Skip to content

Privacy

Short, because we collect little.

Vector Asylum, Toronto, Canada. Effective September 19, 2026. This policy says what we collect on this site, what we do with it, and what we never do.

What we collect

  • The conversation form. Name, company, email, and your answers. Submitting records them with us first — they are written to our server log and to our email provider — and then offers you our scheduling provider (Cal.com) to book a call, with your name, email and answers carried over so you do not type them twice. We use them to read your request and respond — nothing else.
  • The Desk. The Desk is not open on this site. It is used by clients who sign in to a workspace, and by people we give a private link. Messages typed to it are sent through OpenRouter to an eligible AI provider running the DeepSeek model. Every request requires zero retention and denies provider data collection. When you submit a work email, we store the interview transcript available at that point with your answers, market read, and enrichment record. Don't put confidential information in the chat.
  • The newsletter. Your email address, passed to our email provider (Resend). Every email includes an unsubscribe link, honored immediately.
  • Hosting and delivery. The site runs on our own server. Cloudflare sits in front of it and keeps standard request logs, including IP address, for security and abuse prevention. We run no analytics trackers and no advertising pixels.

The Field Read

The Field Read is the market lookup inside the Desk. You describe your market in your own words, or you paste a company domain. If you paste a domain, our server fetches that domain's public homepage and reads the text on it, so the lookup understands what the company sells. We fetch that one page. We do not crawl the site.

We turn your description into a short list of search keywords, and we send those keywords — with a country and company-size filter — to Quick Enrich, a business data provider. That count lookup does not include your name or email. What comes back is counts: how many companies match, and how many decision-makers sit on top of them.

Two limits are written into the code, not only into this policy. We call Quick Enrich's two discovery endpoints and nothing else, and no contact name, email address, or phone number is ever returned to your browser.

If you give a work email to unlock the deeper read, we store that address and the market description you typed with our email provider (Resend), so we can follow up. We also use the work email and company domain to identify the person and company. That lookup can use Quick Enrich, Hunter and Apollo through Monid.

Who touches the data

Service providers only, each for its stated job: Cloudflare (network, security and request logs), Cal.com (scheduling), Resend (newsletter and lead capture), Quick Enrich (market and business lookups), OpenRouter and an eligible AI provider running DeepSeek (chat replies), TypeSafe (question classification), Monid with Hunter and Apollo (person and company enrichment), Exa and Treg (public web research), and Cloudinary (media delivery). Several operate outside Canada, so data sent to them crosses a border. We do not sell personal information, share it with advertisers, or use it for anything beyond responding to you.

How long we keep it

We keep personal information only as long as we need it for the reason you gave it to us. These are the periods we hold ourselves to.

  • Conversation requests. Your name, company, email and the answers you wrote. Kept for 24 months after our last contact with you, so we can find the thread if you come back. The same details are written to our own server log when the form is submitted, and that copy is covered by the same 24 months. If an engagement begins, your details become part of that engagement's file and are kept with our business records for as long as we are working together.
  • Field Read emails. The work email you give to unlock the deeper read, and the market description you typed with it. Kept for 24 months after our last contact with you.
  • Newsletter subscriptions. Kept until you unsubscribe. After that we keep only the address itself, on a do-not-mail list, so nobody adds you back by mistake.
  • Completed Desk sessions. When you submit a work email, we store the interview transcript available at that point, your answers, the market read, and the enrichment result. We keep that session for 24 months after our last contact with you. The AI route is required to use zero-retention providers and to deny provider data collection.
  • Rate-limiting. The IP address behind a chat or a form submission is held in the running server's memory for the length of the limit window — at most 24 hours — and is never written to disk.
  • Request logs. Held by Cloudflare on its own retention schedule. We keep no separate copy.

Ask us to delete something sooner and we will. Email [email protected].

Email from us

Commercial email we send identifies who we are and includes a working unsubscribe, per Canada's Anti-Spam Legislation (CASL). Ask off a list once and you stay off it.

Your rights

Under PIPEDA you can ask what we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] or reply to any email from us — we read both.