Introduction
Auburn AI is a sole proprietorship operated by Alexander McGregor in Calgary, Alberta, Canada. This policy explains what personal information Auburn AI collects through auburnai.ca and in the course of client work, how that information is used, and what rights you have under Canadian privacy law – specifically the Personal Information Protection and Electronic Documents Act (PIPEDA).
Auburn AI keeps this policy plain and specific. If something is unclear, email privacy@auburnai.ca and Alexander will answer directly.
What We Collect
Auburn AI collects personal information in two ways.
Email contact
When you email Auburn AI, we receive your name, email address, and the content of your message. That is the full extent of what a contact inquiry gives us.
Site visit logs
When you visit auburnai.ca, our hosting provider – Hostinger – automatically logs basic technical data: your IP address, browser type, the pages you viewed, and timestamps. This is standard server-side logging. Auburn AI does not currently run any additional analytics platform or install tracking cookies on auburnai.ca beyond what Hostinger sets at the server level. We do not use advertising pixels or behavioural tracking tools.
How We Use Your Information
Email content is read by Alexander McGregor only. It is used to:
- respond to your inquiry;
- scope and price a potential engagement; and
- where you become a client, deliver the contracted work.
We do not share email content with third parties except where delivering your project requires it – for example, if we are collaborating on a shared Google Doc with members of your team. In that situation, only the information needed for that specific task is shared, and only with the people you have identified.
Auburn AI does not sell personal information. Full stop.
How Long We Keep It
Inquiry emails – messages from people who did not become clients – are retained indefinitely in the Auburn AI inbox unless you request deletion. If you want your inquiry email removed, contact privacy@auburnai.ca and it will be deleted within 30 days.
Active client data is retained for the duration of the engagement. After the engagement closes, that data is kept for 7 years to meet the Canada Revenue Agency’s tax record retention requirement, then deleted. If you have questions about what specific data is held for your engagement, ask and Alexander will tell you exactly what exists and where it lives.
Third-Party Processors
Auburn AI uses a small number of third-party services. Here is what each one does and why it handles personal information:
- Hostinger – web hosting and email hosting for auburnai.ca. Hostinger processes server logs and stores email as described above. Hostinger is GDPR-compliant and operates data processing agreements consistent with PIPEDA obligations.
- Brevo – transactional email, used when a client engagement requires automated notifications or workflow emails. Brevo is a GDPR-aware processor. It is only brought into an engagement where the scope calls for it, and that is documented upfront.
- Gmail (Google Workspace) – Auburn AI uses a Gmail address with a forwarding configuration. Google has read access to email passing through that address. Google Workspace operates under Google’s data processing terms, which include GDPR and PIPEDA-consistent commitments.
Auburn AI does not use data brokers, ad networks, or any other third-party processors beyond those listed here.
AI Processing
Delivering AI workflow consulting sometimes means sending data to AI model providers. When Auburn AI uses Claude (Anthropic) or ChatGPT (OpenAI) as part of client work, the data submitted to those services is governed by their respective enterprise data-handling terms – not by Auburn AI’s infrastructure.
Auburn AI does not use client data to train AI models, and selects API or enterprise access tiers with providers specifically because those tiers exclude customer data from model training by default.
The specific AI tools used, what data is sent to them, and on what basis, are documented per engagement before work begins. If you have questions about AI processing in your project, raise them with Alexander before signing off on scope.
Your Rights Under PIPEDA
Under PIPEDA, you have the right to:
- Access the personal information Auburn AI holds about you;
- Correct information that is inaccurate or incomplete;
- Withdraw consent to collection or use, subject to legal or contractual limits; and
- Request deletion of your personal information, except where retention is required by law (see the 7-year CRA requirement above).
To exercise any of these rights, email privacy@auburnai.ca. Auburn AI will respond within 30 days. There is no fee for a standard access request.
Children
Auburn AI sells services to businesses, not consumers. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor’s information has been submitted to Auburn AI, contact privacy@auburnai.ca and it will be deleted promptly.
Changes to This Policy
This policy may be updated from time to time as Auburn AI’s tools or practices change. When it is updated, the effective date below will reflect the new version. Continued use of auburnai.ca after a policy update constitutes acceptance of the revised terms. If you are a current client and a material change affects how we handle your data, Alexander will notify you directly.
Effective date: April 2026
Contact and Complaints
For any privacy question, email privacy@auburnai.ca. Alexander reads and responds to every message personally.
If you have a complaint that Auburn AI has not resolved to your satisfaction, you have the right to contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. The OPC can investigate complaints and make findings under PIPEDA at no cost to you.