Privacy Policy

1. Who We Are

Ryt Automation is a sole proprietorship operated by Joonas Rytkonen, based in Markham, Ontario, Canada. We build custom AI automation systems for trades and service businesses across Ontario and Canada.

This Privacy Policy applies to information collected through our website at rytautomation.com and through any services we provide to clients. You can reach us at joonas@rytautomation.com.

2. What Information We Collect

Through our contact form

When you submit our contact form, we collect:

• Your name
• Your business name
• Your business type or industry
• Your email address
• Your phone number (optional)
• A description of your biggest admin challenge (optional, in your own words)

Through client systems we build and manage

When we build and operate an automation system for your business, we process data on your behalf including:

• Your customer records (names, contact information, job details)
• Financial records (receipts, invoices, expense data)
• Business communications (emails, notes, quotes)
• Scheduling and job information

This data belongs to you. We process it only to provide the services you have contracted us for and will never use it for any other purpose.

Information collected automatically

Our website may collect standard technical information such as your IP address, browser type, and pages visited through our web hosting infrastructure. This is used only for security and performance purposes and is not connected to your identity.

3. Why We Collect It and What We Do With It

• To respond to your inquiry — if you fill out our contact form, we use your contact information to reach out and discuss whether we can help your business
• To provide our services — once you become a client, we use your business data to build and operate your automation system
• To send you relevant updates — with your consent, we may send you information about our services or useful content for your business
• To improve our services — we may use aggregated, non-identifiable information to understand how our systems are performing

We do not use your information for any purpose not listed above. We do not sell your data. We do not share it with third parties for advertising or marketing purposes.

4. Legal Basis (PIPEDA)

We operate under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect personal information only with your knowledge and consent. By submitting our contact form or entering into a service agreement with us, you consent to the collection and use of your information as described in this policy.

You may withdraw your consent at any time by contacting us directly. Withdrawal of consent may affect our ability to provide services to you.

5. Third-Party Services We Use

To operate our website and deliver our services, we use the following third-party providers. Each is bound by their own privacy policy and handles your data only as required to perform their function:

We do not share your data with any other third parties. We do not use advertising networks, tracking pixels, or data brokers.

6. Where Your Data Is Stored

Our database infrastructure is hosted by Supabase, with servers located in the United States and Canada. Our website is hosted by Vercel, with global edge servers. By using our website or services, you consent to your information being stored in these locations.

For client systems, each client's data is stored in a fully isolated, dedicated database. Your data is never combined with another client's data, and no client can access another's information.

7. How We Protect Your Information

• Encrypted connections (HTTPS/TLS) on all data in transit
• Encrypted storage for databases at rest
• Row-level security on all stored data — access is restricted to only what each user is authorized to see
• Isolated infrastructure per client — complete data separation between accounts
• Access controls limiting who can view or modify data

No system is 100% secure. If you have reason to believe your information has been compromised, please contact us immediately at joonas@rytautomation.com.

8. How Long We Keep Your Information

• Contact form submissions — kept for up to 2 years, or until you ask us to delete them
• Client business data — kept for the duration of the service agreement plus 1 year, or as required by law
• Email communications — kept for up to 3 years in line with standard business record-keeping

You may request deletion of your information at any time. See Section 9 for your rights.

9. Your Rights Under PIPEDA

• Know what personal information we hold about you and request a copy
• Request corrections to any inaccurate or incomplete information
• Withdraw consent for us to use your information
• Request that we delete your personal information
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, contact us at joonas@rytautomation.com. We will respond within 30 days.

10. Email Communications (CASL)

We comply with Canada's Anti-Spam Legislation (CASL). We will only send you commercial electronic messages if you have given us express or implied consent. If you submit our contact form, you are consenting to be contacted about our services.

Every commercial email we send includes an easy way to unsubscribe. If you ask us to stop contacting you, we will honour that request promptly and permanently. We do not send unsolicited commercial electronic messages to people who have not indicated interest in our services.

11. Children's Privacy

Our services are intended for business owners and are not directed at anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time as our services evolve. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of our website or services after changes are posted constitutes acceptance of the updated policy.