Privacy Policy

Last updated: August 21, 2026

1. Who is responsible for your information

Ignite 5ive (“Ignite 5ive”, “we”, “us”) operates the website at ignite5ive.com and the Ignite Machines application at machine.ignite5ive.com. Ignite 5ive is established in Quebec, Canada.

This policy is governed by Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and by Quebec's Law 25 (An Act to modernize legislative provisions as regards the protection of personal information).

Person in charge of the protection of personal information:
Rodrigo De Saro —

Write to that address to exercise any of the rights in section 12, or to ask anything at all about this policy.

2. Two distinct roles (this part matters)

Ignite 5ive handles personal information in two very different capacities, and your rights differ depending on which one applies.

a) As the controller

When you visit the site, submit a form, email us or open an account, we decide what gets collected and why. There we are the controller, and this policy applies to you directly.

b) As a service provider (mandatary)

When your company hires a Machine, everything you load into it — your projects, your documents, your contacts, your own customers' information — remains yours. We process it solely to run the service, on your instructions. In that case your company is the controller, not Ignite 5ive.

3. What information we collect

Website visitors

Our hosting provider (DreamHost) generates standard server logs — IP address, timestamp, page requested, browser — used for security and troubleshooting.

We use Google Analytics 4 to understand how the site is used, and Google Ads to measure our campaigns and show Ignite 5ive ads to people who have already visited us (remarketing). Both set cookies and send information to Google: your IP address, the pages you view, where you arrived from, and a random browser identifier. The full breakdown, and how to turn them off, is in section 5.

The site is served through Cloudflare's network, which sits between your browser and our server. Cloudflare processes each request to protect us from attacks and speed up delivery, and has Cloudflare Web Analytics enabled: an aggregate visit count that uses no cookies and no browser fingerprinting. It does not identify individuals or follow you across sites.

Contact and access-request forms

When you complete the contact form or the access request form, we collect: name, work email, company, website, the Machine you are interested in, your answers to the qualifying questions, the budget range you selected, and your timing. That information is emailed to us and stored in a web-protected file on the server.

Machine account holders

Display name, email address, profile photo if you upload one, workspace role, per-product access permissions, notification preferences, and activity records (who did what, and when).

Content you load into the Machines

Depending on which Machines you use, this can include project cards, comments, file attachments, time entries, documents uploaded to the knowledge base, newsletter contact lists, content drafts, images, voice notes and conversations with the assistants.

Credentials and third-party connections

If you connect LinkedIn, Facebook, Instagram, Google Analytics, Google Search Console or Google Calendar, we store the access tokens required to operate that connection. Social tokens are stored encrypted (AES-256-GCM); the database never sees the plaintext value. We never receive or store your password for those platforms.

Voice notes

If you dictate instead of typing, the audio is sent to OpenAI for transcription and is not retained after the text is produced.

Email sending

If you use the Marketing Machine to send newsletters, we process the addresses on your list and the resulting delivery events: bounces, complaints, opens and clicks.

4. Why we collect it

• To deliver the service — run the Machines, store your work, produce the drafts and analyses you asked for.
• To authenticate you — keep you signed in and protect your account.
• To answer requests — assess whether what you need matches what we do, and follow up with you.
• Support — investigate problems you report.
• Billing — charge the subscription.
• Measurement and advertising — understand which content works, measure campaign conversions, and show Ignite 5ive ads to people who have already visited the site.
• Security — detect abuse, spam and unauthorized access.
• Legal obligations — retain what the law requires us to retain.

We collect only what those purposes require. If we ever wanted to use your information for something different, we would ask you first.

Consent

We rely on your consent when you submit a form or connect a third-party account, and on contractual necessity once you are a client. You may withdraw consent at any time by writing to — bear in mind that withdrawing it may prevent us from continuing to deliver part of the service.

5. Cookies and tracking technologies

The site uses first-party and third-party cookies. Here is each one, what it does, and which category it falls into.

How to turn them off

Necessary cookies cannot be disabled without breaking the site. Analytics and advertising cookies can, and you can do it yourself at any time:

• Your browser — every browser can block or clear cookies and block third-party cookies. This is the most complete route.
• Google Analytics — install the Google Analytics opt-out browser add-on, which disables it on every site you visit.
• Personalized Google ads — turn them off at myadcenter.google.com.
• Advertising generally — youronlinechoices.com and optout.aboutads.info handle opt-outs across many networks at once.

Turning off analytics or advertising has no effect at all on your use of the site or the Machines.

Profiling (section 8.1 of Law 25)

Plainly: the Google Ads advertising cookies are profiling technology. Their job is to recognize your browser and show you our ads after you have visited the site. We do not use biometric identification or precise geolocation technology.

You can switch that profiling off by any of the methods above, without giving a reason and without losing any functionality.

6. How artificial intelligence is used

The Machines use third-party AI models to draft content, analyse your site's data, transcribe voice, generate images and answer questions about your documents. For that to work, the relevant content is sent to those providers through their APIs.

• Under the API terms of Anthropic and OpenAI, content submitted through the API is not used to train their models.
• We log metadata for each AI call (which model, how many tokens, success or failure) for cost control and troubleshooting.
• Model output can be wrong. It always requires your review before it is published or acted on. Nothing publishes itself without someone approving it.

7. Providers that process information for us

We work with providers that process personal information on our behalf, only on the instructions we give them and under a duty of confidentiality. These are the ones in use:

We may also disclose information where the law requires it, to respond to a valid legal order, or to protect our rights or people's safety. If Ignite 5ive were sold or merged, information could transfer as part of that transaction; we would notify you before the handling of your information changed.

8. Information stored outside Quebec

Being plain about this: your information is stored and processed outside Quebec, primarily in the United States. Our main database is hosted in the Oregon region (us-west-2), and our AI, email and hosting services operate from the United States.

That means the information may become subject to the laws of those jurisdictions and accessible to their authorities under local legal process. Before adopting each provider we assess how it treats personal information, in line with section 17 of Law 25, and we enter into the data processing agreements they offer.

If that is a blocker for your company, tell us before you sign and we will talk it through.

9. Automated decisions

We do not make decisions based exclusively on automated processing that produce legal effects concerning you or significantly affect you.

The Machines produce suggestions — drafts, priorities, diagnoses, recommended tasks — but a person always reviews and decides. Were that to change, we would tell you, and you would have the right to know what information was used and the principal factors considered, and to submit observations to a person able to review the decision.

10. How long we keep it

Once the period elapses, the information is deleted or irreversibly anonymized.

11. How we protect it

• Encryption in transit (TLS) across the entire site and application.
• Encryption at rest at the database and storage layer.
• Social platform tokens are encrypted with AES-256-GCM before they ever reach the database.
• Workspace isolation enforced in the database: every query is filtered by row-level security policies, so one workspace cannot read another's data.
• Invitation-only access with per-product and per-client permissions.
• Audit logging of sensitive actions.
• Credentials held in encrypted environment variables, never in source code.

No system is infallible and we will not promise the impossible. What we do commit to is maintaining measures that are reasonable and proportionate to the sensitivity of the information.

12. Your rights

Under PIPEDA and Law 25 you may exercise the following rights:

• Access — learn what information we hold about you and obtain a copy.
• Correction — correct information that is inaccurate, incomplete or ambiguous.
• Withdrawal of consent — stop authorizing a given processing, going forward.
• Portability — receive the information you provided to us in a structured, commonly used technological format.
• De-indexing — ask us to stop disseminating personal information, or to de-index a link that disseminates it, where that dissemination causes serious injury to your reputation or privacy.
• Information about automated decisions — as described in section 9.

How to exercise them

Write to with the subject “Privacy request”. We respond within 30 days. We may ask you to verify your identity before releasing information. There is no charge, unless producing a copy requires transcription or reproduction at a cost — in which case we tell you the amount first.

If you are not satisfied

If our response does not satisfy you, you may complain to the relevant authority:

• Commission d'accès à l'information du Québec — cai.gouv.qc.ca
• Office of the Privacy Commissioner of Canada — priv.gc.ca

13. Confidentiality incidents

We maintain a register of confidentiality incidents. If one occurs that presents a risk of serious injury, we will promptly notify the Commission d'accès à l'information du Québec and the individuals concerned, and we will also inform the client company where the incident involves information it entrusted to us.

14. Minors

The Ignite Machines are business tools. They are not directed at children under 14, and we do not knowingly collect information from minors. If we discover we have received a minor's information without the required consent, we delete it.

15. Changes to this policy

We may update this policy as the way we operate changes. The last-updated date appears at the top of the page. Where a change is material — a new purpose, say, or a new provider with access to personal information — we notify account holders by email at least 30 days in advance.

16. Contact

For any privacy question, request or complaint:

Rodrigo De Saro
Person in charge of the protection of personal information
Ignite 5ive — Quebec, Canada

See also our Terms of Service.