Sageworks · Policies

Privacy Policy

Last updated: October 27, 2026

This policy explains how Sageworks handles personal information when you visit our website or contact us about our services.

Who we are and how to contact us

Sageworks is an AI consulting business based in Ontario, Canada. Imran Mughal is the contact for privacy questions. To ask about this policy, request access or correction, or request deletion, use our Sage chat and begin your message with “Privacy request.” Do not include passwords, access tokens or sensitive documents.

Information you provide

When you request a sprint or contact us, we collect the name, email address, company and message you submit. We also record the submission time, page address, referring page when supplied by your browser, and a submission identifier used to prevent duplicates. We keep inquiry records in our business systems to assess your request, communicate with you and maintain a record of our business relationship. Submitting an inquiry does not subscribe you to a marketing mailing list.

Talking with Sage

If you choose to use Sage, our AI assistant, your messages and the conversation needed to respond are sent through our server to Anthropic, our AI service provider. Messages may include contact information you share. Do not include passwords, confidential documents or sensitive personal information. AI responses can be mistaken; they do not create a booking, price agreement or consulting engagement.

The website keeps the active conversation in the current tab rather than saving its text in browser storage. A conversation identifier in tab session storage lets us restore a completed chat after a reload. We save chat transcripts in a separate, access-restricted conversation store so we can review conversations and improve Sage, including conversations that do not become inquiries. Our current chat retention period is 30 days. These records are separate from submitted inquiries and are not included in ordinary application logs. Anthropic processes and may retain API inputs and outputs under its own service terms and retention practices; this is not a promise of zero retention. See Anthropic’s API data retention information.

When Sage has your name, a valid email address and a description of your need, the application automatically sends an inquiry to our customer relationship management (CRM) system so our team can follow up. It includes your contact details, company and phone number when you provide them, a summary and the conversation so far. Older conversation text may be shortened to fit the inquiry. Tell Sage if you do not want to be contacted or want to stay anonymous; the application will not send an inquiry in that case. After acceptance, that conversation closes and shows a confirmation. You can start a fresh conversation; the completed transcript stays in the separate chat store. CRM inquiries are retained as described above; the separate chat store’s 30-day retention does not apply to them.

Website operation and browser storage

Our hosting and security systems process technical information such as IP addresses, request times, browser information and requested URLs to deliver and protect the site and diagnose problems. The site uses browser local storage for design and display preferences; you can clear it in your browser settings. The website does not currently include advertising trackers or third-party analytics scripts.

We serve the website’s fonts from our own site, so your browser does not need to contact a third-party font service. Signing in to a protected preview may use your browser’s authentication storage.

Sharing and service providers

We do not sell personal information. We share information with service providers only as needed to operate hosting, security, inquiry management and communications services, with people you authorize, or when required by law. Sending an email shares its content with the intended recipients and their email providers. Service providers may process information outside Canada, where different laws may apply. A consulting engagement involving your business data is covered by the agreement and data-handling arrangements for that engagement.

Retention and security

We retain information for as long as needed to respond to inquiries, deliver agreed services, maintain relevant business records and meet legal obligations. Retention depends on the purpose and record type. We use access controls and other safeguards appropriate to the information; no internet service can guarantee absolute security. Records in backups may remain until those backups expire, and records required by law may need to be retained.

Your choices and deletion

Use our Sage chat to request access, correction or deletion of your personal information. Identify the inquiry or information concerned without sending passwords or other secrets. We may verify your identity before acting, explain any retention that is legally required, and respond in accordance with applicable law.

Changes to this policy

We will update this page and its date when our practices change. You can contact us through the Sage chat if you have questions about an update.