Who we are
Sannaii Technologies Inc. (“Sannaii”, “we”, “us”) is a Canadian company based in Toronto, Ontario. We provide an equity data and workflow platform at sannaii.com, and dedicated AI agents that help our clients' teams answer email and questions about the client's own numbers.
This policy explains what information we collect, why, where it is kept, who it is shared with, and the choices you have. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Information we collect on the platform
- Account information: your name, email address and sign-in details when you create an account or are invited to one.
- Company data you enter: the records you and your colleagues add, such as company details, shareholders and other holders, securities, grants and documents. These can include personal information about the people listed in them.
- Messages you send us: what you write in our contact form or by email.
- Usage information: pages visited, actions taken, browser and device type, and similar technical information, used to keep the service secure and to improve it. We use cookies needed to keep you signed in, and product analytics.
When you ask the platform's assistant to read a document, such as a share certificate or a grant agreement, its text is sent to our AI provider to pull out the details. The AI provider does not use it to train its models.
Client AI agents
Each Sannaii client that uses our agent service gets its own dedicated agent. The agent has its own email inbox for that client and works with Sannaii's staff in Slack. It may handle:
- Email sent to the client's agent inbox, and the replies it drafts.
- Slack messages between the agent and Sannaii's staff about that client.
- Accounting and store data from services the client chooses to connect, such as QuickBooks Online or Shopify, always read-only.
Every client's agent runs in its own isolated, dedicated environment, with its own private network, so one client's agent cannot reach another client's data.
QuickBooks Online data
When a client's QuickBooks administrator connects QuickBooks Online in Sannaii Connect (connect.sannaii.com):
- What we read: accounting data from the client's QuickBooks company, such as accounts, transactions, invoices, bills, customers, vendors and reports.
- Read-only: the agent only reads. It does not create, change or delete anything in QuickBooks.
- Why: only so that client's own dedicated agent can answer questions from the client's staff and Sannaii's staff working for that client, and draft replies to the client's email. We do not use it for any other purpose.
- Not used to train AI models: we do not train AI models on it, and neither does our AI provider, OpenAI. We use OpenAI's business API, which does not use the data it receives to train its models. OpenAI may keep that data for up to 30 days to monitor for abuse, and then deletes it.
- Where it is stored: each client's agent runs in its own isolated, dedicated environment, hosted in Canada (Toronto) by our infrastructure provider, Fly.io. The QuickBooks data your agent keeps is stored there, encrypted at rest, and is never shared with other clients. The connection itself (the access tokens Intuit issues, and your QuickBooks company's name and ID) is kept encrypted in the platform's database, Convex, in the United States, and is handed only to your own agent. Only authorized Sannaii staff can access either, and you can ask us to delete them at any time.
- When it leaves Canada: to answer a question, the agent sends the relevant content, such as an email and the figures needed to answer it, to OpenAI through Vercel's AI Gateway, both of which process it in the United States. Data is encrypted in transit.
- Not sold or shared: we never sell QuickBooks data, and we do not share it with anyone except the service providers listed below that are needed to run the service, and only for that purpose.
How we use information
- To provide, operate, secure and support the platform and the agents.
- To answer your questions and requests.
- To send service messages, such as invitations and notifications.
- To understand how the service is used, so we can fix problems and improve it.
- To meet our legal obligations.
We do not sell personal information or client data, and we do not use it for advertising.
Service providers
We rely on a small number of service providers (subprocessors) to run Sannaii, such as Fly.io for the client agents, Convex and Vercel for the platform, and OpenAI, reached through Vercel's AI Gateway, for AI processing. Each one only receives what it needs to do its job for us, and is bound by a written agreement (such as a data processing agreement) that limits how it may use the information.
The full list, with what each one does and where it stores or processes information, is on our Subprocessors page. Apart from Fly.io, which hosts the client agents in Canada, they store or process information in the United States, where it may be subject to that country's laws. We may also disclose information if the law requires it.
Security
We protect information with access controls, encryption in transit and at rest, per-client isolation of agents and connection credentials, and by limiting access to the staff who need it. We regularly review these safeguards as our service grows. If a security incident affects your data, we will notify you promptly and take steps to contain it, as required by law.
Retention
We keep information for as long as the client's account or agent service is active, and afterwards only as long as needed for legal, accounting or security reasons. When a client leaves, we delete its agent, with the agent's storage and stored connection credentials, within 30 days.
Disconnecting QuickBooks and deleting your data
- Disconnect: a company administrator can disconnect QuickBooks at any time from the QuickBooks card in Sannaii Connect, and a QuickBooks administrator can also disconnect Sannaii from the apps settings in QuickBooks Online. Once disconnected, the agent can no longer read anything from QuickBooks, and the connection's tokens are deleted. You can also ask us to disconnect it for you.
- Delete: email us at info@sannaii.com to ask for your QuickBooks data, or any other data we hold, to be deleted. We will delete the QuickBooks connection and the QuickBooks data stored on your agent within 30 days and confirm when it is done.
Your rights
You can ask to access the personal information we hold about you, to correct it, or to withdraw your consent to its use, subject to legal and contractual limits. If personal information about you was entered by one of our clients (for example as a shareholder), we may refer your request to that client and help them respond. If you are not satisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada.
Changes to this policy
We may update this policy. We will change the “Last updated” date above and, for significant changes, tell clients directly.
Contact
For privacy questions or requests, email info@sannaii.com or write to Sannaii Technologies Inc., 3230 Yonge Street #4128, Toronto, ON M4N 3P6, Canada. See also our Terms of Use.