Privacy Policy

Welcome to Mobily ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital marketing platform at mobily.ca, including our link shortening, QR code generation, bio link pages, digital business cards, background removal, SEO website audit, URL Safety API, and Mobily Verify (Canadian Business Trust Profiles) services.

By using this service (Mobily™, operated by TechSynergy Corp.), you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2.1 Personal Information

We collect the following personal information when you register and use our service:

• Email address
• Password (encrypted)
• Payment information (processed securely through Stripe)
• Subscription plan details

2.2 Usage Data

We automatically collect certain information when you use the Service:

• IP addresses of visitors who click your short links
• Browser type and version
• Device information (desktop, mobile, tablet)
• Operating system
• Referrer URLs
• Click timestamps and locations (country/city)
• Link creation and management activities

2.3 Service-Specific Data

Depending on which services you use, we may additionally collect:

• QR Code Generator: QR code content (URLs, text, WiFi credentials, contact info), generated QR code images, and scan analytics
• Bio Link Pages: Profile information, link titles and URLs, page customization settings, and page view analytics
• Digital Business Cards: Contact information (name, phone, email, organization), card styling preferences, and vCard files
• Background Removal: Uploaded images for processing. Images are sent to a third-party AI service for background removal and are not retained after processing is complete.
• SEO Website Audits: URLs submitted for analysis. Page content is analyzed by Google Gemini AI to generate insights. We do not store the full page content, only the audit results.
• URL Safety API: URLs submitted for scanning and the scan result (is_safe, threat_type, confidence score). We transmit only the URL to Google Safe Browsing for the reputation lookup — no user identifiers are sent to Google. Scan analytics use a daily one-way hash (SHA-256 of visitor IP + user-agent + date); the raw IP address is never stored.
• Mobily Verify — Business Trust Profiles: Business name, province, phone number, website URL, description, listed services, and staff names that you add to your public trust profile. Profile-view analytics use the same daily SHA-256 hash technique — the raw visitor IP is never stored. If you publish personal information about other individuals (e.g., staff members), you are responsible for obtaining their consent before doing so.

2.4 Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. See our Cookie Policy for details.

We use the collected information for various purposes:

• To provide and maintain our platform services (link shortening, QR codes, bio pages, business cards, background removal, SEO audits, URL Safety API, and Mobily Verify trust profiles)
• To process your payments and manage subscriptions
• To provide analytics and insights on your short links, QR code scans, and bio page views
• To process images for background removal using AI-powered tools
• To analyze websites for SEO audits and generate AI-powered insights
• To scan submitted URLs against threat intelligence databases (URL Safety API) and return a safety verdict to the requesting API key holder
• To publish and manage Canadian Business Trust Profiles (Mobily Verify), including displaying verified status badges and recording anonymized profile view counts
• To send you service-related notifications and updates
• To respond to your inquiries and provide customer support
• To detect, prevent, and address technical issues and fraud
• To improve our service and develop new features
• To comply with legal obligations

4.1 Canadian Data Residency

All data is stored on servers located in Canada. Your information never leaves Canadian borders, ensuring compliance with Canadian privacy laws including PIPEDA (Personal Information Protection and Electronic Documents Act).

4.2 Security Measures

We implement industry-standard security measures to protect your data:

• SSL/TLS encryption for data in transit
• Encrypted database storage
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Access controls and authentication

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Payment Processing: We use Stripe for payment processing. Stripe has its own privacy policy governing the use of your payment information.
• Image Processing: When you use our background removal feature, uploaded images are sent to a third-party AI service for processing. Images are processed in real-time and are not stored by the provider after processing.
• AI Analysis: When you use our SEO audit feature, website URLs and page content are sent to Google Gemini AI to generate insights. Google's AI terms of service apply to this processing.
• URL Safety Scanning: When a URL is submitted via the URL Safety API, the URL is transmitted to Google Safe Browsing for a reputation lookup. No user identifiers, IP addresses, or API keys are included in that request. See our sub-processors list for details.
• Affiliate Programme: If you participate in our affiliate programme, a referral cookie is set when a visitor arrives via your referral link. This cookie contains only a hashed affiliate ID and an expiry timestamp — no personal data about the referred visitor is shared with the affiliate.
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred.

Under Canadian privacy law (PIPEDA) and GDPR (for EU residents), you have the following rights:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Receive your data in a machine-readable format
• Withdrawal: Withdraw consent for data processing
• Objection: Object to certain types of processing

To exercise any of these rights, please contact us.

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Account information: Retained while your account is active
• Analytics data: Retained according to your subscription plan (14-365 days)
• Financial records: Retained for 7 years as required by Canadian law
• Deleted account data: Permanently removed within 30 days
• URL Safety API scan logs: Retained for 90 days then auto-purged (used for the PIPEDA data-export endpoint)
• Mobily Verify profile-view hashes: Retained for 90 days

If you have any questions about this Privacy Policy, please contact us: