Privacy Policy

AI Process Automation is operated by Toby Stapleton as a sole proprietorship in Vancouver, British Columbia, Canada. When this policy says “we,” “us,” or “AIPA,” we mean the same person.

Contact: toby@aiprocessautomation.co · 1907 W 10th Avenue, Vancouver, BC, V6J 2B1, Canada.

From prospective customers we receive cold email from us: your business name, phone number, address, website URL (if any), publicly visible Google Maps reviews and photos, and any reply correspondence you send us. This comes from Google Maps’ public business listings or from your own website. We do not buy contact lists.

From visitors to this website: aggregated analytics about which pages are viewed and how visitors interact with them (anonymous page-view counts, approximate location at the country level, browser and device type, referring link). We use PostHog for this. We do not run advertising trackers.

From customers who buy a website: your name, payment email, business contact information, and the content you create or edit through the built-in /admin editor on your own site. Payment information itself (card numbers, etc.) is collected and stored by Stripe — we never see your card.

Prospect data is used to draft a personalized website preview for your business and to contact you about it. We rely on implied consent under Canada’s anti-spam legislation (CASL section 10(9)(b)) when a business has conspicuously published its contact information for the purpose of being contacted by other businesses — which Google Maps listings of operating businesses do.

Visitor analytics are used to understand which sections of this site are useful and to fix things that aren’t. We don’t use them for re-targeting or ad bidding.

Customer data is used to deliver the website you bought, configure your domain and hosting, and transfer everything into your accounts at the end of the engagement.

We use the following service providers (“subprocessors”) to operate the service. Each holds a narrow slice of data, only as needed:

• Anthropic — drafts the initial website copy from your public business information.
• Resend — sends and receives outreach email on our behalf.
• Supabase — stores the pipeline state and your business record.
• Google (Places API) — provides the public Google Maps data we use to build your preview.
• Vercel — hosts this site and the per-customer preview sites.
• PostHog — analytics for this marketing site.
• Stripe — processes payments when you buy.
• GitHub — stores your website’s source code repository.

We do not sell your personal information, and we do not share it with anyone outside the list above except when required by law.

Prospects who don’t respond or who decline are kept for up to 12 months from the last touchpoint, then deleted from our pipeline. Email delivery logs at Resend follow their own retention schedule (typically 30 days).

Customers: we keep your customer record for as long as you have an active website handed off through us, plus 7 years afterward for tax purposes (a Canadian recordkeeping requirement). The website itself, after handoff, lives in your own GitHub and Vercel accounts — not ours.

Anonymous analytics are kept indefinitely in aggregated form.

You can email toby@aiprocessautomation.co to:

• See what we have on file about you.
• Correct anything that’s wrong.
• Delete your record entirely (we’ll confirm by reply and complete it within 30 days).
• Unsubscribe from any future contact. Replying “please remove me” or “unsubscribe” to any of our cold emails is also sufficient — we respect those instantly and don’t make you click a tracker.

If you’re in the European Union or United Kingdom, you have additional rights under GDPR (access, portability, objection, restriction). Same email address handles those requests; we treat them on the same 30-day timeline.

This website uses a small number of cookies set by PostHog to count anonymous visits and remember whether you’ve seen any banners. We do not run third-party ad cookies.

To opt out of PostHog analytics across all sites that use it, enable “Do Not Track” in your browser, or install a tracker-blocking extension. Both are honored.

Some of our service providers (Anthropic, Resend, PostHog, Stripe, Vercel, GitHub) operate primarily in the United States. By using our service or contacting us, you understand that your data may be processed outside Canada. Each subprocessor maintains its own safeguards; we choose providers with reasonable security and privacy practices.

Our services are not directed at people under 18, and we do not knowingly collect information from anyone under 18.

If we change this policy in a material way, we’ll update the “last updated” date at the top and, for changes that affect existing customers, email you directly. Continued use of the service after a change means you accept the updated version.

Questions about this policy, or anything else about how your data is handled: toby@aiprocessautomation.co.

Mailing address: 1907 W 10th Avenue, Vancouver, BC, V6J 2B1, Canada.