Privacy policy
Effective date: September 10, 2026
The first part of this page describes what happens to your information on this website specifically: no analytics run unless you accept them, and the only personal information we receive is what you type into the booking form. The second part is Cinco’s full privacy policy and cookie policy, which apply to this website and to the AI Experience Room service.
Who we are
This website is published by Cinco inc. (9118-2162 Québec inc.) (“Cinco”, “we”, “us”), an experiential marketing company based in Montréal. Our address is 139 Saint-Paul West, Suite 5, Montréal, QC H2Y 1Z5, Canada. You can reach us at hello@wearecinco.com or +1 514-430-8695.
Cinco is the controller of the personal information described in this first part of the page. AI Experience Room is a Cinco product; each client Room is operated for a specific brand, and for the personal information collected inside a Room that brand is the controller and Cinco is the processor. The policy reproduced below sets out that division in full.
What this website does
This is a static website: every page, image and stylesheet is a file served from Amazon S3 through Amazon CloudFront, in Canada. Like any web server, that infrastructure keeps standard access logs — your IP address, the file requested, the date and time, the referring page, and your browser’s user agent. We use them to keep the site up and to investigate errors and abuse. We do not build a profile from them, and we never sell or share them for advertising.
There are no accounts on this site and nothing to sign in to. The booking form on the home page is the only form, and apart from what you choose to type into it, we ask you for nothing.
Analytics, and your consent
We use PostHog to count page views and understand which parts of this site people actually read. It is off by default: nothing from PostHog is downloaded, initialised or executed until you press Accept on the consent banner.
If you accept, PostHog records page views, the page address, the referring page, approximate location derived from your IP address, and coarse device and browser information. Automatic capture of clicks and form interactions is switched off. We also record one event, booking_completed, when a session is booked; it carries only the event type identifier and the page language, never your name, email or notes.
To withdraw consent, use the “Privacy choices” link in the footer of any page and press Decline. That clears the stored choice and stops any further collection. There are no advertising pixels, no session recording and no cross-site trackers on this site, whatever you choose.
The demo video
The demo video streams directly from Vimeo’s content delivery network as a plain video file, played in this page’s own video element rather than through the Vimeo player. Loading it sends Vimeo’s CDN your IP address, the way any network request does. No Vimeo cookies are set as a result of our use of it.
Booking a discovery session
The booking form on the home page is ours, but the booking itself is created through the Cal.com API. When you confirm, your name, email address, time zone and anything you write in the notes are sent to Cal.com and shared with us so we can hold the meeting.
The request also carries a fixed field named source, set to “Landing page”. It records which of our surfaces the booking came from and contains nothing about you.
Cal.com processes the booking as a service provider to us, under its own privacy policy. It sends you a calendar invitation, and the session itself takes place over Cal Video. We use your email address to confirm, reschedule or follow up on the session you booked.
Cinco’s privacy policy
The following is Cinco’s privacy policy, which applies to this website and to the AI Experience Room service.
It is reproduced from its canonical source, https://www.wearecinco.com/privacypolicy. Where it speaks of the “Platform” or the “Services” it is describing everything Cinco operates, this website included. The sub-processors Cinco engages to deliver the service are listed at https://www.wearecinco.com/sub-processors.
CINCO (collectively with its affiliates and subsidiaries, as relevant, hereinafter referred to as “CINCO”, “we”, “us”) respect and is committed to support rights to privacy and understand the importance of protecting personal information and complying with applicable data protection laws.
This Privacy Policy (“policy”) outlines how we collect, use, share, and safeguard your Personal Data (as defined below) when you interact with us, including through our websites/platform (including our AI Experience Room) (collectively “Platform”), mobile applications, products, and services (collectively, “Services”).
This policy applies to all users globally and applies to our affiliates and subsidiaries to the extent they have access to your Personal Data.
This policy provides information on the collection, use, and sharing of your Personal Data when CINCO acts, depending on the circumstances, either as (i) a data controller (meaning where CINCO controls how and why your personal information is processed) or (ii) a data processor (when processing your Personal Data on behalf of its clients who are the data controllers), unless otherwise provided in a separate agreement or mandated by any applicable law.
For the avoidance of doubt, when CINCO’s corporate clients license from CINCO the use of the Platform for the development of their respective businesses, they shall be deemed to be the data controller (and CINCO the data processor), with respect to the personal data they are collecting from individuals using the Platform.
Our Platform may include links to third-party websites, plug-ins, services, social networks, or applications. Clicking on those links or enabling those connections may allow the third party to collect or share data about you. If you follow a link to a third-party website or engage a third-party plugin, please note that these third parties have their own privacy policies and we do not accept any responsibility or liability for these policies or their processing of your data (including Personal Data). We do not control these third-party websites, and we encourage you to read the privacy policy of every website you connect to in order to understand your rights and obligations.
By accessing and/or using our Services, you agree to the terms of this policy.
1. Definitions
For the purposes of this policy:
- Business, for the purpose of the CCPA (California Consumer Privacy Act), refers to CINCO as the legal entity that collects Consumers’ personal data and alone, or jointly with others, determines the purposes and means of the processing of Consumers’ personal data, or on behalf of which such data is collected, that does business in the State of California. Business may also be CINCO’s corporate client when such client has acquired the right to use the Platform (on a White Label basis) for the development of its business and will therefore collect Consumers’ personal data for its own behalf.
- Consumer, for the purpose of the CCPA, means a natural person who is a California resident. A resident, as defined by relevant law applicable in California, includes (1) every individual who is in the USA other than a temporary or transitory purpose, and (2) every individual who is domiciled in the USA but who is outside the USA for a temporary or transitory purpose.
- Controller, for the purposes of the GDPR (General Data Protection Regulation), refers to us as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.
- Cookies, are small files that are placed on your computer, mobile device or any other device by a website, containing the details of your browsing history on that website among its many uses.
- Do Not Track (DNT), is a concept that has been promoted by US regulatory authorities, in particular the U.S. Federal Trade Commission (FTC), for the Internet industry to develop and implement a mechanism for allowing internet users to control the tracking of their online activities across websites.
- GDPR, means Regulation (EU) 2016/679 of the European Parliament and the Council of 27th April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
- Personal Data (or Personal Information) is any information that relates to an identified or identifiable individual. More specifically, where GDPR applies to any processing, Personal Data means any information relating to you such as a name, an identification number, location data, online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity. More specifically, where the CCPA applies to any processing, Personal Data means any information that identifies, relates to, describes or is capable of being associated with, or could reasonably be linked, directly or indirectly, with you.
- Sale, for the purpose of the CCPA (California Consumer Privacy Act), means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a Consumer’s Personal information to another business or a third party for monetary or other valuable consideration.
- Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
- Website/Platform refers to this website.
- You, means the individual whose Personal Data we are collecting and processing. This includes individuals who are accessing or using one of our Platform (either directly or via one of our corporate client(s) to which we have licensed the right to use such Platform), individuals who contact us with a query, and contacts at organizations that we work with.
2. What Personal Data we collect
We may collect the following types of Personal Data from You:
- Contact Information: may include name, email address, phone number, and postal address where CINCO acts as controller (e.g., business contacts or account administration). Where CINCO acts as processor for a corporate client, the data collected depends on that client’s configuration and purposes.
- Technical Data: IP address, browser type, device information, and usage data (e.g., interaction with our websites/platforms).
- Marketing Data: Your preferences in receiving marketing from us and your communication preferences.
- Interaction Data: audio or voice inputs voluntarily provided when interacting with AI-enabled features of the Platform.
- Transaction Data: Information related to your purchases, orders, or subscriptions.
3. How we collect your Personal Data
We collect Personal Data in several ways, including:
- Directly from You: When You provide your data through emails, when completing forms and surveys from our Platform, or when you are creating an account with us. We may also collect information You have provided to us at meetings, exhibitions and events (both physical and digital). Your employer, as our client or partner may provide your contact information to us where you have consented to this, and as required to provide You our products and services.
- Automatically: When You interact with our website or download mobile and desktop app from our Platform through the use of cookies, server logs, and similar technologies.
- Third Parties: We may collect your Personal Data from third parties, such as marketing partners or publicly available sources, where legally permitted. For example, we may collect and receive Personal Data about You from companies that purchase or distribute CINCO’s products by way of co-branded or private/white-labeled websites/platforms.
4. How we use your data
We use your Personal Data for the following purposes:
- Service Delivery: To provide and maintain our Services, including in order to operate fully white-labelled solutions for our corporate clients, agencies, and other commercial third parties, and for customer support.
- Marketing: To send You relevant marketing communications, offers, and promotions, in compliance with your preferences and applicable law.
- Analytics: To analyze user behavior, improve our website, and monitor usage trends.
- Legal Compliance: To comply with legal obligations and protect our rights.
5. Choice / opting out of marketing
We offer You the choice of receiving different types of communications and information related to our Services. You may subscribe to e-newsletters or other publications; You may also elect to receive marketing communications and other special offers from us via email. If at any time You would like to change your communication preferences, we provide unsubscribe links and an opt-out mechanism in all our marketing communications or You may contact us directly at the email provided below (under Section 18 — How to contact us).
Note that if You opt out of marketing, You may still receive service-related and market research messages from us (and You may still receive marketing messages for a short period after opting out while we update our records).
6. API Services
For certain limited services provided by CINCO, we use third-party API Services such as the YouTube API or Google API. Such third-party API services used in CINCO products only captures data You designate CINCO to access on third-party platforms. Such data may include your content stored on third-party sites, associated meta data, and account information related to those third-party sites. Data collected by CINCO using third-party API services may be used to archive content and certain associated meta data uploaded to those third-party sites by You.
Additionally, such data may be used by CINCO as part of an authentication and authorization framework to access your data on third-party sites. Third-party email, social media, and other communication services are not offered, controlled, or provided by CINCO. CINCO is not responsible for how a third party transmits, accesses, processes, stores, uses, or provides your data (including Personal Data) to CINCO. In addition, such third-party services are subject to the terms and conditions of such third-party providers and Google privacy policy and/or the YouTube terms of service may apply.
7. Artificial intelligence
As part of certain Services, users may interact with AI-enabled conversational or voice-based functionalities designed to simulate product or service experiences and provide interactive responses.
These AI functionalities analyze user inputs, including voice or text interactions, solely to generate real-time responses and improve the user experience. The AI system is not used to identify individuals, perform biometric identification, or make automated decisions producing legal or similarly significant effects.
CINCO does not use Personal Data to train AI models. CINCO may use anonymized or aggregated usage data that does not identify individuals for service improvement, analytics, and machine learning purposes.
8. Legal basis for processing personal information
We process your Personal Data on one or more of the following lawful grounds:
- Performance of a Contract: Processing is necessary for the performance of a contract to which you are a party. For example, to manage your account with us, to provide support You have asked for and to respond to questions You may have when using our services. We may also be requested by our corporate clients who have purchased the use of our solutions on a white labelled basis (such as a website/platform created by CINCO for them) to process your Personal Data under their instructions.
- Legitimate Interests: Where it is necessary for our legitimate business interests, except where those interests are overridden by your privacy rights. For example, to develop and improve our Services, to monitor its usage, to analyse how our Services are being used, how users are interacting with the Services, prevent possible wrongdoing in connection with the use of our Services, and carry out satisfaction surveys.
- Consent: Where we have obtained your explicit consent (e.g., for marketing communications when legally required).
- Legal Obligation: To comply with a legal obligation (e.g., tax reporting, legal claims).
9. Data sharing and disclosure
We may share your Personal Data with the following parties:
- Service Providers: We engage third-party service providers to help with our operations, such as hosting, data analytics, payment processing, or marketing services.
- Affiliates and Business Partners: We may share data with our affiliated companies and trusted partners for business purposes.
- Legal Compliance: We may disclose your personal information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).
Where third parties are performing processing on our behalf, we will require these organizations to adopt adequate technical and organizational security measures to protect Personal Data and to ensure the processing of Personal Data is only performed as instructed by us and for no other purposes and in compliance with applicable data protection laws.
We do not sell your Personal Data to third parties.
10. International data transfers
As a global company, your Personal Data may be processed outside the country of your residence by us or our affiliates, partners, or service providers, and agents working on our behalf. The transfer to other countries by CINCO and its affiliates shall be in accordance with applicable data protection laws, which may include on the basis of an EU adequacy decision or other appropriate safeguards. Appropriate safeguards may include: CINCO and third parties entering into the Model Clauses approved by the relevant authorities (i.e., European Commission, Information Commissioner’s Office, Federal Data Protection, and Information Commissioner, etc.) or relying on any approved alternative mechanism to ensure lawful transfer and protection of Personal Data in accordance with applicable data protection law in the jurisdiction where data may be processed.
11. Data retention
Except as otherwise permitted or required by applicable law or regulation, we will only retain your Personal Data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements or performing any obligation to You or any regulatory authority. Under some circumstances we may anonymize your Personal Data so that it can no longer identify, or be associated with, You. We reserve the right to use such anonymous and de-identified data for service improvement, analytics, and security purposes or any legitimate business purpose.
Once your Personal Data is no longer needed, we will securely delete or anonymize it.
12. Your privacy rights
If your Personal Data has been submitted to us by or on behalf of a corporate client of our Services who is the controller of that Personal Data and we are the processor, you will need to contact them directly if you wish to exercise any rights you may have under applicable data protection laws. If you make your request to us, we will need the name of the client who submitted your Personal Data to us, and we will refer it on to them.
Your local applicable law may provide certain rights regarding the collection, use, and sharing of your Personal Data. As a minimum standard, we aim to enable all individuals to exercise the privacy rights set out below, but please note that these rights and the conditions for exercising and processing them (including response times) may vary depending on the jurisdiction in which you reside.
Additional information where you have GDPR-based privacy rights
Under the European Union (EU) data protection laws, and notably the GDPR, where these apply to You (notably, based on your being resident in a EU country), You have rights we need to make You aware of. The rights available to You depend on our reason for processing your Personal Data:
- Your right of access. This enables You to receive a copy of the Personal Data we hold about you. This right always applies. There are some exemptions, which means You may not always receive all the information we process.
- Your right to rectification. You have the right to ask us to rectify Personal Data you think is inaccurate. You also have the right to ask us to complete Personal Data you think is incomplete. This right always applies.
- Your right to erasure. You have the right to ask us to erase your Personal Data in certain circumstances.
- Your right to restriction of processing. You have the right to ask us to restrict the processing of your Personal Data in certain circumstances.
- Your right to object to processing. This right exists where we are relying on a legitimate interest as the legal basis for our processing and there is something about your particular situation, which makes You want to object to our processing of your Personal Data on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
- Your right to data portability. This only applies to Personal Data you have given us. You have the right to ask that we transfer the Personal Data you gave us from one organization to another selected by you or give it to You, and in a structured, commonly used, machine readable format. The right only applies if we are processing Personal Data based on your consent or under, or are in discussions with You about entering into a contract and the processing is automated.
To exercise any of these rights where applicable, please contact us at the addresses indicated in Section 18 (How to contact us) below.
14. Data security
We take adequate measures to protect your Personal Data from unauthorized access, alteration, or destruction (both online and offline). These include encryption, secure servers, and access controls. However, no security system is completely impenetrable, and we cannot guarantee the absolute security of your Personal Data. Furthermore, You should note that when we host a Platform on behalf of a client (such as AI Experience Room), and such client acts as data controller (and we are a processor), such data will be returned to the applicable client at the end of our relationship with that client or other lawful reason.
15. California: your rights under the CCPA (where applicable to you)
Under this policy, and by law if You are a resident of California, You have the following data privacy rights in respect of a controller of relevant Personal Data (whether CINCO or our corporate client for whom we are operating the Platform on a white labelled basis):
- The right to notice. You must be properly notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
- The right to access / the right to request. The CCPA permits You to request and obtain from CINCO, information regarding the disclosure of your Personal Data that has been collected in the past 12 months by CINCO or its subsidiaries to a third-party for the third party’s direct marketing purposes. Be aware that we are transferring your Personal Data to our client (for which we build the AI Experience Room or Platform for).
- The right to know about your Personal Data. You have the right to request and obtain from us information regarding the disclosure of the following: the categories of Personal Data collected; the sources from which the Personal Data was collected; the business or commercial purpose for collecting or selling the Personal Data; categories of third parties with whom we share personal data; and the specific pieces of Personal Data we collected about You.
- The right to delete Personal Data. You also have the right to request the deletion of your Personal Data that have been collected.
Exercising your CCPA data protection rights
In order to exercise any of your rights under the CCPA, and if You are a California resident, You can email us the details to our contact email below (Section 18 — How to contact us).
We will disclose and deliver the required information free of charge within 45 days of receiving your verifiable request. The time period to provide the required information may be extended once by an additional 45 days when reasonably necessary and with prior notice.
Do Not Sell My Personal Data
We do not sell personal information but we are transferring it to our client. However, our client and service Providers we partner with.
Please note that any opt out is specific to the browser You use. You may need to opt out on every browser that you use.
Website
You can opt out of receiving ads that are personalized as served by our service providers by changing your preferences in our Cookie Policy. The opt-out will place a cookie on your computer that is unique to the browser You use to opt out. If You change browsers or delete the cookies saved by your browser, You will need to opt out again.
Mobile devices
Your mobile device may give You the ability to opt out of the use of information about the apps You use in order to serve You ads that are targeted to your interests:
- “Opt out of Interest-Based Ads” or “Opt out of Ads Personalization” on Android devices;
- “Limit Ad Tracking” on iOS devices.
You can also stop the collection of location information from your mobile device by changing the preferences on your mobile device.
“Do Not Track” policy as required by the California Online Privacy Protection Act (CalOPPA)
Our Service does not respond to Do Not Track signals.
However, some third-party websites do keep track of your browsing activities. If you are visiting such websites, you can set your preferences in your web browser to inform websites that you do not want to be tracked. You can enable or disable DNT by visiting the preferences or settings page of your web browser.
Your California privacy rights (California Business and Professions Code Section 22581)
California Business and Professions Code section 22581 allows California residents under the age of 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted.
To request removal of such data, and if you are a California resident, you can contact us using the contact information provided below, and include the email address associated with your account.
Be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.
16. Children’s privacy
Our Service does not address anyone under the age of 16. We do not knowingly collect Personal Data from anyone under the age of 16. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us. If We become aware that we have collected Personal Data from anyone under the age of 16 without verification of parental consent, we take steps to remove that information from our servers.
17. Changes to this privacy policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. If we modify this policy, we will post the revised version here. You should review this page periodically for updates.
If we make a change that significantly affects your rights or, to the extent we are permitted to do so, significantly change how or why we use personal information, we will notify you by way of a prominent notice or pop-up on our applicable Platform.
18. How to contact us
If you have any questions or concerns about this Privacy Policy or our Personal Data processing practices or wish to exercise a relevant data privacy right under applicable law, you can contact us at the following address: CINCO, 139 Saint-Paul West, Suite 5, Montréal, QC H2Y 1Z5, Canada, or by email at hello@wearecinco.com.