Privacy Policy

Effective: May 1, 2025 · HeadCrowd Studio

HeadCrowd Studio ("we", "us") is committed to protecting your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

1. What We Collect

We collect information you provide directly: account name and email, project briefs and content uploads, messages sent through the portal, and payment information (processed by Stripe — we do not store card numbers). We also collect basic usage data through Vercel Analytics (anonymised, no personal identifiers) to improve platform performance.

2. How We Use It

Your information is used exclusively to deliver the services you engaged us for: running your project, communicating with you, processing invoices, and maintaining your portal workspace. We do not sell your data, share it for marketing purposes, or use it to train AI models.

3. Third-Party Service Providers

We use the following sub-processors, each governed by their own privacy policies:

• Supabase — database and file storage (hosted in US-East)
• Stripe — payment processing
• Resend — transactional email delivery
• Vercel — hosting and anonymous analytics
• Apify — web research tooling (prospect data only, not client data)

We enter into data processing agreements with sub-processors as required.

4. Data Retention

Project data is retained for the duration of your active engagement. Billing records are retained for seven years in accordance with CRA requirements. You may request deletion of your account data at any time — see Section 6.

5. Security

All data is encrypted in transit (TLS) and at rest. Access is restricted to authenticated users. Portal credentials are managed through Supabase Auth with secure session handling.

6. Your Rights Under PIPEDA / PIPA

You have the right to: access the personal information we hold about you; request correction of inaccurate data; withdraw consent (subject to legal or contractual limitations); and request deletion of your data (subject to retention obligations). Submit requests to hello@headcrowdstudio.com. We will respond within 30 days.

7. Cookies

The portal uses functional cookies required for authentication and session management, and anonymous performance cookies via Vercel Analytics. No advertising cookies are used. See the cookie banner for more detail.

8. Contact

Privacy inquiries: hello@headcrowdstudio.com
HeadCrowd Studio, Calgary, Alberta, Canada

This policy was generated with AI assistance and is scheduled for professional legal review. See docs/legal-review-todo.md.