Privacy Policy

Who we are

Northflow Automation ("Northflow", "we", "us") is a business name registered in Ontario, Canada, operated by Spencer Owen as a sole proprietorship. We build and maintain workflow automations for other businesses. This policy explains what personal information we collect through northflowautomation.ca, why, and what you can ask us to do with it.

Questions or requests go to our privacy contact at contact@northflowautomation.ca.

What we collect

• When you contact us. The name, business name, email address, phone number, and message you choose to send through the contact form or by email.
• When you call or text us. Your phone number, the time of the call, and any text messages you send, so we can reply and call or text you back.
• When you use the live demos. The text you type or paste into a demo, so it can be processed and a result shown back to you.
• Technical information. Like almost every website, our hosting provider processes your IP address and basic request details to deliver pages, block abuse, and limit how often the demos and contact form can be used.

We do not use advertising or analytics cookies, and we do not track you across other websites. Our hosting provider may set a strictly necessary security cookie to protect the site from automated abuse.

How we use it

• To reply to your inquiry, prepare a quote, and provide services you ask for.
• To run the demos you use.
• To keep the site secure and working properly.

We do not sell or rent personal information. We will not add you to a marketing list or send you promotional messages without your consent, in line with Canada's Anti Spam Legislation (CASL).

The live demos

Text entered into a demo is sent to our AI provider, Anthropic, to generate the result, and is then shown back to you. We do not save demo text on our own systems. Anthropic processes it under its commercial terms, which state that it does not use this data to train its models.

Please do not enter sensitive personal information into the demos, such as health details, financial account numbers, or government ID numbers. Use an example or remove names and contact details first.

Who we share it with

We use a small number of service providers to run the site and our business. They only receive what they need to do their job:

• Cloudflare hosts the website and protects it from abuse.
• Resend delivers contact form messages to our inbox.
• Google Workspace provides our business email.
• Anthropic processes demo text, as described above.
• Twilio carries phone calls and text messages on our phone lines and on the lines we run for clients.

Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. We may also disclose information if required by law.

How long we keep it

We keep contact form messages and related emails for as long as needed to respond and to manage any working relationship that follows, and generally no longer than two years after our last contact unless we're working together or the law requires otherwise. Demo text is not kept by us.

Your choices and rights

You can ask us to show you the personal information we hold about you, correct it, or delete it, and you can withdraw consent to us contacting you at any time. Email contact@northflowautomation.ca and we'll respond within 30 days.

If you're not satisfied with how we handle your request, you can contact the Office of the Privacy Commissioner of Canada.

Information we handle for clients

When we build automations for a client, we may handle their customers' information, such as inquiries their customers send them. In that case we act on the client's behalf and follow the client's instructions and our written service agreement with them. That information stays in the client's own accounts wherever possible, and we use it only to provide and maintain their automations.

Some automations, such as missed call rescue, run on a phone line we manage for the client. When someone calls or texts that line, their phone number, the call details, and their messages are processed by Twilio so the call can be answered and the texts delivered and passed on to the client.

How we protect it

We use reputable providers, encrypted connections, strong passwords and two factor authentication on our accounts, and we limit access to what's needed. No system is perfectly secure, but if a breach ever creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as required by law.

Changes to this policy

If we change how we handle personal information, we'll update this page and the date at the top.