Dustoff

Privacy Policy

Last updated: May 23, 2026 · Effective: May 23, 2026

Dustoff ("we", "us", "our") provides customer-reactivation software to independent shop owners. This policy explains what personal information we handle, how we handle it, and the choices you have.

We are operated by Invomate, based in British Columbia, Canada. Questions: privacy@dustoff.invomate.me.

1. Two kinds of personal information

Dustoff handles two distinct sets of data, and the rules are different for each:

1a. Information about shop owners who sign up for Dustoff

When you create a Dustoff account (or a member of your staff does), we collect:

We use this data to operate your account, send you product updates you've subscribed to, and meet our own legal obligations. We never sell it.

1b. Information about your customers that you upload

When you import a CSV of customers into Dustoff, you act as the data controller; we act as your data processor. The data may include first name, last name, email, phone number, last-visit date, lifetime spend, and favorite item.

By importing this data, you confirm — under penalty of perjury and under Canada's Anti-Spam Legislation (CASL) — that every person in the file has given you express consent to receive marketing communications from your business. Dustoff records the exact attestation you provide, along with the timestamp and your user ID, as a legal record.

We use customer data only to perform the specific actions you instruct (e.g., generate a draft SMS, send an approved campaign). We never use your customer list to market other products, train AI models that aren't yours, or share it with third parties beyond the delivery providers below.

2. Sub-processors we use

To deliver the product we share specific data with the following service providers:

We do not transfer your customer data outside of Canada except as strictly necessary to use Anthropic's draft API. We are evaluating Canada-resident AI alternatives.

3. Retention

4. Your customer's rights

End customers (the people you message) have rights under PIPEDA and CASL:

If you receive such a request from one of your customers, you can use the Dustoff dashboard to mark them as "do not contact" (which suppresses them from all future sends) or to permanently delete them. STOP replies are processed automatically.

5. Your rights as a shop owner / account holder

You can access, update, or delete your account data at any time from Settings, or by emailing privacy@dustoff.invomate.me. We respond within 30 days as required by PIPEDA.

6. Security

Data is encrypted in transit (TLS 1.3) and at rest. Access is restricted to authorized staff with two-factor authentication. We perform regular dependency scanning. We notify affected users of any data breach within 72 hours as required by PIPEDA's mandatory breach notification regulations.

7. Children

Dustoff is not intended for children. We do not knowingly collect data from anyone under 16.

8. Changes to this policy

If we make material changes, we'll notify account holders by email at least 30 days before the change takes effect.

9. Contact

Privacy questions, deletion requests, complaints: privacy@dustoff.invomate.me. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada: priv.gc.ca.

This document is a plain-English summary of how Dustoff handles data. It is intended to be honest and accurate but is not legal advice. We will publish a formal privacy notice reviewed by Canadian counsel before launching paid accounts.