Privacy Policy

Last updated: 2026-07-22.

1. Who we are

This policy is published by ElevatesAI (a business name of 12128179 Canada Inc.), the entity that operates the doodat.ai site, the showcase for the Wendy Doodat brand.

This policy applies to your visit to the doodat.ai site and your use of its public forms. It does not apply to your use of the Wendy Doodat platform itself once access is granted (see section 11).

2. What we collect

The doodat.ai site does not create accounts and does not process payments. No clinical information is collected on this site. The only personal information we collect comes from two forms, filled out voluntarily by you:

“Waitlist” form (/en/waitlist)

Field	Required?
First name	Yes
Email	Yes
Role (“You are…”)	Yes
Professional order	Optional
Practice setting	Optional
Message (free-text note)	Optional — the on-screen hint reminds you not to include any information that could identify a client

“Demo request” form (/en/request-a-demo)

Field	Required?
Name	Yes
Email	Yes
Organization	Yes
Organization type	Yes
Number of psychoeducators	Optional
Main documentation pain point	Optional
Timeline	Optional

We do not collect anything else through these forms. Optional fields may be left blank with no effect on the processing of your registration or request (see section 4).

In addition to the information provided through these forms, if you consent (see below), we collect site-usage data — pages visited, approximate region, device and browser type — through Google Analytics. This data is never collected if you decline or ignore the consent request, and it is used only to measure site usage in aggregate (see section 5 for the consent mechanism and section 6 for Google as a service provider).

We do not use any advertising tracking technology or cross-site tracking on this site; the only usage measurement we use is Google Analytics, described above and in section 5, enabled only with your consent.

3. Why we collect this information

We collect this information for the following purposes, each stated here in plain terms and never expanded without telling you:

• To manage your waitlist registration and contact you about your access to Wendy Doodat (waitlist form).
• To respond to your demo request and contact you to schedule it, for your organization (demo-request form).
• To send you, only if you have separately consented, occasional news about Wendy Doodat (see checkbox 2 in section 4).

The optional “A note for us” field (waitlist form) exists only to help us better understand your interest and context before we respond; it is never analyzed for any other purpose. As the form itself already reminds you, do not include any information that could identify a client.

We do not use this information for any other purpose. We make no automated decisions about it: processing of access and demo requests is done by a person, never by an algorithm alone. If an automated sorting or prioritization tool for registrations were ever added, this section would be updated accordingly before it goes into service.

4. Consent

The waitlist form presents two separate checkboxes, never pre-checked, each for its own distinct purpose — you never consent in bulk to two different things through a single box:

Checkbox 1 (required to register) — you consent to ElevatesAI retaining the information provided in order to contact you about your access to Wendy Doodat. This information is never shared with third parties for commercial purposes (see section 5).

Checkbox 2 (optional, distinct purpose) — you additionally consent to receive occasional email news about Wendy Doodat. You may withdraw this consent — unsubscribe — at any time, free of charge, via the link in every email or by writing to us (section 13).

The demo-request form presents a checkbox equivalent to Checkbox 1 above, adapted to its own purpose: you consent to ElevatesAI using the information provided to contact you about a demonstration of Wendy Doodat for your organization.

Withdrawing consent: you may withdraw your consent at any time for either checkbox, which does not affect the validity of what was already done before the withdrawal. To withdraw your consent (for example, to remove yourself entirely from the waitlist or from follow-up on your demo request), write to us at the address given in section 13.

Every email sent under Checkbox 2 will clearly identify the sender (ElevatesAI) and will provide a valid mailing address as well as the unsubscribe mechanism described above, in accordance with Canada’s Anti-Spam Legislation (CASL).

5. What we do not do

• We do not sell your personal information. Never, to anyone.
• We do not share your information with third parties for commercial purposes. The information you entrust to us serves the purposes set out in section 3, full stop.
• We do not enable any measurement cookies without your consent. This site uses cookies that are strictly necessary for it to function (for example, to remember your consent choice). Google Analytics cookies and identifiers, which let us measure site usage in aggregate (pages visited, approximate region, device and browser type), are enabled only if you expressly consent through the banner provided for that purpose, presented before they are enabled and declined by default. Declining changes nothing about your access to the site or how it functions. You may change your choice at any time via the link provided for that purpose in the cookie banner or at the bottom of every page. Our hosting provider may also log standard technical data (for example, an IP address or a request timestamp) in the normal course of operating the site — this is technical logging data, not a profiling tool.

This section describes a practice, not a certification: it states what we do and do not do, without asserting general regulatory compliance.

6. Service providers

To host the doodat.ai site and receive the information submitted through its forms, we use Netlify, a cloud hosting provider. Netlify has access only to the information necessary to perform this service and is not permitted to use it for its own commercial purposes.

If we use, or ever come to use, a separate email-delivery tool to send you the communications described in section 3, this section will be updated to name it before any such communication is sent.

If you consent to measurement cookies (see section 5), we also use Google LLC, through its Google Analytics 4 service, solely to measure site usage in aggregate. Google Analytics is enabled only if you consent and collects nothing about you if you decline or ignore the consent banner.

Netlify and Google LLC are both based in the United States; your information may therefore be processed or stored outside Quebec (see section 10).

7. Retention

We retain information collected through the waitlist and demo-request forms for as long as necessary to respond to your registration or request, and for 24 months after our last contact with you, after which it is destroyed or irreversibly anonymized. If you withdraw your consent before that period ends, your information is destroyed or anonymized within a reasonable time, subject to any legal retention obligation.

Site-usage data collected through Google Analytics, if you consent, is retained on a separate schedule: we configure the shortest retention period Google offers for this type of data.

8. Your rights

With respect to the personal information you have entrusted to us, you have the following rights:

• Access — obtain confirmation that we hold information about you and obtain a copy of it.
• Rectification — have inaccurate, incomplete, or ambiguous information corrected, or information that was collected or retained in a manner not compliant with the law.
• Withdrawal of consent — see section 4 (forms) and section 5 (analytics measurement cookies).
• Cessation of disclosure / de-indexing — in circumstances provided for by law, request that the disclosure of information cease or that it be de-indexed; this is a right bounded by specific conditions, not a general right of erasure — we will explain what applies to your situation if you make such a request.
• Portability — request that computerized information you provided to us be transmitted to you in a structured, commonly used technological format, for transmission to another organization.
• Complaint — you may first write to us (section 13); if you are not satisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec (CAI), the competent regulator.

To exercise any of these rights, write to the person responsible for the protection of personal information, whose contact information appears in section 13.

9. Privacy incidents

We maintain reasonable safeguards — physical, technological, and administrative — to protect the information you entrust to us, including limited access for team members who need it to perform their duties, and transmission over encrypted connections. This describes a practice, not a guarantee against incidents.

Should a privacy incident presenting a risk of serious harm occur, we would notify the affected individuals and the Commission d’accès à l’information du Québec without delay, in accordance with our legal obligations, and we would log the incident in our internal register, regardless of whether it presents such a risk.

10. Hosting and disclosure of information outside Quebec

Our hosting provider, Netlify, along with Google LLC (for Google Analytics measurement, if you consent — see sections 5 and 6), are both based in the United States. Your information may therefore be processed or stored outside Quebec, including in the United States. Before using a provider located outside Quebec, we consider the sensitivity of the information involved, the purpose of the processing, and the contractual and technical protective measures offered by that provider, in accordance with our legal obligations.

11. This policy covers only the site — not the Wendy Doodat platform

This policy applies only to the doodat.ai marketing site and its two public forms (waitlist and demo request). It does not describe, and must not be read as describing, the privacy practices of the Wendy Doodat platform itself (including, without limitation, how the platform handles health information, its encrypted identity vault, or any other clinical practice).

If you are ever granted access to the Wendy Doodat platform, your use of it will be governed by the platform’s own terms of use and privacy policy, separate from this document and communicated to you separately at the time of access. For questions about the platform’s practices, refer to those documents rather than to this one.

12. Changes to this policy

We may update this policy from time to time, including to reflect a change in our practices or in applicable law. The date of the last update appears at the top of this document. Significant changes will be flagged to you via a notice on the site.

13. Contact us

For any question about this policy, to exercise any of the rights listed in section 8, or to withdraw consent, write to the person responsible for the protection of personal information:

Bradley Collins — hello@doodat.ai

Back home