Privacy policy

Who we are

2MDA.AI builds agentic AI systems for small and mid-sized businesses. Our office is at 1 Yonge Street, Suite 1801, Toronto, Ontario M5E 1W7, Canada. The company behind 2MDA.AI is named at the foot of this page.

This policy covers this website, our contact form and newsletter, email to us, and our voice agent on the web and by phone. We handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect, and why

Contact form

Your name and email, plus whatever else you choose to tell us: company, team size, the kind of workflow, your message and how you heard about us. We use it to reply and to follow up on your request. If we end up talking, we keep a record in our customer relationship system, Attio. Submissions are stored by Netlify, which hosts this site, and forwarded to our mailbox at Google Workspace.

Newsletter

Your email address, to send you the newsletter you signed up for. Every issue has an unsubscribe link, or you can ask us at hello@2mda.ai. We only send the newsletter to people who signed up for it.

Email

When you email us, your message and address are kept in our Google Workspace mailbox and, when we follow up, in Attio.

Voice agent calls

You can talk to our AI voice agent from the contact page or by phone. Calls are recorded and transcribed. Our voice-agent provider, ElevenLabs, processes the audio to run the conversation and keeps the recording and transcript for up to two years. Phone calls reach the agent through Twilio, which handles the call and your caller ID.

After a call, a summary goes into Attio with the details you gave: your name, email, phone number, company and role, what you asked about, the next step we agreed, and when you’d like a callback. If you call again, the agent sees a short note of what you asked last time, so it can pick up where you left off. It never reads your contact details back to you.

On the website, your browser keeps a random ID (mda_visitor_id, in local storage) so the agent can recognise you on your next call once you’ve left your details. It identifies the browser, not you. You can delete it by clearing this site’s data in your browser.

Before a web call starts, and before we show our phone number, Cloudflare Turnstile checks that you’re a person and not a bot. Cloudflare processes technical information about your browser and connection for that check.

Analytics

We use Google Analytics to see how the site is used: which pages are visited, roughly from where (city or country), on what kind of device and browser, and how people found us. It sets two cookies, _ga and _ga_JPYH0CNFWC, to tell visits apart. Google says Google Analytics 4 doesn’t log or store IP addresses. Visit-level data is deleted after the retention period set in our account, at most 14 months.

You can block these cookies in your browser settings or install Google’s opt-out browser add-on. The site works the same without them.

Map, fonts and hosting

The map on our contact page is embedded from Google Maps and loads when you scroll to it. Google may set cookies and collect data through it under Google’s own privacy policy. Our fonts come from Google Fonts, so your browser requests them from Google’s servers, which see your IP address. Netlify, which hosts the site, processes your IP address and browser details to deliver pages and to protect the site from abuse.

What we don’t do

• We don’t sell, rent or trade personal information.
• We don’t use advertising cookies or tracking pixels.
• We don’t put you on a mailing list because you contacted us or called us.

Who handles data for us

• Netlify: website hosting and form submissions
• Google: email (Google Workspace), Google Analytics, Google Maps and Google Fonts
• ElevenLabs: the voice agent, call recordings and transcripts
• Twilio: our phone line
• Cloudflare: the Turnstile bot check
• Attio: our customer relationship system

Some of these providers store or process data outside Canada, including in the United States and the European Union. While it’s there, it’s subject to the laws of those countries, and their authorities may be able to access it.

How long we keep it

• Enquiries, emails and customer records: as long as we need them to respond, work with you and keep our business records. Then we delete them.
• Newsletter: until you unsubscribe.
• Call recordings and transcripts: up to two years at ElevenLabs. The call summary in Attio is kept like other customer records.
• Analytics: at most 14 months.

Your choices and rights

You can ask us to show you the personal information we hold about you, to correct it, or to delete it, and you can withdraw your consent to our using it, for example by unsubscribing. Email hello@2mda.ai with “Privacy” in the subject. We’ll answer within 30 days. We may need to confirm who you are first, and we keep what the law requires us to keep.

If you’re not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to your provincial privacy regulator.

Security

The site is served only over HTTPS, and access to our mailbox, CRM and providers’ accounts is limited to the people at 2MDA.AI who need it. If a breach puts you at real risk of significant harm, we’ll tell you and the Privacy Commissioner, as the law requires.

Using our contact details

Our email address, postal address and phone number are here so that people who want to work with us can reach us. You may not copy, scrape or harvest them, or anything else from this site, into lead lists, contact databases, or any product or dataset that is sold, rented or shared for marketing.

We do not wish to receive unsolicited commercial electronic messages at any address published on this site, including hello@2mda.ai. This statement is made under Canada’s Anti-Spam Legislation (CASL).

Search engines and AI agents

Search engines, AI search and AI assistants are welcome to index this site, quote it and use it to answer people’s questions. Please link to the page you used. AI agents may fill in our contact form or start a call with our voice agent when a person asked them to, using that person’s real details. Our crawler rules are in robots.txt and agents.txt, and a summary of the site for language models is in llms.txt.

Children

This site is for businesses. It isn’t meant for children, and we don’t knowingly collect their information.

Changes to this policy

When we change how we handle personal information, we’ll update this page and the date at the top.

Contact

Privacy questions, requests and complaints go to the person responsible for privacy at 2MDA.AI. Email hello@2mda.ai with “Privacy” in the subject, or write to Privacy, 2MDA.AI, 1 Yonge Street, Suite 1801, Toronto, Ontario M5E 1W7, Canada.