information. These may include server-side handling of sensitive operations, access controls, least-privilege permissions, input validation, security logging, rate limiting, Row Level Security controls, secure secret handling, and transformed address data where appropriate.

No method of transmission or storage is perfectly secure. We cannot guarantee absolute security.

14. International processing and storage

Rehash may use service providers located in Canada, the United States, or other jurisdictions. Information may be processed, stored, or accessed in those jurisdictions and may be subject to their laws.

15. Your rights and requests

Depending on where you live and which laws apply, you may have rights to:

• access information we hold about you;
• request correction of inaccurate or incomplete information;
• withdraw consent, subject to legal or contractual limits;
• request deletion or anonymization, subject to exceptions;
• request information about our collection, use, disclosure, retention, and safeguards;
• unsubscribe from marketing communications;
• complain to a privacy regulator.

To make a request, contact privacy@rehash.digital. We may need to verify your identity before responding.

16. California and other U.S. privacy laws

Rehash targets business users in Canada and the United States. Based on current operations, Rehash does not currently believe it is subject to the California Consumer Privacy Act. If applicable privacy law gives you specific rights, Rehash will handle applicable requests as required by law.

17. Children

The site and services are intended for business users and are not directed to children. We do not knowingly collect personal information from children.

18. Third-party websites and services

The site may link to or rely on third-party websites, software vendors, tools, payment processors, calendar systems, AI providers, affiliate networks, social platforms, and partners. We are not responsible for the privacy practices, content, terms, or security of third-party sites or services.

19. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice where appropriate and obtain consent where required. The “Last updated” date shows when this Policy was last revised.

20. Contact

Rehash Digital Inc. Doing business as Rehash Digital. 1201-1200 Bay St., Toronto, ON M5H 2V1, Canada. privacy@rehash.digital