Terms of Use and Privacy Policy

Canonity is a technical intermediary platform (editor) that allows you to create automated workflows. Canonity does not own its own artificial intelligence model (LLM) and does not generate content autonomously.

Canonity provides three tools that you operate directly:

• LLM Orchestration: you create workflows connected to AI model providers (OpenAI, Anthropic, Google, xAI, DeepSeek, Moonshot AI, Alibaba). You choose which provider to use.
• Web Scraping: you configure data extraction steps from websites. You decide which sites to query.
• API Steps (Read/Write): you configure API calls to external servers. You decide which endpoints to integrate and which data to exchange.

Canonity executes the instructions you configure. It makes no autonomous decisions regarding data processing.

Canonity is a tool. Just as when you use a browser or a scripting application, you determine:

• Which LLM providers to use (and in which country they are based)
• Which sites to query via web scraping (and whether this is permitted by their Terms of Service)
• Which APIs to integrate and what content to exchange
• How to use AI model outputs

You are responsible for the choices you make and for compliance with applicable laws (copyright, GDPR, site Terms of Service, etc.).

Workflow execution is based on Generative Artificial Intelligence (LLM) models provided by external third parties.

• Risk of Error: Generative AI models can produce incorrect, incomplete, fabricated (“hallucinations”), or outdated information.
• No Verification: Data produced is not verified by Canonity. Output is generated by a probabilistic algorithm and should not be considered a source of truth or professional advice (medical, legal, financial).
• No sensitive content: Never enter sensitive data (passwords, credit card numbers, medical data) in prompts.

When you choose an LLM provider, your data (prompt text and technical parameters) is sent to that provider. Not sent: your IP, email, payment data, or device information.

⚠ China Provider Warning: DeepSeek and Alibaba Qwen process data in China. Under Chinese law, data may be subject to government access. Carefully evaluate before using these providers with personal or sensitive data.

Canonity operates exclusively as a technical intermediary and, therefore:

• Damages: Canonity cannot be held liable for any damage (direct, indirect, financial, or reputational) arising from workflow execution, use of an LLM provider, web scraping, or API calls configured by the user.
• External Processing: Since data processing is carried out through external LLM engines chosen by the user, Canonity has no technical control over computation processes and does not guarantee service continuity or accuracy.
• Web Scraping and APIs: The user is solely responsible for the legality of web scraping (compliance with robots.txt, Terms of Service, copyright) and for authorization of API calls to external servers.
• Use of Results: The user is solely responsible for the use, dissemination, or decisions based on produced data. It is the user's responsibility to verify output accuracy.

• Data Controller: Mille Isole SRL, Palermo, Italy — privacy@canonity.com
• Data collected by Canonity: Email, name, password (hashed), billing data (via Stripe), technical data (IP, device, browser), usage logs, technical and analytics cookies.
• Data routed on your instruction: When you use an LLM, scrape, or call APIs, the data you configure passes through third-party services. Canonity acts as Data Processor on your behalf.
• Retention: Account data: duration of service + 30 days. Payment data: 7 years (tax obligation). Security logs: 90 days. Prompts and content: not stored beyond execution.
• What we do NOT do: We don't have our own LLM, don't train models, don't sell data, don't do behavioral advertising, don't monitor prompt content.
• Extra-EU Transfers: Canonity infrastructure is in the EEA (OVH, France/Germany/Poland). Transfers to non-EU LLM providers happen only when you choose that provider. Choosing a non-EU provider means accepting the transfer.

Under Articles 15-22 of the GDPR you have the right to:

• Access (Art. 15): request a copy of your personal data
• Rectification (Art. 16): correct inaccurate data
• Erasure (Art. 17): request data deletion
• Restriction (Art. 18): restrict processing
• Portability (Art. 20): receive data in a structured format
• Objection (Art. 21): object to processing

To exercise your rights: privacy@canonity.com. Response within 30 days.

Right to lodge a complaint with the Garante per la Protezione dei Dati Personali, Piazza di Monte Citorio 121, 00186 Rome — www.garanteprivacy.it