Privacy Policy

Last updated: October 15, 2026

This policy explains how Zabor Inc. (“we”, “us”), a Canadian corporation, collects, uses, shares and protects information when you use the MyDataHaus website at mydata.haus and the MyDataHaus service (together, the “Service”). If you have questions, email support@mydata.haus.

1. Information we collect

Account information

Your name, email address and sign-in details when you create an account, and the name of any business or household workspace you set up.

Data from services you connect

When you choose to connect another service — for example accounting, payments, commerce, point-of-sale, banking, scheduling, customer-relationship, analytics, spreadsheet or email services — you authorize us to read data from that service on your behalf. Depending on the service, this can include transactions, invoices, bills, orders, products, customers and contacts, appointments, reports and spreadsheet contents. We request read-only access wherever the service offers it. We access only the services you connect, and only the data needed to provide the features you use.

Content you create

Dashboards, notes, settings and the messages you send to the Service's assistant.

Technical information

Information our servers record when you use the Service, such as IP address, browser and device type, and timestamps, used for security, troubleshooting and keeping the Service running. The mydata.haus website sets no cookies and uses no analytics or advertising trackers. The Service uses only the cookies needed to keep you signed in and secure.

2. How we use information

• To provide the Service: syncing your connected data, building dashboards, and producing summaries and insights about it.
• To keep the Service secure, prevent abuse, and fix problems.
• To communicate with you about your account and the Service, and to answer your requests.
• To create anonymized statistics about groups of businesses, as described in section 3.
• To meet legal obligations.

We do not sell your information. We do not use your connected data for advertising, and we do not use it to train generalized artificial-intelligence or machine-learning models.

3. Anonymized, aggregated statistics

We may produce anonymized statistics about groups of businesses — for example, the average number of customers for businesses in a particular industry and general region — and use them for benchmarks and market insights in the Service, to improve the Service, and to publish or share market-level findings.

These statistics are anonymized before they are created. This is how:

• Only non-identifying fields are used. A statistic is calculated from fields such as industry, general region (a province, state or metropolitan area — never an address) and business size range. Names, contact details, account identifiers and information about your customers as individuals are never part of it.
• Only group figures are kept. We keep the result, such as an average or a total, and not the individual business records behind it.
• Small groups are never reported. A figure is produced only when it combines data from at least five businesses, so no single business can be identified or worked out from it.
• No re-identification. We don't attempt to identify any business from these statistics, and we require anyone we share them with not to either.

We include data from a connected service in these statistics only where that service's terms allow it. We never include data obtained through Google APIs (see section 5).

4. AI features

Some features use AI models to answer your questions and write insights about your data. To do this, we send the specific data needed for a request to AI model providers that process it on our behalf as service providers. We use these providers' business and API offerings and, where they offer the choice, configure them so your data is not used to train their models. AI-generated content can be wrong; please check anything important before relying on it.

5. Google user data

If you connect a Google service (such as Google Sheets, Google Drive, Gmail or Google Calendar), we use the Google data you authorize only to provide the features you use in the Service.

• MyDataHaus’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• We do not use Google user data for advertising, and we do not sell it.
• We do not transfer Google user data to others except as needed to provide or improve the features you use, for security, to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Google user data to develop, improve or train generalized AI or machine-learning models, and we do not include it in aggregated statistics or benchmarks.
• People at Zabor Inc. do not read your Google user data unless you give us permission, it is necessary for security purposes, or it is required by law.

6. How we share information

We share information only:

• With service providers that help us run the Service — for example hosting, data storage, email delivery, AI model processing, and data-connection providers you choose to use — under agreements that limit their use of it to providing services to us.
• With other members of a workspace you share, according to the access you give them.
• When required by law, or to protect the rights, safety and security of our users, the public or us.
• In connection with a merger, acquisition or sale of assets, with notice to you.
• As anonymized statistics about groups of businesses, which identify no one (section 3).
• With your consent.

7. Security

We encrypt data in transit, encrypt the credentials and access tokens for your connected services before storing them, and limit internal access to the systems that hold your data. No method of storage or transmission is perfectly secure, but we work to protect your information and will notify you as required by law if a breach affects it.

8. Retention and deletion

We keep your information while your account is active. You can disconnect a service at any time, which stops further access to it. If you delete your account, or ask us to delete it by emailing support@mydata.haus, we delete your account and connected data within a reasonable period, generally within 30 days, except where we must keep certain records to meet legal obligations or resolve disputes. Backups are overwritten on a rolling schedule. Anonymized statistics already created (section 3) may be kept, because they identify no one.

9. Your choices and rights

You can access, correct, export or delete your information, withdraw your consent, and disconnect any connected service. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. Depending on where you live, you may have additional rights, such as to object to or restrict certain processing, and you may complain to the Office of the Privacy Commissioner of Canada or your local privacy regulator. To make a request, email support@mydata.haus. We won't treat you differently for exercising your rights.

10. International transfers

We are based in Canada. We and our service providers may store and process information in Canada, the United States and other countries, where it may be accessible to authorities under those countries' laws. We use contractual and other safeguards for those transfers.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information.

12. Changes to this policy

We may update this policy. We will post the new version here with a new date and, for significant changes, notify you by email or in the Service.

13. Contact

Zabor Inc. is responsible for personal information under its control. Questions, requests and complaints go to our privacy contact: support@mydata.haus.