Legal · Privacy
Last updated 2026-06-29.
Metabus Automation Solutions Inc. ("Metabus", "we", "us") operates the website at metabus.ca AND a multi-tenant marketing-technology platform used by client brands to capture, route, and follow up on leads from their own marketing campaigns. We are based in Alberta, Canada.
This document serves three roles, all governed by the same rules below:
This policy reflects that we play two different roles depending on how you encountered us:
The rest of this policy describes what we do as the data controller for metabus.ca interactions and as the platform processor for client interactions.
Depending on your interaction we may collect:
fbclid, gclid), browser user-agent, IP-derived country.The MAS Inc. Marketing App connects to Meta's developer platform to operate ad campaigns on behalf of Metabus and our client tenants. The App accesses the following Meta data:
Meta platform data is held under the same retention, sharing, and deletion rules described below. When Meta sends a Data Deletion Callback for a user, the App locates and deletes the corresponding records and confirms deletion to Meta within Meta's published SLA.
When you fill out a lead form for a client brand running on the Metabus platform, we use the data only to operate the platform on the client's behalf: routing the lead to the client's tenant, triggering the client's configured automation (auto-replies, booking offers, sequence enrollments), and producing analytics for the client. We do not use client-tenant data for our own marketing. The client's own privacy policy governs further use.
We share information only with the service providers that operate the platform on our behalf:
For client-brand interactions, the data is also routed to the client brand whose campaign you engaged with. The client brand's own privacy policy lists their further sub-processors.
We do not sell personal information. We do not share data with third parties for their independent marketing.
We retain personal information for as long as is necessary to fulfill the purposes described above. For metabus.ca leads and bookings, records are typically retained for the duration of our commercial relationship plus seven years for accounting and audit purposes, after which they are deleted or fully anonymized. For client-tenant data we follow each client's documented retention schedule.
We protect personal information using industry-standard administrative, technical, and physical safeguards including: TLS encryption for data in transit; encryption at rest on Google Cloud Firestore and Cloud Storage; role-based access controls with the principle of least privilege for staff and sub-processor access; audit logging on production systems; multi-factor authentication on administrative consoles; and breach notification procedures aligned with PIPEDA, GDPR Articles 33 and 34, and CCPA where applicable. No system is perfectly secure and we cannot guarantee absolute security.
Depending on your jurisdiction (including Canada's PIPEDA, the EU GDPR, the UK GDPR, and the California CCPA) you may have the right to:
For data Metabus controls (metabus.ca interactions), contact us at jason@metabus.ca. For data a client brand controls (their lead forms, their campaigns), contact the client brand directly. We forward platform-side deletion requests upon confirmation.
We use first-party cookies on metabus.ca to remember your preferences and third-party pixels (Meta, Google) to measure ad performance. You can block cookies in your browser settings. Where required by law (EU/UK/EEA) we surface a consent prompt before non-essential tracking fires. Client-brand websites operate their own cookie programs under their own consent regimes.
On these pages we count the steps people take, like which page they open, which button they tap and how far they scroll. We do this on our own server with a random code saved in your browser. We do not record your name, email, phone, what you type or your listing details. If you make an account from the same browser, we link that code to your account so we can see which ad or link brought you. We keep these counts for up to 13 months.
Google Analytics and the Facebook (Meta) Pixel stay off on these pages unless you turn them on in "Privacy choices" at the bottom of the page. If you allow Facebook ad measurement, we also send Meta the same steps from our server, with your ad click code, browser type and IP address, so an ad is counted once. You can turn all of this off in "Privacy choices". Your browser's Do Not Track or Global Privacy Control setting turns it off too.
Our servers and the service providers listed above operate primarily in the United States and Canada. Where personal information from the European Economic Area, the UK, or Switzerland is transferred to a country without an adequacy decision, we rely on Standard Contractual Clauses with our processors.
Our services are intended for businesses and adults. We do not knowingly collect personal information from anyone under 16.
We will post any material changes here with a new "last updated" date.
Questions about this policy or our handling of personal information that Metabus controls: jason@metabus.ca. For client-tenant data, contact the client brand whose campaign you interacted with.