Privacy Policy

Effective Date: April 19, 2026
Last Updated: April 19, 2026

1. Introduction and Scope

Setpoint Automation is a one-person consulting practice operated by Jerrid Brown in Calgary, Alberta, serving trade and service businesses across Canada. This policy explains how personal information is collected, used, shared, and protected when you visit setpointautomation.ca, submit the contact form, engage as a client, or communicate via email, phone, or text.

This policy applies when Setpoint Automation acts as a data controller. When Setpoint Automation builds automations, workflows, or CRM configurations that run on a client's own tools (such as Jobber, QuickBooks, HubSpot, or Google Workspace), the client is the primary data controller for any customer data flowing through those systems, and the client's own privacy policy governs that data.

2. Who We Are

Setpoint Automation
Email: hello@setpointautomation.ca
Website: https://setpointautomation.ca
Location: Calgary, Alberta, Canada

For privacy inquiries, rights requests, and data access or deletion requests, email hello@setpointautomation.ca with the subject line "Privacy Request."

3. Information We Collect

3.1 Information You Provide Directly

• Contact information: name, email address, phone number, business name
• Business information: company details, services offered, service area, tools currently in use, project goals
• Communications: emails, text messages, phone calls, meeting notes, support messages
• Payment information: billing name and address. Payments are processed by third parties (e.g. Stripe, bank transfer, e-transfer). Full card numbers are not stored by Setpoint Automation.

3.2 Information We Collect Automatically

• Device and technical information: IP address, browser type, operating system, device type, screen resolution, language, timezone
• Usage information: pages viewed, visit dates and times, referring URL, clicked links, time spent on pages
• Log data: server logs including timestamps, errors, and diagnostic data
• Approximate geolocation derived from IP address (not precise GPS)

3.3 Information from Third Parties

• Referrals from current clients or partners who share your name and contact information
• Public sources such as business directories and publicly available social media profiles

4. How We Use Your Information

4.1 To Deliver Services

• Respond to consultation requests and inquiries
• Scope, build, and maintain automations, CRM setups, and websites
• Communicate about projects, billing, and service performance
• Provide ongoing support

4.2 To Communicate with You

• Send transactional messages about your project, account, billing, or security. These cannot be opted out of while you are a client.
• Respond to questions and feedback
• Occasionally send updates about new capabilities or relevant announcements. You can opt out at any time by replying STOP to any text or using the unsubscribe link in any email.

4.3 To Improve the Service

• Analyze how the Site is used
• Diagnose and fix technical problems
• Measure the effectiveness of communications

4.4 To Protect Rights and Comply with Law

• Detect, investigate, and prevent fraud or security threats
• Enforce agreements
• Comply with applicable laws, regulations, and legal processes

5. Legal Basis for Processing

Setpoint Automation operates from Alberta, Canada, and complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA). Where GDPR applies to a visitor from the EEA, UK, or Switzerland, the legal basis for processing is:

• Performance of a contract: delivering services you have requested
• Legitimate interests: responding to inquiries, security, fraud prevention, and improving the Site
• Consent: where required by law, such as non-essential cookies and optional communications
• Legal obligation: compliance with tax, accounting, and other legal requirements

6. How We Share Your Information

Setpoint Automation does not sell personal information. Information is shared only with:

6.1 Service Providers

A small number of third-party providers are used to run this website and deliver the service. They receive only what is needed to do their job.

• Vercel Inc. · website hosting and infrastructure
• Formspree Inc. · contact form submission processing
• Google Workspace · email and calendar
• Stripe Inc. · payment processing (when invoiced through Stripe)

This list may change. When it does, this policy will be updated.

6.2 Legal and Safety

Information may be disclosed to government authorities, courts, and law enforcement when reasonably necessary to comply with law, respond to valid legal process, enforce agreements, or protect the rights and safety of Setpoint Automation or others.

6.3 Business Transfers

If Setpoint Automation is involved in a merger, acquisition, or sale of assets, personal information may transfer to the acquiring entity. You will be notified of any such change.

6.4 With Your Consent

Information is shared in any other case only with your specific consent.

7. Cookies and Tracking Technologies

The Site uses a minimal set of first-party cookies and local storage entries required for basic site function, such as remembering your light or dark theme preference. No cross-site advertising pixels or third-party analytics are installed on the marketing site at the time of writing.

Most browsers accept cookies by default but can be configured to refuse or alert about them. Disabling cookies may affect Site functionality.

8. SMS and Text Message Communications

If you provide a mobile number and consent to receive texts, standard message and data rates apply per your carrier. You can opt out at any time by replying STOP to any message. Reply HELP for contact information. Your mobile number is not sold or shared with third parties for marketing purposes. Consenting to SMS is not a condition of purchasing services.

9. Email Communications

You may receive project, account, billing, and support emails related to your engagement, as well as occasional relevant updates. Marketing emails include a clear unsubscribe link. Unsubscribe requests are honoured promptly and within the timeframes required by CASL and CAN-SPAM. Transactional emails cannot be opted out of while you remain a client.

10. Data Retention

Personal information is retained only as long as needed to provide services, meet legal obligations, resolve disputes, and enforce agreements:

• Active client records: kept for the duration of the engagement and up to seven years after closure for tax and accounting requirements
• Transactional and invoicing records: seven years
• Inquiry and consultation records: up to three years from last contact
• Server and diagnostic logs: typically under ninety days

After retention periods expire, information is deleted or anonymized. If deletion is not technically possible, information is isolated and processing is prevented until deletion is possible.

11. Data Security

Setpoint Automation applies technical and organizational measures appropriate to the sensitivity of the information, including:

• TLS encryption in transit
• Encryption at rest for sensitive records held in managed services
• Access controls, strong authentication, and least-privilege principles
• Regular review of dependencies and infrastructure
• Incident response procedures

No security measure is perfect. If a breach affects your personal information, you will be notified as required by law.

12. International Data Transfers

Data may be stored or processed outside Canada by service providers (for example, Vercel hosting regions, Formspree servers, Google Workspace, Stripe). Where required, contracts with these providers include Standard Contractual Clauses or equivalent safeguards. You may request further details at hello@setpointautomation.ca.

13. Your Rights and Choices

Depending on where you live and applicable law, you may have rights to:

• Access: request a copy of the personal information held about you
• Correction: request inaccurate or incomplete information be corrected
• Deletion: request deletion, subject to legal and contractual exceptions
• Portability: request information in a structured, commonly used format
• Restrict processing: limit how information is processed
• Object: object to certain processing, including direct marketing
• Withdraw consent: withdraw any consent previously given
• Opt out of marketing: stop receiving optional communications at any time

Exercise any of these rights by emailing hello@setpointautomation.ca with the subject "Privacy Request." Responses are provided within thirty days, or sooner where required by law. Identity verification may be required.

If you believe your privacy rights have been violated, you may also lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).

14. Children's Privacy

The Site and services are not directed to children under sixteen, and personal information from users under sixteen is not knowingly collected. If such information is discovered, it is deleted promptly. Contact hello@setpointautomation.ca with any concerns.

15. Third-Party Links and Services

The Site may contain links to third-party websites and services that are not controlled by Setpoint Automation. This policy does not apply to those third parties. Review their privacy policies before use.

16. Changes to This Privacy Policy

This policy may be updated to reflect changes in practice, technology, legal requirements, or the services provided. Material changes will be communicated by updating the "Last Updated" date at the top of this page and, where appropriate, by email or a notice on the Site. Continued use of the Site after updates constitutes acceptance.

17. Contact Us

For any questions, concerns, or requests regarding this policy or the handling of your personal information:

Setpoint Automation
Email: hello@setpointautomation.ca
Subject line: Privacy Request
Website: https://setpointautomation.ca

Responses are provided within thirty days or the shorter timeframe required by law.