Privacy Policy

We collect only the data we need to deliver Edynamics services. Categories include:

• Business information — business name, website URL, industry, location, hours, primary services.
• Contact information — your name, email address, phone number, and mailing address.
• Website analytics data — when you submit a URL through our /analyse tool, we fetch publicly available signals (page metadata, performance metrics, search visibility) to build your Signal Report.
• Social media profile data — public information from platforms you connect (account name, follower counts, post performance). We never read private DMs.
• Payment information — processed by Stripe. We never store your full card number on our systems; we keep only the Stripe customer/subscription identifiers.
• Platform usage data — actions you take inside the portal, dashboard views, agent runs, and lead/booking events.
• Communication records — emails, SMS, and voice transcripts produced by the platform (for example, AI phone-response calls).

• To provide revenue analysis, recovery, and intelligence services.
• To build, configure, and operate your client workspace and integrations.
• To send service communications (booking confirmations, billing, system alerts).
• To improve our platform — bug fixes, performance, and feature work — using anonymised, aggregated data.

What we do not do:

• We do not sell your data to third parties.
• We do not use your data for advertising — ours or anyone else's.
• We do not share your data outside the third-party processors listed below, and only as needed to operate the service.

Edynamics services depend on AI models for analysis, content generation, voice response, and research. This section is intentionally explicit because it matters under Canadian privacy law.

• We use AI services including Anthropic Claude, OpenRouter (which routes to multiple model providers), and Perplexity.
• Business data you provide may be sent to these services strictly to produce the analysis, content, or response we are delivering to you.
• Anthropic does not train its models on data submitted via API. OpenRouter and Perplexity have similar API-tier policies; we monitor their terms and will update this policy if those positions change.
• AI processing is used solely to provide the service — not for advertising, profiling, or sale to any third party.
• Clients may request that their data be excluded from any AI processing. Email support@edynamicsgrowth.com with the subject "AI processing opt-out" and we will configure your workspace accordingly. Some features (analysis, content generation) cannot be delivered without AI processing — we will tell you which features are affected before changing your configuration.

We use the following processors. Each handles a defined slice of operations and is contractually bound to confidentiality:

• Anthropic — AI model provider (Claude family).
• OpenRouter — AI model routing across multiple providers.
• Perplexity — live web research for competitive and market signals.
• Supabase — primary database and storage (hosted on AWS, Canadian/US regions).
• Vercel — application hosting and edge delivery.
• Twilio — SMS and voice messaging.
• Resend — transactional email delivery.
• Stripe — payment processing and subscription billing.
• Google — Business Profile, Places, PageSpeed, and YouTube APIs (used only with your authorisation).
• Vapi — voice AI for the AI phone-response feature.

• Data is stored in Canada and the United States on Amazon Web Services infrastructure operated by our primary processor (Supabase).
• Data is encrypted at rest and in transit (TLS 1.2+).
• Access is restricted by role-based access controls. Internal admin sessions are time-limited and audit-logged.
• We perform regular security reviews, dependency audits, and incident drills. Material breaches are disclosed to affected clients within 72 hours per PIPEDA's reporting standard.

• Active client data is retained for as long as your account is active.
• Deleted account data is purged from production systems within 30 days of termination.
• Encrypted backups are retained for up to 30 days, after which they roll out of rotation.
• Communication records (emails, SMS, voice transcripts) tied to a client are deleted alongside that client's data on termination.

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and equivalent provincial laws, you have the following rights with respect to your personal information:

• Right to access the personal data we hold about you.
• Right to correct inaccurate or incomplete data.
• Right to withdraw consent for any non-essential processing.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to lodge a complaint with the Office of the Privacy Commissioner of Canada (priv.gc.ca).

To make a request, email support@edynamicsgrowth.com. We respond within 30 calendar days.

Edynamics is a B2B platform. We do not knowingly collect personal information from anyone under 16. If you believe we have inadvertently received such data, contact us and we will delete it.

We update this policy when our practices change or when law requires it. Material changes are announced by email to active clients at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent change.

You can always reach the current version at edynamicsgrowth.com/privacy.