Privacy policy
Version 2026-11 · effective November 4, 2026 · Amametrics Inc., operating helloassist
helloassist is operated by Amametrics Inc., incorporated in Ontario, Canada ("we", "us"). This policy explains what we collect when you visit helloassist.co, run a free website check, use our interaction library, contact us or become a client, why we collect it, how long we keep it and what you can do about it.
1. Who this policy covers
Visitors, people who run a website check, people who contact us or book a call, newsletter subscribers, clients and the people who work for them, and people who report an accessibility barrier. When we build or run something for a client, that business's own privacy notice covers its customers (section 9).
2. When you contact us or book a call
- Collected: name, business name, email, phone if you give it, the services you are interested in, budget range and your message.
- Booking: calls are booked through Calendly, which receives your name, email and chosen time.
- Kept: 24 months after your last message if you do not become a client, then deleted.
3. The free website check
- Collected: the website address you enter, and your email only if you ask for the report by email.
- Read: only public information about that site and its public Google Business listing, using Google PageSpeed Insights. We never log in to anything and collect nothing about that site's visitors.
- Kept: reports for 12 months, then deleted.
4. Clients
- Collected: billing contacts, project files, content and the account access you choose to share.
- Passwords: stored only in a password manager, never in email or chat, and removed when the work ends.
- Kept: for the length of the engagement, then billing records for 6 years as Canadian tax law requires. Project files are returned or deleted within 90 days of the end of the engagement unless you ask us to keep them.
5. Email
We send emails you need, such as replies, reports and project updates. News and tips are opt in only, never pre ticked, and every one has an unsubscribe link that works right away. Delivery records are deleted after 90 days.
6. Analytics, advertising and cookies
We also keep our own simple visit log: the page you open, the site that sent you, your approximate location from our host Vercel (country, province or state, city), and your device, browser, language and screen width. It sets no cookie, stores nothing in your browser and never saves your IP address; visitors are counted with a one way code that changes every day. It is stored with our host Vercel (Upstash storage), only we can see it, and we keep it for up to 13 months. Google Analytics and the Meta Pixel load only if you allow them in cookie settings. Necessary cookies keep the site working and remember your choice. The full list, and how to change your mind, is in our Cookies policy.
7. AI tools
We use AI services to help draft, design and analyze. We only use providers that commit in writing not to train on our customer data. We do not put contact messages or client customer data into AI tools unless that is part of a service you asked for, and you can ask us not to use AI on your materials at any time.
8. Security
- Encryption in transit on every page and form, and at rest with our providers.
- Two factor sign in on every admin, hosting, email and content account, with access only for people who need it.
- Our own spam check on forms, which sets no cookie and shares nothing.
- Error monitoring set up not to send personal information.
- If a breach creates a real risk of significant harm, we tell you and the Office of the Privacy Commissioner of Canada as soon as we can, and keep a record of every breach.
9. Our clients' customers
When we build or run a website, booking system, review request, email or text message flow for a client, we handle their customers' information only on that client's instructions, under a written agreement. Messages go only to people who agreed to receive them, name the sender, and include a working unsubscribe or STOP option.
10. Retention and holds
The periods above are our fixed periods. Records needed for an open dispute, a security matter or a legal duty are kept longer, only for as long as they are needed. Backups are overwritten on their normal cycle and are not erased separately.
11. Service providers
Vercel (hosting), Sanity (site content), Upstash through Vercel (our visit log), Emailit (email), Calendly (booking calls), Google (Analytics and Tag Manager, with your consent; PageSpeed Insights for website checks) and Meta (Meta Pixel, with your consent). Some providers are outside Canada, including in the United States, where your information may be accessed by local courts and authorities. We never sell personal information.
12. Your choices and rights
You can ask to see what we hold about you, correct it, or have it deleted, and you can withdraw consent at any time, including turning off analytics and marketing cookies from "Cookie settings". Write to hello@helloassist.co. We answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.
13. Children
helloassist is for businesses and people 18 and over, and is not directed to children.
14. Changes to this policy
Each version has an identifier and an effective date, and every published version stays available. If a change is meaningful, we tell clients by email before it takes effect.
15. Contact
Amametrics Inc., operating helloassist. Email hello@helloassist.co for privacy, accessibility or anything else. A mailing address will be added to this page.