Atlantic Innovation Services Inc. Privacy Policy
Effective 2026-08-10.
Atlantic Innovation Services Inc. ("AIS," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit atlanticinnovation.ca, submit a lead or project inquiry, schedule a meeting, communicate with us, or otherwise use our website and related services.
This policy applies to the entire AIS website and current or future AIS lead forms. AIS is based in Halifax, Nova Scotia, Canada, and intentionally markets its services in Canada and the United States. We do not specifically target residents of the European Union or United Kingdom.
1. Who is responsible for your information
AIS is responsible for personal information under its control, including information processed for us by service providers.
Privacy questions, requests, and complaints may be directed to:
Privacy Officer
Atlantic Innovation Services Inc.
Halifax, Nova Scotia, Canada
privacy@atlanticinnovation.ca
2. Information we collect
Information you provide
Depending on how you interact with us, we may collect:
- your name, email address, and telephone number;
- information about a proposed project, including an optional project description, budget range, and timeline;
- messages, emails, SMS messages, call content, scheduling details, and other communications with AIS;
- consultation, proposal, project, customer, and relationship-history information;
- consent choices and evidence, such as the consent text and version presented to you, your selection, date and time, IP address, and the telephone number associated with the request; and
- payment, billing, and transaction information if you later purchase services from AIS. Payment-card information may be processed directly by a payment provider rather than stored by AIS.
The current /build form is a lead form. It does not create a user account or accept file uploads. AIS does not intentionally ask for sensitive personal information through its project-description field.
Information collected automatically
When you use our website, we and our service providers may automatically collect:
- IP address, browser, device, operating-system, and user-agent information;
- approximate location derived from IP address;
- pages viewed, interactions, timestamps, referring and destination URLs;
- campaign and attribution information, including UTM parameters;
- cookie, browser, advertising, and conversion identifiers, including Meta
fbp,fbc, and click identifiers; and - analytics identifiers if analytics tools are enabled.
We may combine automatically collected information with a lead record when you submit a form so that we can understand which campaign generated the inquiry and measure later outcomes.
Information from service providers
We may receive delivery status, scheduling activity, advertising attribution, call metadata, transcripts or summaries, payment status, security alerts, and similar operational information from service providers that help us operate the website and respond to inquiries.
3. How we use personal information
We may use personal information to:
- receive, assess, qualify, and respond to project or service inquiries;
- contact you by email, telephone, or SMS about the inquiry you submitted;
- schedule consultations and send confirmations, reminders, or scheduling links;
- prepare estimates, proposals, contracts, and project plans;
- keep internal lead, customer, communication, and relationship-history notes;
- operate AI-assisted calling, transcription, summarization, and follow-up features as described below;
- operate, secure, troubleshoot, and improve our website, forms, communications, and services;
- measure advertising performance, attribute conversions, build advertising audiences, and deliver or evaluate relevant advertising;
- prevent fraud, abuse, spam, security incidents, and technical failures;
- maintain consent, withdrawal, and do-not-contact records;
- comply with law, court orders, regulatory requirements, and lawful requests;
- establish, exercise, or defend legal claims; and
- evaluate or complete a merger, financing, acquisition, reorganization, or sale of all or part of the business, subject to appropriate protections.
AIS does not currently use lead information for newsletters or unrelated promotional campaigns. If we add that type of marketing, we will obtain any separate consent required by applicable law and provide an unsubscribe method.
4. AI-assisted calls and automated processing
AIS may offer an optional follow-up call using an artificial or AI-generated voice. We will place such a call only where the person has separately and affirmatively agreed to receive AI or artificial-voice calls at the telephone number they provided. Agreeing to an AI call is not required to submit an inquiry or purchase services.
At the beginning of an AI call, the agent will identify itself as an AI assistant calling on behalf of Atlantic Innovation Services Inc. The agent may use information from your form submission and, where relevant, earlier communications or lead notes to ask project questions, qualify the inquiry, answer basic questions, update the lead record, and help schedule a consultation. A person at AIS—not the AI agent—makes the final decision about whether AIS accepts a project or enters into an engagement.
The AI system must process call audio in real time to understand and respond during the conversation. If AIS would like to record the call or retain a transcript and summary, the agent will disclose that at the beginning of the call and ask for permission. You may decline recording and retained transcription. In that case, AIS will not retain call audio or a transcript and may continue without recording or arrange human follow-up.
AIS does not use these calls for personality analysis, sentiment scoring, or fully automated decisions that produce legal or similarly significant effects.
5. Advertising, cookies, and similar technologies
AIS uses Meta Pixel and Meta Conversions API for advertising measurement, attribution, matching, audience creation, retargeting, and related advertising purposes. Meta may receive website event data and identifiers such as page activity, conversion events, IP address, user agent, fbp/fbc identifiers, and—when applicable—name, email address, and telephone number. Contact identifiers sent through Conversions API are hashed using Meta's prescribed matching process; hashing does not necessarily make the data anonymous.
AIS may later enable other advertising, analytics, tag-management, or website-security tools, such as LinkedIn advertising, Google Analytics, Google Tag Manager, or Cloudflare. We will update our notices when a material new use is introduced.
Your choice about advertising tracking
Advertising and analytics technologies load by default when you visit the website. You can turn them off at any time using the Do not track me link in the website footer.
When you use that link:
- we stop loading advertising and analytics technologies in your browser;
- we delete the Meta advertising cookies already set on your browser, where we are able to;
- we stop sending your website activity and contact identifiers to Meta, including through the server-side Conversions API, so that opting out covers advertising data sent from our systems and not only from your browser; and
- technologies needed to operate and secure the website and its forms remain enabled.
Your choice takes effect immediately and persists for future visits on the same browser, subject to your browser storage and settings. Because the choice is stored on your browser, you will need to set it again on a different browser or device, or if you clear your cookies.
You may also contact the Privacy Officer at privacy@atlanticinnovation.ca to ask us to stop advertising-related processing.
Browser controls may also let you block or delete cookies, but parts of the website may not work as intended if strictly necessary technologies are blocked.
6. When we disclose personal information
We may disclose personal information:
- to service providers that operate our database, cloud application, website, email, scheduling, calendar, telephony, AI, transcription, analytics, advertising, payment, security, and development infrastructure;
- to legal, accounting, insurance, or other professional advisers where reasonably necessary;
- to law enforcement, courts, regulators, or other parties when required or permitted by law;
- where reasonably necessary to prevent fraud, abuse, or a security incident, or to establish or defend legal claims;
- in connection with a proposed or completed business transaction, subject to appropriate confidentiality and use restrictions; or
- to a consultant or referral partner only with your permission when AIS proposes referring your inquiry to them.
AIS does not sell lead information for money and does not provide leads to partners so they can independently market to them. Some disclosures through advertising technologies may be treated as a “sale,” “sharing,” or use for targeted or cross-context behavioural advertising under certain U.S. state laws even though AIS receives no money for the disclosure. You may use the Do not track me link in the website footer, or contact the Privacy Officer, to opt out where applicable.
7. Service providers and processing locations
Material service providers may include:
| Provider | Purpose and information involved | Expected processing location |
|---|---|---|
| Supabase | Primary lead database, backups, database logs, and custom lead management | Canada (ca-central-1) for the primary database and backups |
| Google Cloud | Cloud Run application processing and operational logging, which may include a full lead submission | United States (us-east1) |
| Meta | Pixel, Conversions API, advertising measurement, attribution, matching, retargeting, custom audiences, and lookalike audiences | United States and other jurisdictions used by Meta |
| Cal.com and Google Calendar | Scheduling, calendar synchronization, booking details, and reminders when you choose to book | United States and other jurisdictions used by the providers |
| Resend and Google Workspace/Gmail | Transactional email, delivery information, and direct communications about an inquiry | United States and other jurisdictions used by the providers |
| Retell AI and Twilio | Optional AI calling, telephone routing, call metadata, and transient call processing | Primarily United States |
| OpenAI and Anthropic | Transcription, summarization, and language-model processing for calls or lead communications | United States and other jurisdictions used by the providers |
| Stripe | Payment processing if you purchase services | United States and other jurisdictions used by Stripe |
| Cloudflare | Website delivery, security, and technical logs if enabled | Global network locations used by Cloudflare |
This list may change as our systems evolve. You may contact the Privacy Officer for current information about relevant service providers.
AIS stores its primary lead database and its backups in Canada. Some service providers process personal information in the United States and potentially other jurisdictions used in their global operations. Information processed outside Canada may be subject to the laws and lawful-access requirements of those jurisdictions, including access by courts, law enforcement, or national-security authorities. AIS remains accountable for personal information transferred to service providers for processing and uses contractual or other measures intended to provide appropriate protection.
AIS uses OpenAI's API and Anthropic's commercial services. Under those providers' current business terms and settings, API or commercial inputs and outputs are not used to train their general models by default unless the customer affirmatively opts in or another stated exception applies. AIS does not intend to opt lead or call content into general model training.
8. Retention
AIS uses the following target retention periods, subject to legal requirements, disputes, security needs, provider-controlled retention, and the time reasonably required to complete deletion from backups:
| Record | Target retention |
|---|---|
| Unconverted lead record | Up to 24 months after last activity |
| Customer and project relationship record | Up to 3 years after the later of last activity or the end of the engagement, except records kept longer for tax, accounting, contractual, or legal reasons |
| AI call audio | Not retained by AIS after the transient processing needed to operate the call |
| AI call transcript, summary, and related CRM notes | Up to 24 months after the call or last related activity |
| Google Cloud operational logs | Up to 6 months |
| Consent evidence | Up to 10 years |
| Do-not-contact and suppression records | Up to 10 years so AIS can continue respecting the request |
| Advertising identifiers and events | Retained under AIS controls where available and otherwise according to the advertising provider's applicable settings and retention practices |
When information is no longer required, AIS will delete it, de-identify it, or allow it to be overwritten through its normal backup lifecycle. A deletion request does not require AIS to delete records that it must or reasonably needs to keep for legal, compliance, security, dispute-resolution, consent-evidence, or do-not-contact purposes.
9. Your choices and privacy rights
Subject to applicable law and reasonable limitations, you may ask AIS to:
- confirm whether we hold personal information about you;
- provide access to that information and information about how it has been used or disclosed;
- correct inaccurate or incomplete information;
- delete information that is no longer required or that AIS is not legally entitled or required to retain;
- withdraw consent to future collection, use, or disclosure;
- stop contacting you through a particular channel;
- withdraw AI-call consent without deleting the rest of your lead or customer record;
- explain relevant service providers and international processing; and
- opt out of non-essential advertising or analytics tracking and, where applicable, targeted advertising or disclosures treated as sale or sharing.
Send a request to privacy@atlanticinnovation.ca. AIS may take reasonable steps to verify your identity before providing, changing, or deleting personal information. We will use identity information only for verification and will not ask for more than is reasonably necessary.
Withdrawing consent does not affect processing that occurred before withdrawal. In some cases, withdrawal may limit our ability to provide a requested service or continue an engagement.
If you are not satisfied with AIS's response, you may contact the privacy or consumer-protection regulator that has jurisdiction over your concern, including the Office of the Privacy Commissioner of Canada where applicable.
10. Security
AIS uses administrative, technical, and physical safeguards appropriate to the sensitivity of the information. These include HTTPS/TLS in transit, access controls and database row-level security, multi-factor authentication for administrative systems, limited need-to-know access, appropriate secret management, logging, and backups.
No method of transmission or storage is completely secure. AIS cannot guarantee absolute security, but we will investigate and respond to suspected incidents and provide notices where required by law.
11. Children
AIS's website and services are intended for adults and business users. AIS does not knowingly collect personal information from anyone under 18. If you believe a person under 18 has submitted personal information, contact the Privacy Officer so we can review and delete it where appropriate.
12. Changes to this policy
We may update this Privacy Policy as our practices, service providers, or legal obligations change. We will post the updated version on our website and change the effective or last-updated date. If a change materially affects how previously collected information is used, we will provide additional notice or seek consent where required.
13. Contact us
For questions, requests, or complaints about this Privacy Policy or AIS's privacy practices, contact:
Privacy Officer
Atlantic Innovation Services Inc.
Halifax, Nova Scotia, Canada
privacy@atlanticinnovation.ca