1. Introduction
Automation DCT ("we," "our," or "us") is headquartered in Ontario, Canada and is committed to protecting your privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, websites, and services (collectively, the "Service").
2. Information We Collect
We collect information that you provide directly to us, including:
- Account information (name, email address, password)
- Business information (business name, industry, contact details)
- Content and customization data for your web applications
- Payment and billing information processed via Stripe
- Communication data when you contact our support team
- Lead capture data submitted through client-facing forms
We also automatically collect:
- Device and browser information
- IP address and approximate location
- Usage patterns and feature interaction data
- Performance and error telemetry (via Sentry)
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process transactions and send related information
- Send technical notices, updates, and support messages
- Respond to your comments, questions, and requests
- Monitor and analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and security threats
- Power AI-driven features such as lead capture and workflow automation
4. Data Sharing & Third Parties
We do not sell your personal information. We share data only with:
- Supabase — database hosting and authentication
- Vercel — application hosting and edge delivery
- Stripe — payment processing
- Sentry — error monitoring and performance tracking
- AI inference providers — for processing automation tasks (no PII is sent)
All third-party providers are bound by their own privacy policies and data processing agreements.
5. Data Security
We implement industry-standard security measures to protect your information, including: TLS encryption in transit, AES-256 encryption at rest, row-level security policies on all database tables, role-based access controls, and regular security audits. While no method of transmission or storage is 100% secure, we strive to use commercially acceptable means to protect your data.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will remove your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal information
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability (receive your data in a structured format)
- Withdraw consent at any time
To exercise any of these rights, contact us at privacy@automationdct.com.
8. Canadian Privacy Rights (PIPEDA)
Automation DCT is headquartered in Ontario, Canada. If you are a resident of Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). Under PIPEDA, you have the right to:
- Access — Request a copy of the personal information we hold about you. We will respond within 30 days of receiving your request.
- Correction — Request correction of any personal information that is inaccurate or incomplete.
- Consent — We collect, use, and disclose your personal information only with your knowledge and consent, except where permitted or required by law. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice.
- Accountability — We are responsible for all personal information under our control, including information transferred to third-party service providers acting on our behalf.
Breach notification: In the event of a security breach involving your personal information that creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada as required under PIPEDA.
If you have a concern about our privacy practices, you may file a complaint with the Office of the Privacy Commissioner of Canada.
9. Anti-Spam Compliance (CASL)
We comply with Canada's Anti-Spam Legislation (CASL). Commercial electronic messages (including email and SMS) are sent only with your express or implied consent. You may withdraw consent at any time by:
- Replying STOP to any SMS message
- Clicking the unsubscribe link in any email
- Contacting us at privacy@automationdct.com
We process opt-out requests within 10 business days as required by CASL. All consent records (timestamp, method, and scope) are retained for audit purposes.
10. Cookies & Tracking
We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics data is collected in aggregate form through our error monitoring tools and does not track individual browsing behavior across other sites.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@automationdct.com.