Legal

Polisi Preifatrwydd

Yn Inception, credwn fod preifatrwydd yn hawl sylfaenol. Mae'r polisi hwn yn amlinellu ein hymrwymiad i amddiffyn eich gwybodaeth bersonol a chynnal tryloywder llwyr yn ein harferion data.

Diweddarwyd Diwethaf · July 27, 2026Canada

Scope: Websites, Mobile Apps, and Extension

Note: The most recent additions to this policy are shown in English while translations are prepared. The English version is authoritative for these sections in the meantime.

This policy covers every way you can use Inception:

  • Our websites, including each regional domain we operate
  • The "Inception" mobile applications for iOS (App Store) and Android (Google Play). The apps deliver the same service from a dedicated origin, app.inceptionia.com, so everything in this policy applies equally inside the apps; app-specific practices are described in the "Mobile Applications" section below.
  • The Inception Chrome extension (see the dedicated extension section below)

Ein Hegwyddorion Preifatrwydd Craidd

1. Dim Hyfforddiant AI ar Ddata Defnyddwyr

We never use your searches or interactions to train artificial intelligence models, and we access AI providers through business APIs whose terms do not permit them to train on our requests.

2. No Cross-Site Tracking or Data Sales

We never sell personal information and never track you across other websites. Our analytics identifiers are first-party cookies set only after you consent, and the only profile we build — an anonymous interest summary used to improve your own results — exists only with your consent and is deleted the moment you withdraw it.

3. Casglu Data Lleiaf Posibl

Dim ond yr hyn sy'n gwbl angenrheidiol ar gyfer ymarferoldeb y gwasanaeth rydym yn ei gasglu. Nid oes angen gwybodaeth bersonol i ddefnyddio ein platfform.

4. Tryloywder Llwyr

Mae'r polisi hwn yn amlinellu'n glir pa ddata rydym yn ei gasglu, sut rydym yn ei ddefnyddio, a'ch hawliau ynghylch y data hwnnw. Rydym yn cynnal tryloywder llwyr yn ein harferion.

Yr Hyn Nad Ydym yn ei Gasglu na'i Storio

  • Personal information for sale or rental — we never sell your data to anyone
  • Cross-site or advertising tracking data — our identifiers work only on our own sites and apps
  • Precise geolocation — we derive at most a country or region from your connection, never GPS-level location
  • Biometric identifiers
  • Raw IP addresses in our analytics — server-side counting uses a hash that rotates every 24 hours instead
  • Chat conversations on our servers — search-chat transcripts are kept only in your own browser

Polisi Cwcis a Chasglu Data

Rydym yn defnyddio cwcis lleiaf posibl ac mae gennych reolaeth lawn dros eich dewisiadau.

Cwcis Hanfodol (Gofynnol)

Mae'r cwcis hyn yn angenrheidiol i'r platfform weithio ac ni ellir eu hanalluogi. Maent yn galluogi ymarferoldeb sylfaenol gan gynnwys:

  • Llywio a llwybro tudalennau
  • Dewisiadau iaith a rhanbarth
  • Dewisiadau thema weledol (modd golau/tywyll)
  • Dewisiadau caniatâd cwcis

Storage Method: These preferences are kept in local browser storage on your device and are not sent to our servers.

Cwcis Dadansoddol (Dewisol - Angen Caniatâd)

With your explicit consent, we measure how the service is used through two consent-gated mechanisms: our own first-party analytics (see the "First-Party Analytics" section below) and Google Analytics, which collects aggregated usage statistics:

  • Cyfanswm nifer yr ymwelwyr (nid defnyddwyr unigol)
  • Tudalennau a chategorïau cynnwys poblogaidd
  • Hyd sesiwn cyfartalog
  • Patrymau llywio cyffredinol
  • Ffynonellau cyfeirio (o ble mae ymwelwyr yn dod)

Amddiffyniadau Preifatrwydd ar gyfer Dadansoddiad

  • Dienw IP: Mae pob cyfeiriad IP yn cael ei wneud yn ddienw cyn ei brosesu
  • Google Analytics: Mae nodweddion hysbysebu ac ailfarchnata wedi'u hanalluogi yn ein ffurfweddiad
  • Dim tracio traws-ddyfais: Mae Google Signals ac adrodd traws-ddyfais wedi'u hanalluogi
  • Data cyfanredol yn unig: Mae'r holl fetrigau wedi'u cyfanredu ac ni allant adnabod unigolion
  • Dim hyfforddiant AI: Ni chaiff data dadansoddol ei ddefnyddio ar gyfer dysgu peirianyddol na hyfforddi modelau

Gallwch wrthod cwcis dadansoddol heb unrhyw effaith ar ymarferoldeb y gwasanaeth.

First-Party Analytics

In addition to — and independently of — Google Analytics, we run our own first-party measurement pipeline. It uses no third-party advertising identifiers and works in two modes:

  • _iai_v — a first-party visitor cookie (random UUID) valid for 13 months. It is set only after you consent to analytics cookies, never before.
  • _iai_s — a first-party session cookie (random UUID) with a rolling lifetime of about 30 minutes. Also set only with analytics consent.

Separately from those cookies, our edge servers record consent-independent, cookieless traffic events (page requests, redirects, and similar). To count unique visits without identifying anyone, these events carry a server-side hash derived from your IP address and browser signature combined with a secret and the current date: the hash rotates every 24 hours, cannot be reversed into your IP address, and is never joined across days. We rely on legitimate interest as the legal basis for this measurement — it exists for security and abuse prevention, capacity planning, and aggregate traffic statistics, and it involves no persistent identifier.

When you click an outbound retailer link, we log the click in this same first-party pipeline (product title, link type, position on the page, and — with consent — your visitor id) so we can tell which recommendations help.

Declining or withdrawing analytics consent means the _iai_v and _iai_s cookies are never written (or are deleted immediately), and only the cookieless, daily-rotating measurement described above continues.

Interest Profiles (Consent-Based Personalization)

If you consent to analytics, we periodically distill your recent activity (such as searches, page visits, retailer-link clicks, and kit or pre-buy interactions) into a compact interest profile: your top categories, brands, and price ranges — capped at 20 entries each, with older activity fading out over a 30-day half-life. The profile is keyed to the random _iai_v identifier, not to your name or email, and is used for one purpose: personalizing your own search conversations and pre-purchase suggestions.

Withdrawing analytics consent deletes your interest profile: the revocation signal removes the profile row from our database, and deletions always take precedence over pending updates.

Searches Can Create Public Pages

Inception is a search engine that builds its own results: when you type a search, the service may generate a new, publicly accessible page that addresses your query — visible to other visitors and to search engines. The text of your query shapes that public page. For this reason, never include personal information (names, addresses, health details, or anything else about you or others) in a search query.

Search queries are processed by the AI providers listed in the "Service Providers" section to interpret them and assemble results, and queries may be retained in our systems: consented analytics events include the search text, and generated pages derived from queries persist as public content.

If a personal detail ends up in a search-generated public page, contact privacy@inceptionai.ca and we will remove it.

Eich Hawliau Preifatrwydd

O dan UK GDPR a'r Privacy and Electronic Communications Regulations (PECR), mae gennych hawl i'r canlynol:

Hawl i Wybodaeth

Mae gennych yr hawl i wybod pa wybodaeth bersonol rydym yn ei chasglu a sut y caiff ei defnyddio.

Hawl Mynediad

You may request access to any personal information we hold about you, including a copy in a portable format.

Hawl i Gywiro

Gallwch ofyn am gywiro unrhyw wybodaeth bersonol anghywir.

Hawl i Dynnu Caniatâd yn Ôl

You may withdraw your analytics consent at any time (through your cookie preferences, or by clearing your browser storage for this site). Withdrawal immediately removes the _iai_v and _iai_s cookies and deletes any interest profile associated with them.

Hawl i Gyflwyno Cwyn

Gallwch gyflwyno cwyn i Swyddfa Comisiynydd Preifatrwydd Canada os credwch fod eich hawliau preifatrwydd wedi'u torri.

Access, Export, and Deletion of Your Data

You can access, export, or delete the personal information we hold, whether or not you have an account:

  • By email: write to privacy@inceptionai.ca from the address concerned (or describe the data in question) and we will respond within 30 days.
  • In the mobile app: Settings → Delete account permanently deletes your account and the data tied to it, including push-notification registrations.
  • Anonymous visitors: withdrawing analytics consent deletes your analytics identifiers (cookies) and your interest profile — no request needed.
  • Chat history: your search conversations live in your own browser; clear your browser data (or the app's data) to erase them.

This section is the account- and data-deletion notice for the Inception mobile apps. Deletion requests are honored for all users, with narrow exceptions where the law requires retention.

Gwasanaethau Trydydd Parti

Google Analytics

Pan fyddwch yn caniatáu cwcis dadansoddol, mae Google Analytics yn prosesu data defnydd dienw ar ein rhan. Mae'r holl ddata wedi'i ffurfweddu gydag amddiffyniadau preifatrwydd uchaf fel y disgrifir uchod.

Google AdSense

Pan fyddwch yn caniatáu cwcis hysbysebu, gallwn arddangos hysbysebion drwy Google AdSense. Dim ond ar ôl eich caniatâd penodol y bydd AdSense yn llwytho. Gallwch dynnu eich caniatâd yn ôl ar unrhyw adeg.

Amazon Associates

As an Amazon Associate, Inception earns from qualifying purchases. We also participate in other retailer affiliate programs. When you click a product link you are taken to the retailer's site, where their privacy policy applies; the retailer does not send us personal information about what you do there. We record the click itself in our own analytics (product title, link type, and the page it happened on) to understand which recommendations are useful and to earn our commission.

Vercel (Darparwr Seilwaith)

Mae ein platfform wedi'i letya ar seilwaith Vercel. Maent yn prosesu logiau gweinydd sylfaenol (gan gynnwys cyfeiriadau IP) at ddibenion diogelwch. Caiff y logiau hyn eu dileu'n awtomatig ar ôl 24 awr.

Service Providers (Sub-Processors)

We rely on the following providers to run the service. Each receives only what its function requires:

  • Vercel — hosting, CDN, and edge infrastructure (processes server logs, including IP addresses, to serve and secure requests)
  • Supabase — our primary database (analytics events, interest profiles, product data, content reports, push-device registrations)
  • Google Firebase — authentication for optional sign-in
  • Algolia — search indexing and querying
  • Google Analytics — consent-gated web analytics
  • AI providers: Anthropic, Google, and OpenAI — interpret search queries and conversations, transcribe voice input (OpenAI), and generate page content
  • ElevenLabs and OpenAI — text-to-speech for article narration
  • Google (Gmail / Google Workspace SMTP) — transactional email delivery (for example, contact-form and job-application emails)
  • Amazon — product data via the Amazon Product Advertising / Creators APIs; we send product identifiers, never your personal information

Mesurau Diogelwch Data

We minimize what we store and protect what remains with the following measures:

  • All connections use HTTPS/TLS encryption
  • Analytics identifiers are random UUIDs; server-side traffic counting uses a salted hash that rotates every 24 hours instead of storing IP addresses
  • Databases are protected by row-level security; application data is accessible only to service credentials, never directly to visitors
  • Interest profiles are keyed to a random identifier — not to your name or email — and are deleted on consent withdrawal
  • Access to production systems is restricted and credential-protected

Rheoli Eich Dewisiadau Cwcis

Rydych yn cadw rheolaeth lawn dros eich dewisiadau cwcis drwy'r dulliau canlynol:

  1. Baner Caniatâd Cychwynnol: Ar eich ymweliad cyntaf, mae baner caniatâd yn cynnig opsiynau i dderbyn, gwrthod, neu addasu dewisiadau cwcis.
  2. Newid Dewisiadau: Cliriwch storfa leol eich porwr i ailosod dewisiadau a dangos y faner caniatâd eto.
  3. Gosodiadau Porwr: Gallwch analluogi cwcis yn gyfan gwbl drwy osodiadau eich porwr, er y gallai hyn effeithio ar rai ymarferoldeb.

Mobile Applications (iOS and Android)

The Inception apps embed the same service described throughout this policy, served from the dedicated origin app.inceptionia.com. A few practices are specific to the apps:

  • Sign-in uses the native Google or Apple flows; we receive an authentication token, never your password.
  • The camera / photo-library picker prepares images on your device (downscaled and re-encoded) before anything is transmitted — see "Voice and Image Search".
  • Your saved items ("saved shelf") are stored locally on your device so they work offline.
  • Retailer links open outside the app in your browser; what happens on the retailer's site is governed by their privacy policy.

Push Notifications

If you enable push notifications in the app, we store your device's push token (with platform, language/region, and app version) solely to deliver the notifications you asked for. Tokens are removed when you disable notifications, when the token becomes invalid (for example, after you delete the app), or when you delete your account. We never use push tokens for advertising or tracking.

Report-Content Submissions

When you report a page (from the apps or the web), we store the page URL, the reason you selected, any optional text you add, and a daily-rotating hash of your IP address used only to prevent abuse of the report form — we never store the raw IP address. If you consented to analytics, your anonymous visitor id may accompany the report. Reports are used solely for moderation.

Estyniad Chrome - Inception Shopping Agent

Os ydych yn defnyddio ein hestyniad Chrome, mae'r arferion preifatrwydd ychwanegol canlynol yn berthnasol. Mae'r estyniad yn gweithio gyda chaniatâd penodol ac yn rhoi rheolaeth lawn i chi dros eich data.

Casglu Data (Gyda'ch Caniatâd Penodol)

  • URLau cynnyrch rydych yn dewis eu dadansoddi ar dudalennau Amazon
  • Gwybodaeth cynnyrch (teitlau, prisiau, sgoriau) o dudalennau rydych yn eu dadansoddi
  • Cyfeiriad e-bost (dim ond os ydych yn dewis mewngofnodi ar gyfer cysoni cyfrif)
  • Hanes chwilio wedi'i storio'n lleol ar eich dyfais
  • Gosodiadau a dewisiadau'r estyniad (iaith, modd chwilio)

Storio Data

  • Storfa Lleol: Mae hanes chwilio a dewisiadau'n cael eu storio'n lleol yn eich porwr gan ddefnyddio API storfa ddiogel Chrome. Nid yw'r data hwn byth yn gadael eich dyfais oni bai eich bod yn ei allforio'n benodol.
  • Storfa Gweinydd: Mae ceisiadau dadansoddi cynnyrch yn cael eu prosesu ar weinyddion diogel a'u cadw am 30 diwrnod ar gyfer ymarferoldeb y gwasanaeth.
  • Dilysu: Os ydych yn mewngofnodi, caiff tocynnau dilysu eu storio'n lleol a'u rheoli'n ddiogel gan Firebase Authentication.
  • Cofnodion Caniatâd: Caiff eich dewisiadau caniatâd eu storio'n lleol ac ar ein gweinyddion ar gyfer cydymffurfiaeth gyfreithiol (cadwir am 7 mlynedd fel sy'n ofynnol gan y gyfraith).

Eich Hawliau ynghylch Data'r Estyniad

  • Allforio Eich Data: Lawrlwythwch eich holl ddata estyniad ar ffurf JSON drwy'r dudalen Gosodiadau yn y ffenestr naid estyniad.
  • Dileu Eich Data: Dilëwch eich holl ddata'n barhaol (lleol a gweinydd) drwy'r dudalen Gosodiadau neu drwy gysylltu â ni.
  • Tynnu Caniatâd yn Ôl: Tynnwch eich caniatâd yn ôl ar unrhyw adeg drwy'r dudalen Gosodiadau. Bydd hyn yn analluogi ymarferoldeb yr estyniad.
  • Mynediad at Eich Data: Gofynnwch am gopi o'r holl wybodaeth bersonol sydd gennym amdanoch drwy'r nodwedd allforio neu drwy gysylltu â ni.
  • Cywiro Eich Data: Gofynnwch am gywiro unrhyw wybodaeth bersonol anghywir.
  • Cyflwyno Cwyn: Cysylltwch â'r Office of the Privacy Commissioner of Canada os credwch fod eich hawliau preifatrwydd wedi'u torri.

I arfer yr hawliau hyn, agorwch y ffenestr naid estyniad, ewch i Gosodiadau, a defnyddiwch y botymau "Allforio Fy Nata" neu "Dileu Fy Nata". Gallwch hefyd gysylltu â ni yn contact@inceptionai.ca gyda'ch cais.

Preifatrwydd Plant

Our websites and apps are general-audience shopping research tools and are not directed at children under 16. We do not knowingly collect personal information from children under 16; if you believe a child has provided us with personal information, contact privacy@inceptionai.ca and we will delete it.

Newidiadau i'r Polisi Preifatrwydd Hwn

Gallwn ddiweddaru'r polisi preifatrwydd hwn o bryd i'w gilydd i adlewyrchu newidiadau yn ein harferion neu ofynion cyfreithiol. Pan fydd diweddariadau'n digwydd, byddwn yn cynyddu fersiwn y caniatâd cwcis, gan eich annog i adolygu a derbyn y telerau diwygiedig.

Trosglwyddiadau Data Rhyngwladol

Rydym yn sicrhau bod trosglwyddiadau data rhyngwladol yn cydymffurfio â gofynion UK GDPR, gan gynnwys defnyddio Standard Contractual Clauses (SCCs) lle bo angen.

Hawliau Ychwanegol o dan Gyfraith Leol

UK GDPR Rights

O dan y GDPR, mae gennych hawliau ychwanegol: Hawl i gludadwyedd data; Hawl i wrthwynebu prosesu; Hawl i gyfyngu prosesu; Hawl i beidio â bod yn destun i benderfyniadau awtomataidd; Hawl i gyflwyno cwyn i'ch awdurdod goruchwylio lleol.

Person in Charge of the Protection of Personal Information

Inception is a Québec-based company. In accordance with Québec's Law 25 and PIPEDA, the person in charge of the protection of personal information is: Olivier Leclerc Person in Charge of the Protection of Personal Information privacy@inceptionai.ca You may address any privacy question, request, or complaint to this person. If you are not satisfied with our response, you may lodge a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada (contact details below).

Cyswllt Rheoleiddiwr Preifatrwydd

Information Commissioner's Office (ICO) Ffôn: 0303 123 1113 Gwefan: ico.org.uk E-bost: casework@ico.org.uk

Gwybodaeth Gyswllt

Ar gyfer cwestiynau ynghylch y polisi preifatrwydd hwn neu ein harferion data, cysylltwch â ni:

E-bost: contact@inceptionai.ca

InceptionAI Inc. Swyddfa Preifatrwydd Canada

Canada 2.0

Mae'r polisi preifatrwydd hwn wedi'i gynllunio i gydymffurfio â'r Personal Information Protection and Electronic Documents Act (PIPEDA), Deddf 25 Quebec, a deddfwriaeth preifatrwydd Canadaidd berthnasol arall.