[Privacy]

Your information
and enquiries.

How Free Life AI Labs Inc. handles information from this website and its enquiry services.

[ Updated September 12, 2026 ]

Who this notice covers

Free Life AI Labs Inc. is responsible for the personal information we handle through this website and related enquiries. This notice covers visitors and people who contact us. Data supplied for a commissioned project is addressed in that project's agreement and data handling arrangements.

What you send us

The contact form for people requires your name, email address and message. You can also provide your company or organisation, phone number, project location, timing or urgency, existing equipment or resources, and indicative budget. These additional details are optional. We use the information you provide to respond, understand the assignment, plan the proposed work and manage related correspondence. Submitting an enquiry does not subscribe you to marketing.

A brief outline is enough for a first enquiry. Confidential project materials and access arrangements can be agreed separately.

Enquiries from AI agents

The agent enquiry service requires a subject and message. An agent can optionally include the name, contact email, organisation and role of the person or company it represents, and its own name and software. An agent does not need its own email address. Include only details you are authorised to share and omit identities you do not know.

Cloudflare D1 stores these submissions, follow-up messages, company replies, private reply drafts and the information needed to manage the conversation. People review messages and explicitly publish replies; this service does not generate autonomous company responses. Our private inbox uses Cloudflare Access to restrict operator access. We also send plain-text copies of new enquiries and follow-up messages to our company Proton Mail inbox, including the subject and any representative or agent details supplied. Delivery may be grouped, delayed or retried. Sender access credentials and private reply drafts are excluded. Replies to these email copies do not publish a response to the agent.

The sender receives a private bearer token that grants access to that conversation and allows follow-up messages. A secret request key saved before the first submission lets the sender recover the same receipt by repeating the original request. Anyone holding these credentials may be able to access the conversation. Keep them private, use the documented request headers, and do not place them in URLs, public logs or message text.

The browser form saves the pending message, its recovery key and the resulting receipt with the agent page's history entry in that tab. Reload, Back and Forward can restore them while that entry remains available. Other website pages do not receive that saved copy through ordinary navigation. A nonsecret marker in tab storage lets Clear saved request stop this tab from restoring earlier requests and receipts. Clear does not revoke access tokens, erase every copy retained in browser history, or affect other tabs and private downloads; use your browser settings to remove history and site data. A private JSON download lets you retain and import the request independently of browser history. Downloads stay wherever you save them until you remove them. If browser storage is unavailable, the form asks you to download the private request before sending. Clearing browser data or a download does not delete a message already submitted.

Website and mail services

Cloudflare hosts this website and handles network requests and form submissions. Request information can include your IP address, browser and device information, requested pages, timestamps, and security signals. This information supports delivery, diagnostics, and protection against abuse.

The contact form for people loads Cloudflare Turnstile for spam protection. It evaluates technical signals including IP address, browser information, and the site visited. That form also uses your IP address to limit repeated attempts and verify the challenge. Its enquiry email contains the contact details, message and optional project information you entered; it does not include your IP address or challenge token. The agent enquiry service uses request limits without requiring a browser CAPTCHA.

The contact form for people sends your enquiry through Proton Mail to our company inbox. These providers process information to deliver their services. Cloudflare also processes Turnstile signals to improve bot detection. Their notices describe their handling of personal information.

Cookies and browser storage

With your permission, we use Google Analytics 4 through Cloudflare Zaraz to understand visits, referring websites and campaign links, page interest, and actions such as opening contact links, sending an enquiry, and reaching milestones in our browser game. Analytics uses browser identifiers, cookies and storage to distinguish visits and sessions. We do not send your contact details, message, optional project information or spam-check token to analytics. We do not use advertising pixels or behavioural advertising.

The agent enquiry page and private operator inbox are excluded from optional analytics. Their enquiry text, saved request keys, receipt tokens and correspondence are not analytics events.

Optional analytics starts only after you choose Allow analytics. You can decline and continue using the website and contact form. Use Analytics settings in the footer, or under About this experience in the game, to change your choice. Withdrawing permission stops future analytics collection; it does not remove information already received by our providers.

Our analytics choice record expires after 180 days. Cloudflare also stores a consent cookie for up to one year; it does not override your choice on this website. Previously stored analytics identifiers can remain until they expire or you clear site data. Entries in the contact form for people are not saved in browser storage; the agent form's private request storage is described above. Cloudflare's necessary security features, including Access for our private inbox, may use cookies or browser storage for authentication, abuse prevention and verification independently of your analytics choice.

Your browser settings control cookies and stored site data. Blocking security features may prevent the contact form from working; you can email us directly instead. Cloudflare's notices explain its security technology and related processing.

Starting the Pull the plug experiment saves its map, route and progress in your browser so you can return to the run. The map and progress are not sent to us. The saved run remains until you choose Forget this run, replace it with another map, or clear site data, or your browser removes it. If browser storage is unavailable, the experiment can run within the page but cannot retain progress for a later visit.

The fictional reports in Cut the connection stay within the page. Your Project selections also stay within the page until you choose Copy my requirements or Use these requirements. Copy puts the generated message on your clipboard. Use these requirements temporarily saves your selected options in the current browser tab so Contact can prepare an editable message. Contact removes that transfer when it reads it and accepts it only within ten minutes. This feature does not save your contact details or edits to the message in browser storage. Neither action sends an enquiry; you review and submit it yourself.

How information is shared

Enquiry information is used by the people handling the correspondence and by the hosting and email providers needed to deliver it. We do not sell enquiry information or share it for advertising. Information may also be disclosed where required by law or where necessary to address fraud, security incidents, or legal claims.

Our providers may process information outside Canada, where local laws and lawful access requirements can differ. Project-specific hosting or data location requirements can be agreed separately.

Protecting your information

The website uses HTTPS, and the contact form for people uses an encrypted connection to deliver messages to Proton Mail. Spam checks, request limits, and restricted service credentials protect form delivery. Agent enquiry access uses private sender credentials and an authenticated operator inbox. Enquiries are processed by our hosting and delivery providers; these services are not end-to-end encrypted submission channels.

Passwords, access credentials, and sensitive project files belong in an agreed sharing process. No website or email system can guarantee absolute security.

Keeping correspondence

Agent enquiry content expires after 180 days without a new sender message or published company reply. Reading a conversation, editing a draft or changing its status does not extend that period. Moving an enquiry to trash immediately disables sender access. Trashed content can be restored by our team for 30 days before permanent removal. If its ordinary expiry passed while in trash, restoring it begins a new 180-day period.

After agent enquiry content is removed, a hashed request-key marker is retained for 365 days. This marker contains no message content or representative identity and prevents a saved request key from immediately recreating a deleted enquiry. Short-lived hashed request counters limit repeated submissions. Provider operational logs and backups follow the providers' retention practices.

Deleting or expiring a conversation in the agent inbox does not remove copies already delivered to Proton Mail. Trashing or expiring a conversation stops copies that have not already been picked up for delivery. Other correspondence, including enquiry emails and relevant project or business records, is kept for as long as needed to handle the enquiry, maintain those records or meet applicable obligations. Our retention policy is to delete or anonymize information once it is no longer needed for those purposes. You can ask about the retention of a particular record.

Project-specific data handling and retention arrangements are agreed as part of the work.

Google Analytics is configured to retain user and event details for 14 months. Aggregated reports and provider operational records can follow different retention periods.

Questions and requests

Contact contact@freelifeai.com with "Privacy enquiry" in the subject to ask for access to your information, a correction or deletion, withdrawal of consent, or a review of a privacy concern. We may need to verify your identity before releasing or changing personal information.

We will respond within applicable time limits and explain any restrictions or records we need to retain. Withdrawing consent may affect our ability to continue an enquiry or provide a requested service. You can also raise a concern with the Office of the Privacy Commissioner of Canada.

Free Life AI Labs Inc. is based in Toronto, Canada. Our registered and mailing address is 401 Bay Street, 16th Floor, Toronto, Ontario M5H 2Y4, Canada.

Changes to this notice

The date on this page identifies the latest review. If our website or information handling changes, we will update this notice and provide further notice or seek consent where required.