Privacy Policy

1. Who we are

LogorhythmX is a sole proprietorship based in British Columbia, Canada. We provide renovation contractors with an automated Instagram DM assistant ("Hali"), a lead-management dashboard, and content production services. We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). For any privacy question or request, contact support@logorhythmx.com.

2. Two kinds of people this policy covers

• Clients — renovation contractors who subscribe to our service.
• End users — homeowners and others who send Instagram messages to a client's account that Hali answers.

3. Information we collect from end users

If you message one of our clients on Instagram, we collect:

• Your Instagram name and handle.
• The contents of your messages.
• Any phone number, budget, timeline, location, or other project details you choose to share in the conversation.

Hali discloses that she is an automated assistant in her first message of a conversation. Anything you share after that is volunteered by you so the contractor can respond to your enquiry — that is the only purpose we use it for.

4. Information we collect from clients

• Business and account information — business name, contact name, email, phone, Instagram handle, and brand assets such as your logo and colours.
• Login credentials — managed through our authentication provider; passwords are never stored in plain text.
• Billing — payments are processed by Stripe. Card details are entered directly into Stripe's secure elements and are never stored on our servers; we retain only a payment reference (card brand and last four digits) and your Stripe customer ID. See the Stripe Privacy Policy.

5. How we use information — and how we don't

We collect only what is needed to run the service, and use it only for those purposes:

• To reply to and qualify Instagram enquiries on the client's behalf.
• To show the client their leads in their dashboard so they can follow up.
• To contact clients about their account or billing.

We do not sell personal information, use it for advertising, or share one client's leads with another client. End-user information is visible only to the contractor the person actually messaged.

6. Service providers we rely on

To operate the service, personal information passes through a small set of service providers:

• Supabase — cloud PostgreSQL database where lead and account data is stored, with row-level security separating each client's data.
• Anthropic (Claude API) — message contents are processed by Anthropic's Claude model to generate Hali's replies.
• ManyChat — a Meta-approved messaging partner that transports Instagram messages between Instagram and our system.
• Resend — sends our transactional emails (for example, notifications to clients).
• Stripe — payment processing, as described above.

Some of these providers store or process data outside Canada (typically in the United States), where it may be subject to local law. We share with each provider only what its role requires.

7. Retention and deletion

We keep data while the relevant client account is active. When a client cancels, or when anyone — client or end user — asks us to delete their personal information, we delete it. To make a deletion request, email support@logorhythmx.com.

8. Your rights

Under PIPEDA you may request access to the personal information we hold about you, ask us to correct it, or withdraw consent and ask us to delete it. Email support@logorhythmx.com and we will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

9. Changes

We will post any material changes to this policy on this page and update the date above.

This document has not yet been reviewed by legal counsel.