PRIVACY POLICY

Introduction

We at Streamlite Technologies (“we,” “us,” “our”) respect your privacy. This Privacy Policy explains how we collect, use, disclose, and protect the personal information you provide to us when you access our website (streamlite.ca), use our products and services — including our AI automation consulting services, AutoPilot (our Google Business Profile optimization platform), and our Website Audit tool — or interact with us in any capacity.

This Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), British Columbia’s Personal Information Protection Act (BC PIPA), and other applicable Canadian privacy legislation. Where we serve users outside of Canada, we also endeavour to comply with applicable international privacy standards.

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Effective Date” above and, where required by law, by providing direct notice. Your continued use of our services after changes are posted constitutes your acceptance of the updated Policy.

INFORMATION THAT WE COLLECT

We collect personal information that is reasonably necessary for the purposes identified in this Policy. We limit the collection of personal information to what a reasonable person would consider appropriate in the circumstances. The information we collect may include:

PERSONAL DATA

Personal data is information that can be used to identify you, including your name, email address, telephone number, business name, business address, and business category. You provide this information voluntarily when you create an account, subscribe to our services, complete our onboarding process, or contact us. You are under no obligation to provide this information, but your refusal may prevent you from accessing certain features of our services.

GOOGLE BUSINESS PROFILE DATA

When you use AutoPilot, we collect and process data related to your Google Business Profile, including but not limited to:

• Business information (name, address, category, hours, description, attributes)
• Customer reviews and ratings
• Questions and answers posted on your profile
• Photo metadata and counts
• Competitor business profile data available through public APIs
• Citation and directory listing information

This data is collected through the Google Places API and, where you authorize it, through direct access to your Google Business Profile via Google’s OAuth authentication. We access only the data necessary to provide the services you have subscribed to.

DERIVATIVE DATA

Derivative data is information that our servers automatically collect when you access our website, such as your IP address, browser type, operating system, referring URLs, the dates and times of your visits, and the pages you view. This data may be collected through cookies and similar technologies (see the Cookies section below).

FINANCIAL DATA

Financial data relates to your payment method, such as credit card details. We collect financial data to process your subscription payments. We do not store your full payment card information on our servers. All payment processing is handled by our payment processor, Stripe. We encourage you to review Stripe’s Privacy Policy at: https://stripe.com/privacy

CONSULTING AND PROJECT DATA

When you engage us for AI automation consulting services (AI Agents, Workflow Automations, RAG Systems, AI Strategy, or Workshops), we may collect business information you provide during discovery calls, project scoping, and implementation, including:

• Business workflow descriptions, processes, and pain points
• Access credentials to third-party platforms you authorize us to integrate (CRM, email, Slack, etc.)
• Knowledge base content you provide for RAG system training (FAQs, policies, pricing documents)
• Customer interaction data used to configure AI agents

This data is collected only with your authorization and used solely for the purpose of delivering the contracted services.

WEBSITE AUDIT DATA

If you use our free Website Audit tool, we collect the URL you submit and the analysis results generated from publicly available information about your website, including performance metrics, SEO data, and design assessments.

AI TECHNOLOGIES AND DATA PROCESSING

AI-POWERED FEATURES AND SERVICES

We use artificial intelligence (AI) technologies across our services, including:

Consulting Services

• Custom AI agents (text-based chatbots) for customer engagement and lead qualification
• Workflow automations connecting your business tools (CRM, email, Slack, and others)
• RAG (Retrieval-Augmented Generation) systems trained on your business knowledge base
• AI strategy development and implementation roadmaps

AutoPilot Platform

• AI-generated review response drafts for your Google Business Profile
• AI-generated Google Post content and scheduling suggestions
• AI-powered GBP audit analysis and optimization recommendations
• AI-generated business description suggestions
• AI-powered competitor analysis insights

Website Audit

• AI-driven website analysis across SEO, design, copywriting, and marketing dimensions

HOW WE USE AI WITH YOUR DATA

For consulting projects, our AI systems process data you provide (knowledge bases, workflows, customer interactions) to build and configure custom solutions for your business. For AutoPilot, our AI systems process your business data (reviews, profile information, competitor data) to generate recommendations and content drafts. All AI-generated content in AutoPilot is presented for your review and approval before any action is taken on your behalf.

AI DATA PROTECTION COMMITMENTS

We are committed to using AI technologies responsibly:

• AI-generated content requires your explicit approval before being published
• We do not use AI to make automated decisions with significant legal or similar effects without human oversight
• We implement technical safeguards to prevent unauthorized access to data processed by our AI systems
• We apply the principle of data minimization — our AI systems only process the data necessary for their intended functions
• Your business data is not used to train third-party AI models

HOW WE USE YOUR INFORMATION

We use your personal information for purposes that a reasonable person would consider appropriate in the circumstances, including:

• Creating and managing your account
• Delivering consulting services you have contracted (AI agents, workflow automations, RAG systems, AI strategy, workshops)
• Providing AutoPilot features you have subscribed to (GBP audits, review monitoring, post scheduling, competitor analysis, citation checks, weekly reports)
• Processing payments and managing billing
• Sending transactional emails (review approval requests, post approval requests, weekly reports, audit results, project updates)
• Building and configuring custom AI solutions using data you authorize
• Generating AI-powered content and recommendations for your review
• Analyzing and improving our services
• Responding to your inquiries and support requests
• Complying with legal obligations
• Protecting against fraudulent or unauthorized activity

CONSENT

In accordance with PIPEDA and BC PIPA, we obtain your consent before collecting, using, or disclosing your personal information, except where permitted or required by law. By creating an account and using our services, you consent to the collection, use, and disclosure of your personal information as described in this Policy.

You may withdraw your consent at any time by contacting us at info@streamlite.ca, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect your ability to use our services.

DATA SHARING AND DISCLOSURE

WE DO NOT SELL YOUR DATA

We do not sell, rent, or trade your personal information to third parties for marketing or any other purpose.

SERVICE PROVIDERS

We share your information with trusted third-party service providers who assist us in operating our services, solely for the purposes described in this Policy:

• Stripe — Payment processing
• Supabase — Database hosting and authentication (servers in Canada)
• Resend — Transactional email delivery (review approvals, reports, notifications)
• Google (Places API, Business Profile API) — GBP data retrieval and profile management
• OpenRouter / Google Gemini — AI content generation (review responses, posts, audit analysis)
• Railway — Application and workflow hosting
• Google Analytics — Website usage analytics

These providers are contractually obligated to protect your information and may only use it for the specific purposes outlined in our agreements with them.

OTHER DISCLOSURES

We may also disclose your personal information:

• As required or permitted by Canadian law, including in response to a court order, subpoena, or lawful request by a government authority
• When we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others
• To enforce our Terms of Use
• In the event of a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or control of your personal information

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to improve your experience on our website. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

We use the following types of cookies:

• Essential cookies: Required for the website to function properly (authentication, security)
• Analytics cookies: Google Analytics cookies to understand how visitors use our website

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our website. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

INTERNATIONAL DATA TRANSFERS

Streamlite Technologies is based in British Columbia, Canada. Our primary database is hosted in Canada (ca-central-1). However, some of our service providers may process data in the United States or other jurisdictions. When your personal information is transferred outside of Canada, it may be subject to the laws of the jurisdiction in which it is processed.

We take reasonable steps to ensure that your personal information receives an adequate level of protection in the jurisdictions in which we process it, including through contractual arrangements with our service providers.

DATA RETENTION

We retain personal information only as long as necessary to fulfill the purposes for which it was collected, to provide our services, or as required by law. Specifically:

• Account and subscription data is retained for the duration of your subscription and for a reasonable period thereafter to comply with legal and accounting obligations
• GBP audit data, review data, and post data are retained for the duration of your subscription to provide historical reporting
• Website audit data is retained for up to 12 months
• Payment records are retained as required by Canadian tax law

When personal information is no longer needed, we will securely delete or anonymize it.

SECURITY

We implement reasonable technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS)
• Encrypted database connections
• Row-level security policies to isolate tenant data
• Role-based access controls
• Regular security reviews

No method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

YOUR RIGHTS UNDER CANADIAN PRIVACY LAW

Under PIPEDA and BC PIPA, you have the following rights with respect to your personal information:

RIGHT OF ACCESS

You have the right to request access to the personal information we hold about you. We will respond to your request within 30 days, as required by law.

RIGHT TO CORRECTION

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

RIGHT TO WITHDRAW CONSENT

You may withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice.

RIGHT TO DELETION

You may request that we delete your personal information. We will comply with such requests unless we are required by law to retain the information or it is necessary for the completion of a transaction.

RIGHT TO COMPLAIN

If you believe we have not handled your personal information appropriately, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of British Columbia.

To exercise any of these rights, please contact us at info@streamlite.ca. We may require verification of your identity before processing your request.

COMMERCIAL ELECTRONIC MESSAGES (CASL)

In compliance with Canada’s Anti-Spam Legislation (CASL), we will only send you commercial electronic messages (CEMs) with your express or implied consent. You may unsubscribe from commercial messages at any time by:

• Clicking the unsubscribe link at the bottom of any commercial email
• Contacting us at info@streamlite.ca

Please note that transactional emails related to your active subscription (such as review approval requests, post approval requests, weekly reports, and billing notifications) are not considered commercial messages and will continue to be sent as part of the service you have subscribed to.

CHILDREN’S PRIVACY

Our services are designed for businesses and are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from a minor, we will take steps to delete that information promptly.

PRIVACY OFFICER AND CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact our Privacy Officer:

Streamlite Technologies
Chilliwack, British Columbia, Canada
Email: info@streamlite.ca