Your information, handled with care.

This policy explains what information Automine collects when you interact with us, how we use it, and the rights you have over it. It covers our website, our contact form, our calendar booking flow, and any direct communication you have with us about a potential or active engagement.

We are based in Ontario, Canada. Canadian privacy law - including the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, Quebec's Law 25 - is the baseline we operate under.

Information you give us. When you fill out our contact form, book a call, or email us, we collect what you tell us: your name, email, company, team size, the topic you want to talk about, and the message you write.

Information collected automatically. Our hosting provider records standard server logs (IP address, user agent, request paths, timestamps) for security and reliability. We use a privacy-first analytics tool to count visits and page loads in aggregate. It does not set tracking cookies, does not fingerprint browsers, and does not identify individuals.

We do not run advertising trackers, social pixels, or session replay scripts.

We use the information you give us to:

• Reply to your inquiry and run any subsequent audit or engagement.
• Schedule the call you booked.
• Improve our service - for example, by understanding which kinds of workflows we're asked to automate most often.
• Comply with our legal obligations, including tax records and any regulatory requests.

We do not sell your information. We do not use it to train external AI models. We do not share it with third parties for marketing.

We default every infrastructure decision - database region, edge zone, AI provider, storage - to Canadian residency unless you explicitly ask otherwise. Your contact information lives in Canadian data centres operated by our managed database provider.

When we work with you under an active engagement, the systems we build for you follow the same default. If a workload requires processing outside Canada (for example, a third-party AI model hosted in the US), we tell you up front and document the data flow.

A small list of trusted processors helps us run the studio. We choose them carefully and only share the minimum information they need to do their job.

• Our managed database provider - stores form submissions and engagement records.
• Our edge platform provider - serves the website and runs our contact form endpoint.
• Our calendar booking provider - handles the call scheduling flow when you click “Book a call.”
• Our transactional email provider - delivers the email you submit through our contact form to our inbox, and any reply we send back.

We do not share your information with any other third parties unless you explicitly ask us to or a Canadian court compels us to.

Under Canadian privacy law, you have the right to:

• Ask us what personal information we hold about you.
• Ask us to correct it if it's wrong.
• Ask us to delete it, subject to legal retention requirements.
• Withdraw consent for any non-essential processing.
• File a complaint with the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

To exercise any of these rights, email [email protected]. We respond within one business day.

We use encryption in transit (TLS) on every page of this site and on every API call. Stored data is encrypted at rest by our managed database provider. Access is restricted to senior engineers under named accounts with two-factor authentication.

We follow data minimization as a habit: we don't ask for information we don't need, and we don't keep it longer than we have to.

This site does not set tracking cookies. The contact form sets a short-lived session cookie only while you are filling it out, to protect against cross-site request forgery, and removes it after you submit or leave the page.

The calendar booking popup is provided by our scheduling partner and may set its own cookies inside the popup window to remember your booking state. You can close the popup any time to remove it.

Our services are aimed at businesses and founders. We do not knowingly collect personal information from children under 13. If you believe a child has submitted information through our site, contact us and we will delete it.

We may update this policy as our practices evolve. The “Last updated” date at the top of this page reflects the most recent change. Material changes will be communicated at the top of the page and, where the change affects active engagements, by direct email.

Questions about this policy or about the personal information we hold? Email [email protected]. The reply comes from a senior engineer at the studio, not a third-party support tool.