Privacy Policy

Momentum is operated by Arios Technologies Inc., a company incorporated in Alberta and based in Calgary. This policy explains what personal information we collect, why we collect it, who we share it with, where it is stored, and what you can ask us to do with it.

We handle personal information under Alberta’s Personal Information Protection Act (PIPA) and, where our activities cross provincial or national borders, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Where those laws give you a right, this policy does not take it away.

This policy covers two different things, and it is worth keeping them apart. The first is your information — what we collect about you as the person who signs up, pays, and logs in. The second is your contacts’ information — the leads and customers you load into your account. We handle those two very differently, and section 5 explains how.

If you do not agree with how this policy describes our handling of your information, do not create a Momentum account. If you are already a customer and something here concerns you, email hello@ariostech.ca before you go any further and we will talk it through.

Account information. Your name, business name, email address, phone number, business address, and the login credentials you create. We need this to open and run your account.

Billing information. Your billing address, the plan you are on, your invoice and payment history, and the last four digits and expiry of your card. We do not store full card numbers. Card details are captured and held by Stripe, our payment processor, and we never see them.

Usage information. What you do inside Momentum — the workflows you build, the campaigns you send, the volume of texts, emails, calls, and AI actions your account generates. We use this to bill usage accurately, to support you, and to keep the platform stable.

Technical information. Your IP address, browser and device type, operating system, referring page, and the pages you visit on ariosmomentum.com. This is collected automatically by our website and by the platform.

Support information. What you send us when you email, book a call, or fill in a form — including anything you choose to attach.

Marketing information. If you fill in a form on our site, book a demo, or subscribe, we keep what you gave us along with the record of when and how you consented.

Under PIPA and PIPEDA we have to tell you the purposes before or at the time we collect. Ours are: to create and administer your account; to provide the Momentum platform and the services you have paid for; to bill you and collect payment, including metered telephony, messaging, and AI usage; to provide support and onboarding, including White-Glove Setup if you have purchased it; to keep the platform secure and investigate misuse, fraud, or abuse; to send service and administrative notices about your account, billing, outages, and changes to these documents; to send marketing about Momentum where you have consented; and to meet our own legal, tax, and record-keeping obligations.

We do not use your information for automated decision-making that has a legal or similarly significant effect on you, and we do not sell, rent, or trade personal information to anyone. There is no version of our business where that changes without us telling you first and asking.

You give us consent to handle your personal information for the purposes in section 2 when you create an account, buy a plan, or submit a form on our site. For anything outside those purposes, we will ask you first.

You can withdraw consent at any time by emailing hello@ariostech.ca, subject to legal and contractual limits — we cannot, for example, run your account without your account information, and withdrawing consent for that is effectively a cancellation. We will tell you plainly what the consequences are before we act on a withdrawal.

Our website and the Momentum platform use cookies to keep you signed in, remember your preferences, and measure how the site is used. Some are strictly necessary — without them the login and checkout will not work. Others are analytics cookies that tell us which pages people read and where they leave.

Most browsers accept cookies by default and let you refuse them or be warned before one is set. If you refuse all cookies, parts of the site and the platform will stop working properly. We do not use cookies to follow you around other people’s websites, and we do not run cross-site advertising trackers on ariosmomentum.com.

When you load leads, customers, and their conversations into your Momentum account, that information belongs to you and your business. You are the organization responsible for it under PIPA and PIPEDA. We are your service provider, and we handle it on your instructions.

That means we do not use your contacts for our own purposes, we do not market to your contacts, we do not merge your contact data with any other customer’s, and we do not sell or disclose it — except where we are compelled by a valid Canadian legal order, or where we need to pass it to the platform and infrastructure providers named in section 6 in order to deliver the service you are paying for.

It also means the consent and compliance obligations for the people in your database are yours, not ours. You are the one who collected them. Section 6 of the Terms of Use sets out what you agree to about that, including Canada’s Anti-Spam Legislation.

Our staff can access your sub-account when you ask us to — for support, onboarding, White-Glove Setup, or a paid custom-automation add-on. Access is limited to the people who need it, and it is logged.

Momentum runs on GoHighLevel (HighLevel Inc.), a United States platform that we license, configure, and resell. Your account and your contacts’ data are stored and processed on that platform, in the United States. Payments run through Stripe. Telephony and messaging run through the carriers and messaging providers GoHighLevel contracts with, which for Canadian numbers include Canadian mobile carriers. Email delivery runs through GoHighLevel’s email infrastructure.

Personal information handled by these providers is stored outside Canada, primarily in the United States, and while it is there it is subject to the laws of that country — including lawful access by United States courts, law enforcement, and government agencies. We are telling you this because Alberta’s PIPA requires us to, and because you should know it before you upload a customer list.

The purposes for which these providers are authorized to handle personal information on our behalf are limited to hosting, delivering, and supporting the Momentum platform, processing payments, and delivering the messages your account sends. They are not authorized to use it for anything else.

To ask questions about our use of service providers outside Canada, or about any part of this policy, contact the Privacy Officer at Arios Technologies Inc. at hello@ariostech.ca, or at the address at the bottom of this page. The Privacy Officer is the position responsible for answering questions about how your personal information is collected, used, and disclosed, and about our use of service providers outside Canada. The countries involved are Canada, where we operate, and the United States, where the platform, payment processing, and email delivery run.

We may also disclose personal information where a Canadian court order, subpoena, or law demands it; where it is needed to investigate a breach of our Terms of Use, fraud, or a threat to someone’s safety; or to a buyer if our business or its assets are sold, in which case the buyer is bound by this policy and you will be told before anything moves.

You can see and edit most of your account information yourself, any time, from inside Momentum. For anything you cannot reach from the interface, email hello@ariostech.ca and we will respond within 30 days, as PIPA requires.

You can ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, and ask us to delete it. We will do it unless a law, a tax rule, or an ongoing dispute requires us to keep something — and if we refuse any part of a request, we will tell you which part and why.

Some information survives deletion for a while regardless: invoices and payment records we are legally required to retain, and copies inside routine backups, which age out on their own cycle rather than being edited individually.

Requests about your contacts’ personal information should come to you, not to us — you are the organization responsible for that data. If one of your contacts approaches us directly, we will point them back to you and let you know.

We will only send you marketing about Momentum where you have given consent, or where Canada’s Anti-Spam Legislation allows it on the basis of our existing business relationship with you. Every marketing message we send identifies us, gives our mailing address, and carries a working unsubscribe link.

Unsubscribe whenever you like — through the link in any message, or by emailing hello@ariostech.ca. We act on it within 10 business days, which is the CASL limit, and usually the same day. Unsubscribing from marketing does not stop service and billing notices about your account; those are not marketing, and you cannot opt out of them while you have an account.

Personal information is encrypted in transit. Access inside Arios Technologies Inc. is limited to the people whose job requires it, protected by individual accounts and multi-factor authentication, and reviewed when someone changes role or leaves. Payment card data never touches our systems — Stripe handles it and holds the PCI compliance for it.

Your account is protected by a password you choose. Keep it to yourself, use a unique one, and turn on multi-factor authentication. If you share your login or let someone else use it, everything done under your account is still your responsibility.

No system connected to the internet is perfectly secure, and we are not going to pretend otherwise. What we will commit to is this: if a breach involving your personal information creates a real risk of significant harm, we will notify Alberta’s Office of the Information and Privacy Commissioner and the affected individuals as PIPA and PIPEDA require, without unreasonable delay, and we will tell you what happened and what we are doing about it. If you think your own device or credentials have been compromised in a way that touches your Momentum account, tell us immediately.

Account and contact data stays in your sub-account while your subscription is active. When you cancel, your data is retained for 30 days so you can reactivate or finish exporting, and then permanently deleted — unless you have parked your account, which preserves it. The Cancellation Policy sets this out in full.

Billing records, invoices, and tax records are kept for seven years, because Canadian tax law requires it. Support correspondence is kept while it is useful and then cleared. Marketing consent records are kept for three years past the last message, as CASL expects, so we can prove consent existed.

Momentum is a business tool sold to business owners. You must be at least 18 to open an account. We do not knowingly collect personal information from anyone under 18, and if we find we have, we delete it.

Momentum is sold to businesses in Canada. We do not market to, sell to, or knowingly onboard customers in the European Union or the United Kingdom, and this policy is not written to meet the GDPR or the UK GDPR. If your own business handles the personal data of people in the EU or the UK inside your Momentum account, that is your decision and your compliance obligation, and you should get your own advice before you do it.

We may update this policy. If a change is significant, we will email the address on your account and post a notice on this page before it takes effect. Continuing to use Momentum after that means you have accepted the updated policy.

If you have a privacy concern, bring it to us first at hello@ariostech.ca — we will acknowledge it within 5 business days and give you a written answer within 30 days. If you are not satisfied with our answer, you can take it to the Office of the Information and Privacy Commissioner of Alberta, or to the Office of the Privacy Commissioner of Canada.