Privacy Policy

Effective: May 6, 2026

1. Who we are

This privacy policy applies to fish.dog (our marketing site) and the FishDog product at cat.fish.dog, both operated by 17729693 Canada Inc. trading as FishDog, a company registered in Canada at 35 Melbourne Avenue, Toronto, ON M6K 1K4.

For privacy questions, data subject rights requests, or to withdraw consent, contact us at [email protected].

2. What we collect

If you visit fish.dog: Your IP address, browser and device information, pages viewed, referring URL, and approximate location (country/region) inferred from IP. If you accept analytics or advertising cookies, we also receive engagement data via Google Analytics, PostHog, and Reb2b.

If you create an account on cat.fish.dog: Your name, email address, organization, login credentials (hashed), the studies and personas you create, the questions you ask, your usage of the product, and your interactions with our support team.

If you contact us or book a demo: Your name, email, company, and the contents of your message.

If you subscribe to our newsletter: Your email address. The subscription is processed by Beehiiv.

3. How we use it

  • Operate the service — authenticate you, run your studies, process payments, and provide support.
  • Communicate — respond to enquiries, send service announcements, and (with your consent) marketing email.
  • Improve the product — analytics on how visitors use the marketing site and how customers use the product.
  • Security — detect and prevent fraud, abuse, and security incidents.
  • Comply with law — meet legal, regulatory, accounting, and tax obligations.

4. Legal bases (GDPR, UK GDPR, Quebec Law 25)

  • Contract — to provide the service you have signed up for.
  • Consent — for analytics cookies, advertising cookies, marketing email, and any sensitive processing. You can withdraw consent at any time.
  • Legitimate interests — to keep the service secure and to understand aggregate, non-identifying use of fish.dog.
  • Legal obligation — to comply with law enforcement requests, tax law, and similar.

5. Who we share data with

We use third-party processors to deliver the service. We share only what is necessary, and we put data processing terms in place where required by law. Our principal processors are:

  • Google Analytics 4 (Google Ireland / Google LLC, US) — site analytics. Privacy
  • PostHog (PostHog Inc, US) — product and site analytics. Privacy
  • Reb2b (Reb2b Inc, US) — B2B visitor identification on fish.dog. Privacy
  • Intercom (Intercom Inc, US / Ireland) — customer-support messaging on cat.fish.dog. Privacy
  • Cal.com (Cal.com Inc, US) — meeting scheduling. Privacy
  • Beehiiv (Beehiiv Inc, US) — newsletter delivery. Privacy
  • CookieYes (Crispmind Technologies Pvt Ltd) — consent management. Privacy
  • Cloudflare (Cloudflare Inc, US) — content delivery, DDoS protection, bot management. Privacy
  • Heroku / Salesforce (US) — application hosting for cat.fish.dog. Privacy
  • Supabase (Supabase Inc, US) — managed Postgres database for cat.fish.dog. Privacy
  • SendGrid (Twilio Inc, US) — transactional and outbound email. Privacy

We do not sell personal information for monetary consideration. We do share limited information with Reb2b for the purpose of identifying companies visiting fish.dog so our team can follow up. Under California law this counts as "sharing" for cross-context behavioral advertising; you can opt out at any time using the Cookie Settings link in the footer or by sending a Global Privacy Control signal.

6. International transfers

Several of our processors are based in the United States. Where personal data of users in the EEA, UK, or Switzerland is transferred to those processors, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum or Swiss equivalent), and we conduct transfer impact assessments where appropriate.

7. How long we keep data

  • Account data — for as long as your account is active, then up to 12 months after closure (longer where required by law, e.g. tax records).
  • Study data — retained while your account is active. You can delete individual studies at any time.
  • Analytics data — Google Analytics: 14 months. PostHog: 12 months by default.
  • Marketing email — until you unsubscribe.
  • Support conversations — up to 24 months after the conversation closes.
  • Backups — overwritten on a rolling 30-day cycle.

8. Your rights

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your data ("right to erasure")
  • Restrict or object to processing
  • Receive a portable copy of your data
  • Withdraw consent at any time, including via the Cookie Settings link in the footer
  • Lodge a complaint with your local data protection authority

For California residents (CCPA / CPRA)

You have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any "sale" or "sharing" for cross-context behavioral advertising. We honor the Global Privacy Control (GPC) signal as a valid opt-out. Use the "Do Not Sell or Share My Personal Information" link in the footer, or email [email protected], to make a request. We will not discriminate against you for exercising any of these rights.

For Quebec residents (Law 25)

Our designated privacy officer is reachable at [email protected]. You have the right to data portability and the right to have automated processing decisions reviewed by a human.

For UK and EEA residents (UK GDPR / GDPR)

You can lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority in the EEA. We aim to resolve any concerns directly first — please email us at [email protected].

To exercise any of these rights, email [email protected]. We respond within 30 days (extendable in line with applicable law).

9. Cookies

We use cookies and similar technologies on fish.dog and cat.fish.dog. See our Cookie Policy for the full inventory and how to manage your preferences.

10. Security

We use industry-standard administrative, technical, and physical safeguards to protect personal data, including encryption in transit and at rest, access controls, and security monitoring. No system is perfectly secure; if we become aware of a personal data breach affecting you, we will notify you and the relevant authority in line with our legal obligations.

11. Children

Our services are not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the website and, where appropriate, by email. The "Effective" date above will always reflect the current version.

13. Contact

17729693 Canada Inc. (FishDog)
35 Melbourne Avenue
Toronto, ON M6K 1K4
Canada

Email: [email protected]