Contents
1. Who we are
AI Eh-B'y is an AI automation company based in Newfoundland and Labrador, Canada. In this policy, "we" and "us" mean AI Eh-B'y.
Our Privacy Officer is responsible for how we handle personal information. You can reach the Privacy Officer at privacy@ai-eh-by.ca.
This policy covers:
- This website, ai-eh-by.ca, including its booking form (also reached at
/book/<name>) and its contact form. - AI Eh-B'y Studio at studio.ai-eh-by.ca, our internal dashboard for our team and invited clients.
- The AI Eh-B'y Google sign-in shown when you sign in to a sandbox (test) version of one of our apps.
Each of our apps has its own privacy policy. That policy, not this one, covers the information you put into the app itself, including its sandbox version.
2. What we collect
When you book a meeting on this website
- Your name and email address.
- Your phone number, if you give it.
- The address to visit, if you choose an in-person meeting.
- Anything you write in "Anything we should know?".
- The person, appointment type, date and time you choose.
When you send us a message on this website
- Your name, email address, phone number (if you give it) and your message.
- How long the form was open before you sent it. We use this only to filter out automated spam and do not store it.
Every time you use this website
- Like any website, our hosting receives your IP address, browser details and the pages you request, so it can deliver them.
- To limit abuse of the booking and contact forms, we keep a counter of how many times they were sent in the past hour. The counter is keyed by a one-way hash of your IP address, never the address itself.
- Your light or dark display choice, if you set one (see section 8).
This website has no accounts, no analytics, no advertising and no tracking pixels.
When you sign in to AI Eh-B'y Studio
See section 13.
When you sign in to an app sandbox with Google
Sandbox versions of our apps use a shared AI Eh-B'y Google sign-in screen. When you continue, Google shares your name, email address and profile picture with us, and our sign-in service (Google Identity Platform) creates an account record with those details, a user ID and your sign-in times. If an app asks Google for more access, Google's screen lists it, and that app's own policy explains how it is used. Sandboxes are for testing; only people we have invited can sign in.
3. Why we use it
- Booking details: to schedule your meeting, put it in our calendar, send you the calendar invitation and, for video calls, create the Google Meet link.
- Messages: to read and answer your question.
- Request data and the hashed counter: to deliver the website, keep it secure and stop automated abuse.
- Sign-in details: to let you into AI Eh-B'y Studio or an app sandbox and keep your account secure.
We never sell personal information. We never use it for advertising, here or on other sites. We do not use what you send us to train AI models. We do not send marketing email.
4. Consent
You give us your booking or contact details by sending the form, and your sign-in details by choosing to continue with Google. Phone number, visit address and notes are optional unless you choose an in-person visit, which needs an address.
You can withdraw your consent at any time by writing to privacy@ai-eh-by.ca. We will then cancel any booking you ask us to and delete your information as described in section 10, unless the law requires us to keep it.
5. Who we share it with
We share personal information only with the service providers below, only for the purposes above. Each is bound by its own terms to protect it.
| Provider | What it receives | Why |
|---|---|---|
| Google Cloud (Firebase Hosting, Cloud Run, Firestore), Google LLC, United States | Website requests (IP address, browser details); form submissions as they pass through our booking service; the hashed abuse counter | Hosting the website and running the booking and contact service |
| Google Workspace (Calendar, Gmail, Meet), Google LLC, United States | Booking details (stored as a calendar event); contact messages (delivered to our team mailbox) | Scheduling, sending the calendar invitation, video calls and answering messages |
| Google Fonts, Google LLC, United States | Your IP address and browser details when your browser downloads the site's fonts | Displaying the website's typeface |
| Google Identity Platform, Google LLC, United States | Name, email address, profile picture, user ID and sign-in times | Google sign-in for AI Eh-B'y Studio and app sandboxes |
The person you book with, and the rest of our team who share the bookings calendar, can see your booking. We may also disclose information when the law requires it.
6. Where it is stored
Our booking and contact service and AI Eh-B'y Studio run in Google Cloud's Montréal region (northamerica-northeast1). The website is delivered through Google's worldwide content network, so your request may be served from outside Canada. Google Workspace (calendar and mail), Google Fonts and Google Identity Platform are Google services that may store or process information outside Canada, including in the United States. Information held outside Canada, or outside Quebec, may be accessible to authorities there under local law. We rely on Google's contractual and security commitments to protect it.
7. How long we keep it
- Bookings: kept as calendar events in our Google Workspace calendar. There is no automatic deletion; we delete a booking when you ask.
- Contact messages: kept in our team mailbox. There is no automatic deletion; we delete your messages when you ask.
- Hashed abuse counter: covers a one-hour window and contains no name, email or IP address.
- Website request logs: kept under our Google Cloud logging settings, then deleted automatically.
- Display choice: stays in your browser until you clear it.
- Sandbox sign-in account record: kept until the account is deleted, either through the app or by asking us.
- AI Eh-B'y Studio: see section 13.
8. Cookies and storage on your device
This website
This website sets no cookies. It keeps one setting in your browser's local storage:
| Name | Type | What it holds | Cleared |
|---|---|---|---|
aiaioh-scheme | Local storage | Your light, dark or match-system choice, set only when you use the control in the footer | When you clear your browser's site data |
aiaioh-studio, aiaioh-concept, aiaioh-logo | Session and local storage | Design-preview settings, set only when our team opens a private preview link | Session storage when the tab closes; local storage when you clear site data |
AI Eh-B'y Studio
| Name | Type | What it holds | Cleared |
|---|---|---|---|
__session | Cookie (secure, HTTP-only, first-party) | Before sign-in, a random anti-forgery value; after sign-in, your signed session | The anti-forgery value after 15 minutes; the session after 14 days, or when you sign out |
studio-theme | Local storage | Your light or dark choice, if you pick one other than System | When you choose System or clear site data |
firebase:* | Session storage | Temporary Google sign-in state during sign-in | As soon as your Studio session starts, or when the tab closes |
App sandboxes set their own cookies and storage, described in each app's privacy policy.
9. Your rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy of it;
- correct information that is wrong or incomplete;
- give you your information in a commonly used format;
- withdraw your consent, or delete your information.
Write to privacy@ai-eh-by.ca. We answer within 30 days. We may need to confirm your identity first.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada. If you live in Quebec, you can also complain to the Commission d'accès à l'information du Québec.
10. Deleting your information
This website has no accounts. To have a booking or message deleted, write to privacy@ai-eh-by.ca from the email address you used. We delete the calendar event or messages and confirm when it is done.
For AI Eh-B'y Studio and app sandbox sign-in accounts, write to the same address. Information inside an app is deleted as that app's own privacy policy describes.
11. Security and breaches
All traffic to our sites is encrypted (HTTPS). Our services run on Google Cloud with access limited to our team. The booking and contact service keeps its credentials in a managed secret store, and the forms are protected against automated abuse. AI Eh-B'y Studio accepts only verified Google accounts that we have invited, and its session cookie cannot be read by scripts.
No system is perfectly secure. If a breach of security creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada and, for Quebec residents, the Commission d'accès à l'information, as the law requires.
12. Children
This website, AI Eh-B'y Studio and the AI Eh-B'y sign-in are not meant for anyone under 14. We do not knowingly collect information from children under 14. If you believe a child has given us information, write to privacy@ai-eh-by.ca and we will delete it.
13. AI Eh-B'y Studio
AI Eh-B'y Studio is a private dashboard. Only our team and clients we invite can use it, and it holds no app end-user accounts.
What it collects
- Google sign-in: your name, email address, profile picture, user ID and sign-in times, held by Google Identity Platform. The Studio accepts only Google accounts with a verified email.
- Membership record: your user ID, email address, role (admin, user or client), status (active or disabled), the apps a client may see, when the record was created and changed, and who created it.
- Invitations: the invited email address, role, apps, when it was sent and by whom. An invitation is removed once it is accepted.
- Audit log: every change to memberships, invitations, settings and the app list, with the time, the user ID and email of the person who made it, and the record before and after. Creating or deleting a note is logged with its title and size, never its text.
- Notes: plain-text notes that admins write about our apps, with who created and last changed each one and when.
Admins can also see each app's user counts and, for apps that offer it, survey responses. That information comes from the app and is covered by the app's own privacy policy.
How long it is kept
Membership records, the audit log and notes have no automatic deletion. When access ends, an admin disables your membership, which signs you out everywhere; the record and its audit history stay. Notes stay until an admin deletes them. To have your Studio records deleted, write to privacy@ai-eh-by.ca.
14. Changes to this policy
When we change this policy, we post the new version here with a new version number and effective date. If a change materially affects how we use information you have already given us, we will tell you directly and ask for your consent where the law requires it.
15. Contact
Privacy Officer, AI Eh-B'y, Newfoundland and Labrador, Canada
privacy@ai-eh-by.ca
See also our Terms of Use.