Privacy Policy

Last updated: October 14, 2026

1. Information We Collect

We collect information you provide directly to us, including:

  • Contact information (name, email address, phone number)
  • Business information (number of locations, annual revenue, operational costs)
  • Current software and technology usage
  • Appointment scheduling preferences

We also automatically collect certain information when you use our services:

  • Device and browser information
  • IP address and location data
  • Usage data and analytics
  • Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Schedule and manage appointments and consultations
  • Send you marketing communications (with your consent)
  • Analyze usage patterns to improve user experience
  • Comply with legal obligations
  • Protect against fraud and unauthorized access

3. Information Sharing

We may share your information with:

  • Service Providers: Third-party vendors who assist in providing our services (e.g., CRM systems, analytics providers, scheduling tools)
  • Business Partners: With your consent, we may share information with partners who offer complementary services
  • Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

4. AI Assistant Connections

You can connect an AI assistant, such as ChatGPT or Claude, to your MarginX account. Nothing is shared with an assistant unless a person with the MCP permission signs in and approves the connection.

  • What the assistant can read: the business records your role allows, at the locations you choose when connecting, for the kinds of data you approve. These can include sales and food and labour cost figures, schedules and clock-in hours, inventory and purchasing, recipes and their costs, portion audits and reservations. Pay rates and wages, and guests' contact details, are shared only if you approve those specifically; the MarginX plugin for ChatGPT does not request them.
  • Who receives it: the assistant's provider (for example OpenAI for ChatGPT, or Anthropic for Claude) receives the answers to your questions, and their own privacy policy governs what happens to them in your conversation. MarginX does not receive your conversation.
  • What MarginX keeps: a record of the connection (which assistant, the permissions and locations approved, and when), short-lived access credentials that expire after one hour and renewal credentials that expire after 30 days of non-use, a log of which tools the assistant used and whether they succeeded (without the content of the answers), and an audit record of anything the assistant creates, such as a draft shift.
  • Your controls: you choose the locations and kinds of data when connecting, and you can disconnect at any time in the assistant's settings, after which it can no longer renew its access. To have us revoke a connection, contact privacy@marginx.ca.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and audits
  • Access controls and authentication measures
  • Employee training on data protection

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete information
  • Request deletion of your personal information
  • Object to or restrict certain processing activities
  • Data portability
  • Withdraw consent at any time

To exercise these rights, please contact us at privacy@marginx.ca.

7. Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Analyze site traffic and usage patterns
  • Deliver targeted advertising
  • Measure the effectiveness of our marketing campaigns

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our services.

8. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce agreements

When no longer needed, we securely delete or anonymize your information.

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: