Dashlark Privacy Policy

Last updated: [DATE — set on publication] Effective: [DATE]

Dashlark is operated by Helpy Media ("we", "us"). This policy explains what personal information we collect, why, who we share it with, and what you can do about it.

We have written this in plain language on purpose. If anything here is unclear, ask us — the address is at the bottom.

1. Who is responsible for your information

Helpy Media, Helpy Media inc., 6205 boulevard des Grandes-Prairies, Saint-Léonard, H1P 1A5.

Person in charge of the protection of personal information (Privacy Officer): Louis-Paul Baril, CEO — dashlark@helpymedia.com

Quebec law requires us to name this person publicly. They are accountable for the decisions described in this policy and are your first point of contact for any question or complaint.

2. How Dashlark works, and why that matters for your privacy

Dashlark is unusual, and understanding the shape of it explains most of this policy.

You do not use Dashlark directly. You connect it to an AI agent — Claude, ChatGPT, or another assistant. When you ask that agent to find or book something, the agent sends a request to us, we act on it, and we send a result back to the agent, which relays it to you.

Three consequences follow:

1. Your AI provider is a separate company with its own privacy policy. Anthropic, OpenAI, or whoever operates your agent, sees your conversation. We do not control that, and this policy does not cover it. Read theirs too.
2. We only receive what your agent sends us. Typically that is the request itself — what you are looking for, and the details needed to complete a booking. We do not receive your wider conversation.
3. When you book, the business receives your contact details. They need them to hold the appointment and to reach you. This is covered in section 5.

3. What we collect

Information you give us

We verify your email and phone. This is deliberate: a business receiving a booking made by an AI agent needs confidence that a real, reachable person is behind it. Unverified bookings damage businesses, and we will not send them.

We do not collect payment information. Dashlark never handles payments. Where a purchase is involved, you complete it on the business's own website, under their terms.

We do not collect a delivery address. If you buy something, you give your address to the merchant at their checkout, not to us.

Information created as you use Dashlark

To operate the service and to give businesses insight into demand, we record what happens:

• Searches you make, in normalized form (for example "facial, downtown, Saturday")
• Businesses and products shown to you, and which you chose
• Availability checks, booking attempts, and their outcomes
• Where we place a call on your behalf: the outcome, duration, and what the business said
• Your approximate area — city and neighbourhood only, never precise location

These records are stored against a salted, irreversible hash of your account identifier, not against your name. Your name, email, and phone are held separately and are never joined into the analytics we produce. This is an architectural choice, not just a policy one.

4. Why we use your information

• To do what you asked — find businesses, check availability, make bookings, place calls
• To operate and improve the service — reliability, ranking quality, fixing what breaks
• To give businesses aggregate insight — see section 5 for the limits on this
• To prevent fraud and abuse — including bookings that would waste a business's time
• To meet legal obligations

We rely on your consent, given when you create an account and connect Dashlark to your agent. You can withdraw it at any time (section 8).

We do not use your information for advertising, and we do not sell it.

5. Who we share it with

Businesses you book with

When you book or we call on your behalf, the business receives your name, phone number, and the booking details. They need this to hold the appointment.

Once a business has your information, they control it under their own privacy practices, not ours. We cannot delete it from their systems for you. If you want it removed there, you must ask them directly. We will tell you who to contact.

What businesses do not get

Businesses on Dashlark can see aggregate patterns and their own results. They cannot see:

• Your identity, unless you booked with them
• Your activity with any other business
• Any group smaller than five people — we suppress anything below that threshold, so no aggregate can be traced back to an individual

Service providers

Each is bound by contract to use your information only to provide their service to us.

Everyone else

We do not sell personal information. We may disclose it if legally compelled, and will tell you where we are permitted to.

6. Where your information is stored — and what that means

Your information is stored in the United States. We want to be direct about this rather than bury it.

Our hosting provider does not offer a Canadian region, so the servers holding your data are in the eastern United States. Four companies process your information there on our behalf:

Each is bound by contract to use your information only to provide their service to us.

What this means for you. United States authorities can, in some circumstances, compel a US company to hand over data it holds — including data belonging to people outside the US, and including data stored outside the US if the company controls it. We cannot prevent that, and no company should tell you otherwise.

What we do about it. We have assessed this transfer as Québec law requires, and we limit what is exposed:

• Your name, email, and phone are held separately from our activity records
• Activity records identify you only by an irreversible code, never by name
• When you make a booking, your contact details are held for about fifteen minutes while you confirm, then deleted
• We record only your city and neighbourhood — never your precise location
• We hold no payment information at all

One thing worth knowing about AI agents. When your agent shows you a booking to confirm, that information passes through your AI provider's systems — Anthropic, OpenAI, or whoever operates your agent — which are also outside Québec. That is how connecting an AI agent works, and it applies to everything you ask your agent, not just Dashlark. We keep what we send to the minimum needed for you to check the booking is right.

If you would rather your information not be stored outside Québec, we cannot currently offer that, and you should not use Dashlark.

7. How long we keep it

8. Your rights

You can:

• See what we hold about you
• Correct anything wrong
• Delete your account and personal information
• Receive a copy in a portable, machine-readable format
• Withdraw consent at any time — this stops future collection but does not undo bookings already made
• Ask us to stop disseminating information about you, or to de-index a link to it, where doing so causes you serious injury
• Complain to us, and to the Commission d'accès à l'information du Québec — the regulator, at cai.gouv.qc.ca. You do not need our permission, and you can go to them directly at any time

To exercise any of these, email dashlark@helpymedia.com. We will confirm your identity using the verified email or phone on your account, and respond within the period required by law.

Two honest limits: we cannot retrieve information a business already holds about you, and we cannot delete records we are legally required to keep. We will tell you when either applies.

If you are unsatisfied with our response, you may complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or, elsewhere in Canada, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9. Security

Your information is encrypted in transit and at rest. Access is limited to those who need it. Identifiers in our activity records are irreversibly hashed. We do not store payment details at all, because we never handle payments.

No system is perfectly secure. If a breach creates a risk of serious harm to you, we will notify you and the regulator as the law requires.

10. Our commitment on rankings

We never change the order of results because a business paid us. If we ever introduce paid placement, it will be clearly labelled as such.

We are paid by businesses and we serve consumers, which is a real tension. We are stating our position publicly so you can hold us to it.

11. Children

Dashlark is not for anyone under 18 years old. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.

12. Changes

If we change this policy in a way that materially affects you, we will notify you before it takes effect. The date at the top always reflects the current version.

13. Contact

Privacy Officer: Louis-Paul Baril — dashlark@helpymedia.com Helpy Media, 6205 boulevard des Grandes-Prairies, Saint-Léonard, H1P 1A5

This policy is available in French. In case of any discrepancy, the French version governs.