Privacy
notice.

• Identity & contact — your name, email, and phone when you book a session, request a tour, or join the Insider List.
• Booking details — session date, service, engineer, deposit method, payment records.
• Communications history — text messages and email threads you exchange with us. We store these so a returning customer doesn’t have to re-explain themselves every visit.
• Technical metadata — IP address and browser User-Agent at the moment you signed up for the Insider List (CASL audit-trail requirement), page-view counts, device and browser type.
• Payment information — processed by Stripe. We never see or store your card number; Stripe returns us a tokenized customer ID and the last four digits.
• Attribution UTMs — when you arrive via a tracked link (e.g. ?utm_source=instagram) we store the campaign tag in your browser’s session memory so we know which channel sent the booking.

• Fulfilling bookings — schedule sessions, confirm engineers, send arrival instructions, take payment.
• Transactional comms — booking confirmations, deposit receipts, reschedule notices. These are required to run the service; they are not marketing and are exempt under CASL.
• Insider deals & offers — when you opt in, we send occasional discount codes and limited-quantity offers. Express consent only. One-click opt-out in every email.
• Service improvement — anonymized analytics tell us which pages convert and where the booking flow loses people.
• Legal compliance — invoice + tax records, CASL audit logs.

We use a small set of vendors to actually run the studio. Each one only sees the slice of data they need.

• Stripe — payment processing. They see your card; we don’t.
• Resend — email delivery. They see the recipient address and the rendered message.
• Twilio — SMS and voice. They see your phone number and the message body.
• Anthropic (Claude) — the AI receptionist that answers our phone. Transcripts are processed in flight; we keep the transcript, Anthropic does not retain it for training per their API terms.
• Supabase — database hosting (Toronto / US-East). All bookings, threads, and Insider records.
• Vercel — application hosting + edge network.
• Cal.com — tour booking scheduler. Holds tour appointments only.
• PostHog — product analytics. Page views, funnel events, server-side opt-in / opt-out signals. No session replay.
• Microsoft Clarity — session recordings & heatmaps. Form fields are masked by default; we cannot see what you typed.
• Meta (Facebook / Instagram) — advertising pixel. Only fires when an active campaign is running. Used to measure which ads actually drive booked sessions.

• Booking records — 7 years (Canada Revenue Agency record-keeping requirement).
• Insider List contact info — until you unsubscribe. After unsubscribe, we keep the email on a do-not-contact list so we don’t accidentally re-add you.
• SMS conversation history — 24 months.
• Analytics & session recordings — 12 months, rolling.
• SMS suppression list — permanent. Once you reply STOP, the phone number stays on the suppression list forever to honour your opt-out under CASL/CTIA.

• Access — email us and we’ll send you a copy of everything we have on you, within 30 days.
• Correction — email us to fix inaccurate data. We do it the same week.
• Deletion — email us to request deletion. We honour it within 30 days, except for records we’re legally required to keep (e.g. invoices for 7 years).
• Withdraw consent — click the unsubscribe link in any marketing email, or reply STOP to any text. Both take effect immediately.

We comply with Canada’s Anti-Spam Legislation (CASL). All marketing communications — email or SMS — require your express opt-in consent. You can unsubscribe at any time using the link in any email or by replying STOP to any text. Booking confirmations, deposit receipts, and other transactional messages are exempt under CASL s.6(6) and continue regardless of marketing preferences.