Privacy Policy

How Autonomous Head Office Inc. collects, uses, shares, and protects your information.

Last updated: October 28, 2026

Our privacy commitment

Everything you share with Extend — your content, your customer and company data, and anything you upload — belongs to you. We use it only to generate your own marketing outputs. We do not access it for our own purposes, sell it, or use it to train AI models. The only thing we learn from your activity is anonymized, aggregated insight into which strategies work for which industries — never tied to you, your company, or the people and businesses in your data.

1. Who we are

Extend Marketing (“Extend”, “we”, “us”) is an AI marketing platform operated by Autonomous Head Office Inc., 224 King St West, Unit 2505, Toronto, Ontario, Canada M5H0A6. “Extend Marketing” is a brand and trading name of Autonomous Head Office Inc.; “Extend”, “we” and “us” mean Autonomous Head Office Inc. This policy explains what personal data we handle when you use the platform and the choices you have over it.

If you have questions about this policy or how your data is handled, contact us at info@extendmarketing.ai.

2. Information we collect

We keep this deliberately minimal. We collect only what we need to run your account and deliver the service:

  • Account data. Your email address and a securely hashed password. We never store your password in readable form.
  • Billing data. Subscription tier and payment status. Card details are collected and processed by our payment processor, Stripe; we do not store full card numbers on our servers.
  • Technical data.A session cookie that keeps you signed in, and the basic request information any web server receives. See “Cookies” below.

What you put into the platform stays yours. Everything below is stored in your account so the agents can produce your outputs. We do not read, mine, sell, or repurpose it, and we do not use it to train AI models:

  • Your content. Product descriptions, target audiences, briefs, brand details, and anything else you enter to generate plans, copy, creatives, and audits.
  • Your customer and company data.Any business data you upload or enter — including customer and contact lists, company details, and other records — is used only to produce your own outputs. For an uploaded contact or lead file, that means a distribution summary (common job titles and industries, and the row count) for your own run; the raw file and the people in it remain yours. See “Your data stays yours” below.
  • Connected ad-platform credentials. If you connect an advertising account, the access token is encrypted with AES-256-GCM using a key held separately from the data, and is decrypted only for the duration of a sync request.
  • Support and feature requests. The content of any suggestion you choose to submit, which may be emailed to our team for review.

3. How we use your information

  • To provide the service: run the agents, generate and store your plans and creatives, and keep you signed in.
  • To process your subscription and enforce plan quotas.
  • To respond to support requests and review feature suggestions.
  • To secure the platform, prevent abuse, and meet legal obligations.

We do not sell your personal data, do not use it for advertising profiling, and do not read or repurpose the content, contact lists, or company information you share. What you create and upload is there for you.

Any marketing emails we send comply with applicable anti-spam laws, including Canada’s CASL and the US CAN-SPAM Act: we send them only where we have the consent the law requires, identify ourselves, and include an unsubscribe link in every one.

4. The one thing we learn: anonymized outcomes by industry

To understand which marketing strategies actually perform, we may analyze whether a strategy worked for a given industry— for example, which approaches tend to succeed for SaaS, retail, or professional services.

This is aggregated and anonymized. It records the type of strategy and the industry it ran in, stripped of anything that identifies you, your company, or the people and businesses in your data. It is never linked back to an individual account, and it never includes your customer data or the content of your plans. We use it only to improve the quality of the recommendations the platform makes.

5. AI processing and sub-processors

Extend is built on third-party AI models. When you run a plan, revision, audit, or creative, the content you provide is sent to our AI providers for text and image generation. They act as our sub-processors, and we use them under their paid, commercial API terms — under which the content you submit through Extend is not used to train their models — and we do not enable any setting that would allow it to be. Providers may retain submitted content briefly to detect and prevent abuse, and then delete it.

The specific providers we use are named, and kept current, in Annex III of our Data Processing Agreement. We recommend you do not paste sensitive personal data into generation inputs.

6. Other service providers we share data with

We share data only with the service providers that run the platform, and only to deliver the service: our payment processor, our hosting and email providers, and any advertising platforms you choose to connect (and those only when you ask us to sync). The current list of these sub-processors is maintained in Annex III of our Data Processing Agreement.

We may also disclose data where required by law, or in connection with a merger or acquisition, in which case we will notify you.

7. Your data stays yours

The customer data, contact lists, company information, and any other business data you share stay yours. They are used only to generate your own outputs — for example, a contact or lead list is reduced to an aggregate distribution summary for your own run. Your data is not accessed by our team for other purposes, shared with anyone, sold, or used to train AI models.

Because data you upload may contain personal information about third parties, you are the controller of that data and Extend acts as a processor on your instructions, and you are responsible for having a lawful basis to upload it. If you require a Data Processing Agreement, contact us at info@extendmarketing.ai.

9. Data retention

We keep your account data, content, and generated plans for as long as your account is active. After you close your account, we retain them for up to 1 year and then delete or anonymize them, unless we must keep them longer to meet a legal obligation (for example, billing and tax records). If you ask us to delete your data, we do so within 30 days of your request. The anonymized, industry-level outcome data described in section 4 contains no personal data and may be retained after your account is closed.

10. Your rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent. California residents may request access to and deletion of their personal information and are entitled not to receive discriminatory treatment for exercising these rights. Canadian residents have rights under Canada’s PIPEDA, including to access and correct their personal information and to withdraw consent.

To exercise any of these rights, email info@extendmarketing.ai. We will respond within the time required by applicable law. You also have the right to complain to your local data protection authority.

11. Security

We protect your data with measures including encryption in transit, hashed passwords, and encryption of connected ad-platform credentials with keys stored separately from the data. No system is perfectly secure, but we work to protect your information and to limit who can access it.

12. International transfers

We and our sub-processors may process your data in the United States and other countries whose data protection laws differ from yours. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

13. Cookies

We use a strictly necessary session cookie to keep you signed in, and our payment processor may set cookies needed to complete checkout. We do not use advertising or cross-site tracking cookies.

14. Children

Extend is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you.

16. Contact us

Autonomous Head Office Inc.
224 King St West, Unit 2505, Toronto, Ontario, Canada M5H0A6
info@extendmarketing.ai

Back to home