1. Who is responsible
Menkath Inc. is responsible for personal information collected through Gambit. The Smith AI Product Community of Practice, McMaster Digital Transformation Research Centre, and partner schools may present or facilitate the event, but they do not operate Gambit or hold its participant data unless separately stated.
2. Information we collect
We collect the display name you provide, group and room activity, notes, drafts, commitments, publication approvals and withdrawals, messages sent to facilitators, and the technical information needed to operate and secure the Service.
If you choose Speak, we receive only the transcript text inserted into the selected field. We do not record or store audio. Your browser, operating system, or speech provider may process audio separately.
3. How we use information
We use information to run the workshop, place participants in rooms, display writing to the relevant group, operate enabled AI features, record approvals, publish approved commitments, maintain security, troubleshoot, evaluate and improve the Service, and coordinate follow-up through the 2027 event.
We do not sell personal information or disclose it to advertisers or data brokers.
4. Who can see information
Participants and facilitators in the relevant workshop context can see display names and group writing. Public visitors can see a commitment only after every person named on it has approved publication. Once information is public or shared by another person, we may not be able to remove copies outside Gambit.
5. AI processing
When a facilitator enables an AI assistant, it processes group writing and commitment draft text to support that group. We do not attach your name to the text sent to the assistant. We may use de-identified or aggregated information to evaluate and improve Gambit. We do not use identifiable names or identifiable room writing to train a general-purpose model without a separate lawful basis and notice.
6. Service providers and cross-border processing
We use service providers for hosting, storage, security, AI processing, optional speech-to-text, analytics, and support. They may process information in Canada or other jurisdictions. We require appropriate confidentiality and security commitments from providers where required by law.
7. Retention and deletion
We keep workshop information through the twelve-month cycle leading to the 2027 event, then delete it unless it must be retained for legal, security, dispute, or accounting purposes. You may ask us to delete information sooner, subject to those requirements and the limits described above for public copies.
8. Security
We use reasonable administrative, technical, and physical safeguards appropriate to the information and the Service. No online service is completely secure. If an incident creates a notification obligation under applicable law, we will assess it and provide the required notices.
9. Your privacy choices
You may ask to access, correct, or delete your personal information; withdraw a publication approval; ask how your information is used; or raise a privacy concern. We may need to verify your identity and retain a limited record of your request. We respond in accordance with applicable privacy law, including PIPEDA and applicable provincial legislation.
10. Children and sensitive information
Gambit is intended for workshop participants and is not directed to children. Do not submit sensitive personal information unless a facilitator expressly requests it for a documented workshop purpose.
11. Changes and contact
We may update this Policy by publishing a revised version and its effective date. We will highlight material changes and seek renewed consent where required by law.
For privacy questions, access requests, correction requests, deletion requests, or complaints, contact a workshop organizer or facilitator, who will route your request to Menkath.