PIPEDA and your callers’ information

Muse answers your phone, so we handle personal information about the people who call you. This page says what AskMuse does with it, what stays your job, and where it is stored. We describe what we do. We do not claim a certificate or a stamp.

AskMuse · a Muse Nexus product · Ontario, Canada · Last updated October 25, 2026.

Who is responsible for what

PIPEDA is Canada’s federal privacy law for private businesses. Your business is responsible for the information it collects from callers. AskMuse handles that information for you, only to run Muse. Compliance is your business’s responsibility, and we build the product to support it.

What AskMuse does

  • Uses a call only to run Muse: answer, take a message, book, and write you a summary.
  • Transcribes every spoken call. Recording the audio is a separate switch, and it is off until you turn it on.
  • Says so at the start of the call. With recording off, the opening says the call is transcribed. With recording on, it says the call is recorded and transcribed, and invites the caller to say if they would rather not.
  • Locks every business’s data to its own account in the database itself, not only in the screen.
  • Encrypts data in transit and keeps stored data in a managed, encrypted database.
  • Never sells data, never runs ads on it, never shares your leads with anyone.
  • Deletes call audio automatically 90 days after the call.
  • Deletes a call, lead or recording when you ask, and closes an account with everything in it within 30 days.
  • Tells you directly if a breach affects your data, and reports it as PIPEDA requires.
  • Has a designated Privacy Officer, reachable at info@askmuse.ca.

What you do

  • Tell your callers what you collect and why, for example on your website and in your greeting.
  • Decide whether recording is on, and make sure the notice and your consent rules fit your business and province. We will help you word it.
  • Keep your script to what you need. Your script decides what else Muse asks.
  • Answer a caller who asks to see, correct or delete their information. We help you find it.
  • Keep your login private and decide who on your team can see the dashboard.
  • Keep any records the law requires in your own system. Muse’s transcripts and summaries are a working copy.
  • Check provincial rules. Quebec, Alberta and British Columbia have their own private-sector privacy laws, and they may apply to you.

The ten principles, in practice

PIPEDA is built on ten fair information principles. Here is what each one looks like with Muse on your phone.

PrincipleWhat AskMuse doesWhat you do
1. AccountabilityWe have a designated Privacy Officer for how we handle information.You stay responsible for the information you collect, including what we handle for you.
2. Identifying purposesCall information is used to run Muse: answering, leads, bookings, summaries and alerts to you.Tell callers why you collect it.
3. ConsentA spoken notice at the start of the call. Recording is off unless you switch it on.Meet the consent rules for your business and province.
4. Limiting collectionMuse takes the basics: a name, a number and what the caller needs.Keep your script to what you really need.
5. Limiting use, disclosure and retentionNo sale, no ads. Audio deleted at 90 days. Deletion on request.Delete what you no longer need.
6. AccuracyEvery call has a transcript, so you can check what was said. Ask us to correct anything we hold.Confirm details with the caller when it matters.
7. SafeguardsEncryption in transit and at rest, database-level locks per account, secrets kept on the server side, and administrator access limited to the founder (and to a partner administrator only if your account was set up through a partner).Protect your login and your team’s access.
8. OpennessThis page, our privacy policy and our security page. The list of providers is available on request.Publish your own privacy policy.
9. Individual accessWe act on access, correction and deletion requests and confirm when done.Pass on any request that reaches you, or ask us to help.
10. Challenging complianceQuestions and complaints go to our Privacy Officer. If you are not satisfied, you can go to the Privacy Commissioner of Canada.Have a way for your callers to complain to you.

Where your data is stored

Our database and our file storage are in Canada. Here is what sits there.

WhatWhere it is storedNotes
Your account and business detailsCanadaName, hours, services, greeting. Your password is stored hashed.
Leads and bookingsCanadaWhat callers shared and the appointments Muse booked.
Call records and transcriptsCanadaKept in our database.
Call recordings (only if you turn recording on)CanadaKept in our file storage for 90 days, then deleted.

This table covers what we store. For how a call is handled while it happens, and the kinds of providers involved, see our Privacy Policy. If you need the supplier list for a security review, email us and we will send it.

How long we keep it

These are our real defaults today. You can always ask us to delete something sooner.

WhatHow longNotes
Call audio90 days after the callOnly exists if you turned recording on. A daily job deletes it. The transcript stays.
Transcripts, leads, call summaries and bookingsUntil you delete them or close your accountYou can delete one call or lead, or ask us to.
Your account, if you close itDeleted within 30 days of your requestBusiness details, leads, recordings, transcripts and bookings. We confirm by email. Invoices are kept for the period Canadian tax law requires.
Busy times read from your calendarNot storedUsed for the request in hand only.
A number that replies STOPKept on a stop listSo Muse does not message it again.

Your rights and how to use them

Under PIPEDA, a person can ask what information an organization holds about them, get a copy, ask for a correction, and ask for it to be deleted where the law allows. If you called a business that uses Muse, ask that business first. You can also email us.

Contact and complaints

AskMuse Privacy Officer

Questions, requests and complaints about how we handle information.

info@askmuse.ca
Muse Nexus, Ontario, Canada

Privacy Commissioner of Canada

If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

priv.gc.ca

Questions

Is AskMuse PIPEDA compliant?

We do not put that label on ourselves. No regulator hands out a PIPEDA certificate, and compliance depends on how your business uses the service. What we can do is say exactly what the product does, which is on this page, and support you in meeting your own duties.

Is my data stored in Canada?

Yes. Your account data, leads, bookings, call records, transcripts and recordings are stored in Canada. For how a call is handled while it happens, see our Privacy Policy.

Does Muse record my calls?

Every spoken call is transcribed. Audio recording is off until you switch it on. When it is on, the caller hears that the call is recorded and transcribed.

Is my callers’ information used to train AI?

The speech recognition provider on our English, French and Spanish lines is told, on every request, not to use calls to train its models. Our other AI providers handle calls under their own API terms. We never use your information for advertising.

Who can see my leads and calls?

Only your account. The founder can access data when you ask for support or to fix a fault. If your account was set up through a partner, the administrator assigned to it can also see it, limited by the same database rules.

What happens if there is a breach?

We tell you directly, by email and by phone, with what happened, what was affected and what we are doing. We report it as PIPEDA requires.

I run a health practice. Is there more?

Yes. Ontario health practices also fall under PHIPA. See PHIPA and health practices.