Privacy Policy

This policy explains what personal information Autometri Inc. collects through autometri.com, why we collect it, who it goes to, and what you can do about it. Where a section has legal weight we have said what we actually do rather than what we are permitted to do.

It covers this website: the pages, the inquiry form, the booking calendar and the chat. It does not cover the Atomic Agents platform itself, which runs under its own agreement, and it does not cover information you give us under a consulting engagement or a commercial contract, which is governed by that agreement.

Autometri Inc. is the organisation responsible for the personal information described here, at 10137, rue de Martigny, Montreal, Quebec H2B 2M4, Canada.

Quebec's Law 25 requires every enterprise to designate a person responsible for the protection of personal information, and to publish that person's title and contact details. Ours are:

David Gallucci, CPA, Chief Compliance Officer (Responsable de la protection des renseignements personnels), Autometri Inc., 10137, rue de Martigny, Montreal, Quebec H2B 2M4, Canada. E-mail privacy@autometri.com.

Write to this address with any question about this policy, to exercise the rights described below, or to make a complaint. If we cannot resolve it between us, you may take the matter to the Commission d'accès à l'information du Québec.

Most of this website collects nothing. Reading it sends your browser's ordinary requests to our hosting provider and nothing else. Personal information reaches us in four ways, each one started by you.

• The inquiry form, on the home page and at /contact/. It asks for your first name, last name and work e-mail, and, if you want to add them, a phone number and a message. With it we record which form you used and on which page, which link you clicked to reach it, and how you found the site in the first place: the channel, source, medium and campaign of your first visit and of your most recent one, the page you landed on, the site that referred you, and any advertising click identifier that was on the address you arrived by. Sending it delivers all of that as one e-mail to our shared inbox, hosted by Microsoft; the site itself keeps no copy. If the form is later connected directly to HubSpot, our customer relationship system, the same fields will travel there as well and become your contact record.
• The booking calendar, at /book/. The calendar is HubSpot's, embedded on our page. What you enter to book, typically your name, e-mail and anything you add in the notes, goes to HubSpot, which we use to schedule and to keep a record of who we have spoken to, and the appointment lands in our calendar.
• The chat, at /start/, the page behind the QR code on our business cards. What you type is sent to an agent running on our own platform, Atomic Agents, so it can answer. The page also reads the name of the person whose card you scanned from the address the code carries, and passes it along on the two buttons under the chat so we know whose card started the conversation.
• The measurement tags described in the next section, and only once you have allowed them. They report which pages you view, how you arrived, how long you stay and which links you follow; an approximate location, a city or region, derived from your IP address; the type of device and browser you use, its screen size, operating system and language; and, for Microsoft Clarity, a replay of your scrolling, mouse movement and clicks over the page. Clarity masks the text of form fields by default and we keep it that way, so what you type into the inquiry form is not in the recording. Each tag stores a random identifier in the cookies listed below so it can recognise a returning browser. For Google, Microsoft and Meta that identifier is never attached to your name. HubSpot's is different, and we say so plainly: if you have allowed it and you later send the inquiry form or book a call, HubSpot joins the pages you visited before and after to your contact record, so the person who replies to you can see what you were reading.

Your browser also keeps three things on your own device, in local storage, none of which is sent to us on its own: your light or dark theme preference, your consent decision, and the record of how you arrived that the form draws on. If you use the EN/FR link in the header, it also keeps that choice in a cookie named lang, which travels with each request so the site opens in the language you picked. See section 10.

The table below names every analytics and advertising technology on this site, what it does, and the cookies it sets. None of them loads until you allow it. See Cookies, local storage and consent.

Their own policies: Google, Microsoft, HubSpot, Meta. You can also opt out of Google Analytics in every browser at once with the Google Analytics Opt-out Add-on.

On almost every page there is none, which is worth stating plainly because it is unusual. No page on this site loads a font, an image, a video, a map or a widget from another company. The typefaces are served from our own domain, every image is our own file, and the icons are drawn inline. The three tags in the table above are the only third-party requests those pages are capable of making, and they make them only if you allow them.

Two pages are the exception, and on each the third party is the point of the page:

• /book/ loads HubSpot's meetings calendar: a script from static.hsappstatic.net and the calendar itself in a frame from meetings-na3.hubspot.com. The calendar is the service you came to that page for, so it loads without asking; HubSpot sets its own cookies on its own domain inside that frame, under HubSpot's privacy policy. The HubSpot tracking code in the table above is a separate thing, and it stays off until you allow it. If you have allowed it, the booking you make is joined to the pages you visited; if you have not, the booking stands on its own.
• /start/ loads the chat in a frame from chat.ca.atomicagents.io. That is our own platform, hosted in Canada, not another company's. Nothing reaches it until you open that page, and nothing you type reaches it until you send it.

• To answer what you asked, book the call you asked for, and follow up on the conversation you started.
• To know how you found us and which page you were reading when you decided to get in touch, so we can tell which of our efforts brings anyone here.
• To understand which parts of the site are read and which are ignored, so we can improve them.
• To measure whether our advertising works, and to show it to people who have visited us before.
• To keep the site available and secure, and to comply with our legal obligations.

We do not add you to a mailing list because you wrote to us, and we do not put you into an automated e-mail sequence. We do not make any decision about you by automated means through this website, and we do not profile you for any purpose other than the advertising described above.

Autometri Inc. is established in Quebec, so the law that governs us is the Act respecting the protection of personal information in the private sector, as amended by Law 25, together with Canada's federal PIPEDA. Our regulator is the Commission d'accès à l'information du Québec.

Under Law 25, consent must be requested for each specific purpose, in clear and simple language, separately from any other information, and it must be as easy to withdraw as it was to give. Analytics and advertising happen on the basis of your consent and nothing else. Answering an inquiry or booking a call happens because you asked us to.

Because the site is reachable from elsewhere, we also honour the equivalent rights of visitors under the GDPR in the European Economic Area and the UK GDPR, and under US state privacy statutes such as California's CCPA/CPRA. Where those give you more than Law 25 does, you get the greater of the two.

We do not sell personal information for money. We do not build a mailing list from this site, and we do not pass anything to a data broker.

The companies below receive personal information because they provide a service we use to run this site or to talk to you. Each acts on our instructions and under a contract that limits what it may do with the information.

• HubSpot, Inc.: the booking calendar, the customer relationship system where we keep a record of inquiries and conversations, and, once you have allowed it, the tracking code described in section 4.
• Atomic Agents, our own platform, which runs the chat on /start/. The AI model provider the platform uses processes the text of the conversation in order to generate the agent's replies, and does not use it to train its models.
• Google, Microsoft and Meta, as described in section 4, and only once you have allowed them.
• Amazon Web Services, which hosts the site, delivers it through its content network, and runs the small service that passes the inquiry form to our inbox.
• Microsoft, which hosts our e-mail, where inquiries arrive and where we answer them.

We may also disclose information where the law requires it, or to establish or defend our rights in a dispute. If Autometri Inc. is ever sold or merged, the information we hold may pass to the new owner, who would be bound by this policy.

The Meta Pixel shares online identifiers with Meta so that our advertising can reach people who have visited this site. Under California's CCPA/CPRA and several other US state laws, that counts as sharing personal information for cross-context behavioural advertising, and you may opt out of it.

Use the control below, or "Decline" on the consent panel. Either takes effect immediately and applies to every page of this site. Because the setting is stored in your browser, it does not travel between devices, and clearing your browser storage resets it.

Global Privacy Control. This site recognises the Global Privacy Control signal. If your browser or an extension sends it, we treat it as a standing opt-out: no analytics or advertising tag loads at all, and the consent panel does not appear. A GPC signal overrides a previous choice to allow tracking.

We do not discriminate against anyone who opts out. Nothing on this site is withheld, degraded or priced differently because of the setting above.

Nothing non-essential is set before you decide. Until you accept, no Google, Microsoft, HubSpot or Meta tracking script is fetched at all, so none of the cookies in the table exists. We hold the scripts back rather than loading them and asking them to behave. The one exception is the calendar on /book/, which is the service that page exists to provide and is described in section 5.

This site sets one cookie of its own: lang, two letters recording the language you picked from the EN/FR link in the header, kept for a year. It is sent with each request so that our content network can answer in that language instead of serving the other one first. It is strictly necessary for the choice to work, contains nothing else, and so needs no consent. Until you use the link it does not exist, and the language is taken from your browser's own settings instead. Three things are kept in your browser's local storage, on your device, and none of them is sent to us on its own:

• Your theme preference, light or dark, and your language choice, once you have made them.
• Your consent decision, with the date you made it, so we do not ask on every page.
• How you arrived: the channel, source, campaign and referring site of your first visit and your most recent one, and any advertising click identifier that was on the address you arrived by. This is read only if you send the inquiry form, and travels with it as described in section 3. If you never send the form it stays on your device and is never read by us.

If you decline, or withdraw after previously accepting, we delete the tracking cookies stored on this domain, tell Google to stop using storage, tell HubSpot to revoke its cookies, and switch the Clarity and Meta tags off. Cookies those companies set on their own domains, facebook.com, clarity.ms and hubspot.com among them, can only be cleared through your browser settings; no script we serve can reach them, and we would rather say so than imply otherwise. A tag already running in the open page stops collecting at that moment, and on your next page view nothing loads at all.

Your decision is remembered for twelve months, after which we ask again. We also ask again sooner if we add or change a tag, because consent to these purposes is not consent to new ones. The "Cookie preferences" link in the footer of every page reopens the panel, so withdrawing is the same gesture as consenting was.

The rights below are those Law 25 gives you, which in most respects are the broader set. You may ask us to:

• Access the personal information we hold about you, and be told how we use it, where we got it, and who we share it with.
• Correct it, if it is inaccurate, incomplete or ambiguous, or if collecting it was not authorised.
• Delete it, where we have no continuing legal or contractual reason to keep it.
• Port it: receive a copy in a structured, commonly used technological format, or have it sent directly to someone else you name.
• Stop disseminating it, or de-index any link that gives access to it, where the dissemination breaches the law or causes you serious injury to reputation or privacy that outweighs the public interest in knowing it.
• Stop using it for a particular purpose, including withdrawing your consent to analytics and advertising, which is as easy to do as giving it was, from the control in section 9 or the "Cookie preferences" link in the footer of every page.
• Stop the sale or sharing of it for advertising, as described in section 9.
• Explain any automated decision made about you exclusively by automated processing, and have it reviewed by a person. We do not currently make any such decision through this website.
• Be free from discrimination for exercising any of these rights.

Write to the person named in section 2 at privacy@autometri.com with "Privacy request" in the subject line, and tell us what you would like us to do. You may also write to the postal address in section 2.

Law 25 gives us 30 days to answer, and we will. If we refuse a request, in whole or in part, we will tell you which provision we rely on, explain why, and tell you how to ask the Commission d'accès à l'information to review it. If we do not answer within 30 days, that counts as a refusal you can take to the Commission.

To protect you, we need to be reasonably sure a request is really yours before we act on it. Writing from the e-mail address you gave us is normally enough. We will not ask for identity documents unless the request concerns information sensitive enough to warrant it. An authorised agent acting for you should provide written proof of that authority.

If you are not satisfied with our answer, you may complain to the Commission d'accès à l'information du Québec, or to the Office of the Privacy Commissioner of Canada, or to your own regulator if you are outside Canada.

This is a static website with no database of its own. What we hold is held in the systems named in section 8, for these periods:

• Inquiries and bookings, in our e-mail and in HubSpot: for as long as we are in conversation with you, and for up to two years after our last exchange, so we can pick the thread up if you come back. The browsing history HubSpot attaches to a contact record, where you allowed it, is kept and deleted with that record. If the conversation leads to an engagement, the information becomes part of that engagement's records and is kept under its terms.
• Chat conversations: on our platform, for up to 90 days, so we can follow up on what was asked and improve the agent's answers. A conversation that leads to an inquiry or a booking is kept with it.
• Google Analytics: event data for 14 months from your last visit.
• Microsoft Clarity: session recordings for 30 days, aggregate metrics for longer.
• Meta: according to Meta's own data policy, typically 90 days for the pixel identifier.

Your consent decision stays in your browser for twelve months and is then asked again. Clearing your browser storage deletes it, along with your theme preference and the record of how you arrived, immediately.

This is a business-to-business website for a consulting and software firm. It is not directed at children, and we do not knowingly collect personal information from anyone under 14, the age of consent for personal information under Quebec's Law 25, or under 13 for visitors in the United States, or under 16 where that higher threshold applies. We do not require age verification, so we rely on being told. If you are a parent or guardian and believe a child has given us personal information through this site, write to privacy@autometri.com and we will delete it promptly.

This site is hosted on Amazon Web Services in the United States and delivered through its content network. HubSpot, and Google, Microsoft and Meta, which provide the calendar and the tags above, all process data in the United States and elsewhere. The chat on /start/ runs on our own platform in a Canadian region.

Law 25 requires us to assess, before personal information leaves Quebec, whether it will receive protection equivalent to what Quebec law provides, taking into account the sensitivity of the information, the purpose, the protections it would carry, and the legal regime of the destination. Personal information held outside Quebec can be subject to the laws of the country it is in, including lawful access by authorities there. We rely on our suppliers' contractual commitments, including the standard contractual clauses where those apply.

The site is served only over HTTPS, and the browser is told to insist on it. It is a set of static files with no database and no login, so there is no store of visitor personal information on the site itself to breach. What you send through the form or the calendar is held in the systems named in section 8, each of which is protected by its provider's own security programme and reachable only by the people at Autometri Inc. who need it. No system is perfectly secure, so we do not promise that it is.

Law 25 calls a breach a confidentiality incident. If one occurs and presents a risk of serious injury, we must notify both you and the Commission d'accès à l'information promptly, take reasonable steps to reduce the risk, and record it in a register of incidents that we keep and can produce on request.

If we change how we handle personal information we will update this page and change the date at the top, and we review it at least once a year even when nothing has changed. If we add or change a tracking technology, the consent panel asks you again rather than treating an old decision as covering a new purpose. Material changes affecting how we use information we already hold will be brought to your attention rather than left here to be found.

Questions about this policy, or about how we handle personal information, go to privacy@autometri.com. For anything else, hello@autometri.com. Our terms of use are in the Terms of Service.