Privacy Policy

We are based in British Columbia and subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for commercial email, Canada's Anti-Spam Legislation (CASL).

If you only want the short version: we collect what you type into our diagnostic form and basic website analytics. We use it to respond to you and to run our own business. We don't sell it. Some of the tools we use store it on servers in the United States.

1. Who we are and how to reach us

threndle.ai
46180 Thomas Road, Chilliwack, BC V2R 6C6, Canada
Email: hello@threndle.ai

For any privacy question, correction, access request, or complaint, email that address. We're a small business: it comes to a person, not a ticket queue.

2. What we collect

2.1 Information you give us through the diagnostic form

Our diagnostic questionnaire at threndle.ai/diagnostic-v2 asks for:

Contact details

• First and last name
• Email address
• Business name

Business context

• Industry
• Which categories of software you use (CRM, accounting, payments, advertising, payroll, e-commerce, email and file storage, team and operations, booking, design and documents, automation), and the specific applications you select within each
• Any other tools you describe in free text
• Where work slows down or gets stuck in your business
• Approximate hours per week lost to manual work
• Team size
• Your timeline for getting started
• Your budget range
• What you're looking for (information, a team learning session, or an integration)

You choose what to enter. Only your email address is strictly required for us to reply.

2.2 Information you give us by email or when booking

If you email us or book a call through our scheduling link, we receive whatever you include (typically your name, email address, and what you want to talk about, plus the meeting time).

2.3 Information collected automatically

We use Google Analytics 4 and PostHog to understand how the site is used. This collects standard web analytics data: pages viewed, approximate location derived from IP address, device and browser type, referring site, and how you move through the site.

PostHog may also record a replay of your session (where you scrolled and clicked, and any errors the page produced) so we can fix what is broken. Anything you type into a form field is masked in these recordings and never reaches PostHog; the contact details you submit go only to HubSpot as described above.

We also record anonymous interaction events on the diagnostic form itself: which step you reached, which fields you focused on or left blank, how long you spent, and whether you abandoned the form. This tells us where the form is confusing. These events are not tied to your name or email; they exist to improve the form, not to profile you.

2.4 What we don't collect

We don't ask for or want financial account numbers, government identifiers, health information, or any sensitive personal information through this website. Please don't send it to us.

We don't run advertising trackers or sell data to advertisers.

3. Why we use it

We do not use your information to make automated decisions that have legal or similarly significant effects on you. A human reads every enquiry.

4. Consent, and how to withdraw it

Submitting the diagnostic form is your consent for us to contact you about your enquiry and to store what you submitted.

If you asked for information, you'll receive a short series of educational emails over four days, then nothing further unless you reply or book a call. Every email includes an unsubscribe link, and you can also just reply and say stop.

You can withdraw consent at any time by emailing hello@threndle.ai. Withdrawing consent doesn't affect anything we did lawfully before you withdrew it, and we may keep a minimal record that you asked not to be contacted, so we can honour it.

5. Where your information goes

We use third-party services to run the business. When you submit the form, your information passes through and is stored in the following systems:

Cross-border storage. Several of these providers store data in the United States. That means your information may be accessible to US courts, law enforcement, and regulatory authorities under US law, regardless of where you live. If you'd prefer not to have your information stored this way, don't use the form. Email us instead, and tell us you'd like your details kept to a minimum.

We use these providers under their standard terms as data processors. We don't sell, rent, or trade your personal information to anyone.

6. AI and your information

We're an AI automation agency, so it's fair to be specific about this.

• We do not use your personal information to train AI models, and we don't permit our providers to use it for that purpose under their standard business terms.
• Our website's robots.txt deliberately allows AI crawlers to read and learn from our own public pages, so AI answer engines can cite us. That choice covers our public marketing content only; what you submit to us is not publicly reachable and is never offered for training.
• We use AI tools internally to help run our business, including drafting responses and organizing our CRM. Where those tools touch your information, it's to serve your enquiry, and a person reviews anything that goes out to you. Nothing is sent to you automatically without a human approving it first.
• When we deliver an implementation for a client, that engagement has its own agreement governing data handling. This policy covers our website and enquiries, not client project data.

7. How long we keep it

Ask us to delete your information sooner and we will, unless we're required to keep it.

8. Security

We protect your information with access controls on every system listed above, multi-factor authentication on our accounts, and encryption in transit (the site is served over HTTPS).

We're a small business, not a bank. No system is perfectly secure, and we won't pretend otherwise. If a breach occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires.

9. Your rights

Under PIPEDA you can:

• Access the personal information we hold about you
• Correct anything inaccurate or incomplete
• Withdraw consent to further contact
• Request deletion, subject to our legal retention obligations
• Ask how we handled it: who we shared it with and why
• Complain, to us first and to the Office of the Privacy Commissioner of Canada if we don't resolve it

Email hello@threndle.ai. We'll respond within 30 days, which is the PIPEDA requirement. We may need to verify your identity before releasing information.

You can reach the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

10. Cookies and analytics

Google Analytics and PostHog set cookies to distinguish visitors and sessions. You can block cookies in your browser, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout. The site works fine without them.

Our scheduling and CRM tools may also set cookies when you interact with an embedded booking form.

11. Children

This site is for businesses. We don't knowingly collect information from anyone under 18. If you believe a minor has submitted information, email us and we'll delete it.

12. Changes to this policy

If we change how we handle personal information, we'll update this page and change the date at the top. Material changes affecting how we use information you already gave us will be communicated directly where we have your contact details.

13. Questions

hello@threndle.ai for anything in this policy, or anything it doesn't cover.