PRIVACY POLICY
Privacy Policy
What we collect, why, who we share it with, and how to see, correct or delete it.
LAST UPDATED
Autofy AI and Automation Solutions Inc. ("Autofy", "we", "us") builds the Special Order Tracker. We are based at 46 Miner Cove, Winnipeg, Manitoba R2N 0B4, Canada.
This policy explains what personal information we collect, why we collect it, who we share it with, where it's stored, how long we keep it, and how you can see, correct or delete it. It covers autofyinc.ca, the live demo, the people who contact us, and the retailers who use the Special Order Tracker, along with their staff.
The short version
- We collect what you type into our forms or send us, plus basic, cookie-free statistics about how the site is used.
- We use it to answer you, set up and run the service you pay for, and bill for it. We don't sell it, rent it, or use it for advertising.
- Filling in the demo form doesn't put you on a mailing list. We reply to your enquiry, and that's it.
- Some of our service providers are in the United States, so your information may be stored and processed there.
- You can ask to see, correct or delete your information at any time by emailing contact@autofyinc.ca.
1. If you're a customer of a store that uses Autofy
Stores use the Special Order Tracker to track the items they've ordered in for you, and to email you when your order arrives. In that role, the store decides what information is collected and how it's used. We process it only on the store's instructions, under a Data Processing Agreement with the store.
The store is responsible for your information, so questions and requests about it should go to the store. If you contact us instead, we'll pass your request to the store within 5 business days and help them answer it.
Order emails sent through the tracker are about your order only. Each one includes a way to unsubscribe.
2. What we collect and why
| What we collect | When | Why |
|---|---|---|
| Your name, email, phone number, store name, online store address, what you sell, how you track special orders today, roughly how many you handle, and anything else you choose to tell us | When you fill in the demo form on autofyinc.ca | To reply to you, prepare for a call, and follow up on your enquiry |
| Your name, email, the time you pick and any notes you add | When you book a call through Cal.com | To hold the call and prepare for it |
| Whatever you include in an email, phone call or message | When you contact us directly | To answer you |
| Business contact details, billing address and province, and the plan you chose | When your store signs up | To set up your account, bill you and charge the correct sales tax |
| Names, email addresses and roles of your staff, and a log of changes they make | When your staff use the tracker | To control who can log in, and to keep an audit trail |
| Page views, the page you came from, your browser and device type, and a few actions on the page (such as which button was clicked or how far through the form someone got) | When you browse autofyinc.ca | To understand which pages are useful and fix the ones that aren't |
| Your IP address and browser details in server logs | Whenever you load a page | To keep the site running and secure |
About the demo form. The form has two steps. When you move from the first step to the second, what you've typed so far is sent to us, even if you don't finish. If you stop partway, we may contact you once about the enquiry you started.
Payment details. Card and bank details are collected and held by Stripe, our payment processor. We never see or store your full card number.
Store connections. To run the tracker, we connect to your store's inventory system (Shopify, Lightspeed or WooCommerce). The access keys for that connection are stored encrypted. We use the connection only to read order, product and inventory information, and never to change anything in your store's system.
3. Cookies and analytics
We don't use advertising cookies or tracking pixels, and we don't follow you around other websites.
Site statistics come from Vercel Web Analytics and Speed Insights. They don't set cookies, and they report visits in aggregate rather than building a profile of you.
The site remembers whether you chose the light or dark theme. That choice is saved in your own browser and never sent to us.
On pages where you can book a call, the booking calendar is provided by Cal.com, which may set the cookies it needs to make the booking work.
The live demo at demo.autofyinc.ca runs on a fictional store with sample data. Please don't enter real customer information into it.
4. What we don't do
- We don't sell, rent or trade personal information.
- We don't add people who fill in our forms to a newsletter or marketing list.
- We don't use the personal information of a store's customers for our own marketing.
- We don't publish any client's name, logo or results without that client's written approval, and we never publish the personal information of a store's customers or the names of its staff.
5. Who we share it with
We share personal information only with the service providers who help us run Autofy, and only as much as each one needs to do its job:
| Provider | What they do for us | Where the data is held |
|---|---|---|
| Vercel | Hosts the website, the demo form and the tracker, and provides site statistics | United States |
| Resend | Sends email, including replies to the demo form and order notifications from the tracker | United States |
| Google Workspace | Our company email | United States |
| Cal.com | Books calls | United States |
| Stripe | Takes payment from our clients | Canada and United States |
| Supabase | Stores each client's order and customer records | The client's country of operation by default, or another location the client chooses |
The service providers that handle a store's customer data are also listed in our Data Processing Agreement. We give clients 30 days' notice before adding or replacing one.
We may also disclose personal information if the law requires it, or to a buyer if all or part of the business is sold. In a sale, the buyer would have to protect the information as this policy describes.
6. Where your information is stored
Autofy is a Canadian company, but several of our service providers store or process data in the United States. Information held there is subject to United States law, and may be accessed by authorities there under that law.
For our clients, the order and customer database is hosted in the client's country of operation by default, as recorded in their Statement of Work. Application hosting and email delivery are provided from the United States regardless.
7. How long we keep it
- Enquiries from the demo form, email or calls: for as long as we're in conversation, and for up to two years after our last contact. After that we delete them.
- Client data: for as long as the client's agreement is in effect. When it ends, we keep the data for 30 days so the client can export it, then delete it permanently. Backups that contain deleted data are cleared within 7 days.
- Billing and tax records: for as long as Canadian tax law requires, which is generally six years.
- Site statistics: kept in aggregate only.
You can ask us to delete your information sooner. We'll do it within 30 days, unless the law requires us to keep it.
8. How we protect it
- Data is encrypted in transit and at rest.
- Access keys for store connections are encrypted separately from the database.
- Each client's data is kept in its own separate database, so one client can never see another's.
- Staff can only see their own store's data, and access to our production systems is limited to the people who need it.
- Changes to order records are logged.
- Data is backed up regularly, and security updates are applied promptly.
If a security breach affects a client's data, we'll tell that client within 72 hours of becoming aware of it. If a breach of information we're responsible for creates a real risk of significant harm, we'll report it to the Office of the Privacy Commissioner of Canada and notify the people affected.
9. Your rights
You can ask us at any time to:
- tell you what personal information we hold about you, and how we've used and shared it;
- correct anything that's wrong;
- delete your information; or
- withdraw your consent to us using it, though we may then be unable to provide a service that depends on it.
Email contact@autofyinc.ca. We'll reply within 30 days, and there's no charge.
If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.
10. Children
Autofy is a service for businesses. It isn't directed at children, and we don't knowingly collect information from anyone under 18.
11. Changes to this policy
When we change this policy, we'll update the date at the top of the page. If a change materially affects our clients, we'll email them at least 30 days before it takes effect, as the Service Agreement sets out.
12. Contact us
Our Privacy Officer is responsible for how Autofy handles personal information.
Privacy Officer, Autofy AI and Automation Solutions Inc. 46 Miner Cove, Winnipeg, Manitoba R2N 0B4, Canada contact@autofyinc.ca · +1 (204) 999-8255
Questions about any of this? Email contact@autofyinc.ca or call +1 (204) 999-8255.