Privacy policy

Privacy policy

This policy explains how Zero Touch Integrations, operated by Chaley Consulting (“we”, “us”, “our”), handles personal information about the people who visit our website, ask us for an integration, use our customer portal or write to us.

1. Who we are and how to reach us

• Zero Touch Integrations, operated by Chaley Consulting, Unit #164733, 4220 Hyde Park Blvd, Niagara Falls, NY 14305, USA.
• Privacy questions and requests: support@zerotouchintegrations.com. Legal notices: admin@zerotouchintegrations.com.
• We serve organizations in Canada (outside Quebec) and the United States. This policy is written in English only.

2. What this policy covers

• It covers personal information we collect for ourselves: on this website, through the project and contact forms, in our customer portal, in email to us, for billing, and for outreach to businesses.
• The records our integrations read from and write to a customer’s apps are not covered here. For those records the customer decides what is processed, and we process them only on the customer’s instructions under our Data Processing Addendum (www.zerotouchintegrations.com/legal/dpa).

3. What we collect

• When you start a project or contact us: your name, work email address, company, country and province or state, the apps you want to connect, a rough monthly volume, your message, and whether you agreed to receive an email from us later.
• When you use the customer portal: your email address, your organization and role, and records of sign ins and of what you approve or sign, such as an agreement.
• For billing: the billing contact and the amounts we charge. Card and bank details are entered on, and held by, our payment processor, Stripe. We never see a full card number.
• When you email us: the message and its attachments, and the address it came from.
• For outreach: the publicly listed business contact details of businesses that may need an integration: a company’s name, a work role and a work email address.
• When you visit the website: the technical data any web request carries (address, browser and the page asked for), which our hosting provider uses to deliver and protect the site. The forms use a bot check (Cloudflare Turnstile). If page analytics are on, they are cookieless, collect no personal information, and do not load when your browser sends Do Not Track or Global Privacy Control. The pricing page remembers your currency choice in your browser. For the visit only, the site also keeps in your browser the campaign tags of the link you arrived by and the name of the site that referred you, and sends them with the project form. The customer portal uses cookies only to keep you signed in.

4. Why we use it

• To answer your request, prepare a scope and a price, and provide the service you sign up for.
• To run your account, bill you and keep records the law requires.
• To keep the service secure and to prevent abuse and spam.
• To send one email when we can take on an integration we could not take on before, only if you ticked the box that asks for it. You can withdraw that consent at any time.
• To contact businesses by email about our service, from publicly listed business contact details. Each such email says who we are, includes a way to unsubscribe, and we honour every request to stop promptly.
• We do not sell or share personal information, as those terms are used in US state privacy laws, and we do not use it for targeted advertising.

5. How we use AI

• AI tools read every email sent to our support address to sort it and draft replies, and they find and draft outreach to businesses. A person handles anything the AI tool cannot answer and decides whether each outreach email is sent.
• Our AI providers may not use your information to train their models. Our AI processing notice (www.zerotouchintegrations.com/legal/ai-processing-notice) says more.

6. Who we share it with

• Our service providers (subprocessors), only to run our service: hosting, the database, email delivery, payments, error reports, credential storage, backups and AI models. They are listed, with what each handles and where, at www.zerotouchintegrations.com/legal/subprocessors.
• Anyone the law requires us to tell, such as a court or a regulator.
• A buyer of all or most of our business, under this policy.

7. Where it is stored

• Our main database is in Canada (Montreal). Some of our service providers store or process information in the United States or elsewhere. The subprocessor list names each provider’s region as it is confirmed. Information stored outside your province, state or country is subject to the laws there and may be accessed by the courts and authorities of that place.

8. How long we keep it

• A request that never became an agreement: 12 months after the last activity.
• Spam: 30 days.
• An account: after it is closed, the data about your organization is deleted 30 days later, except the records the law requires us to keep, such as invoices, consent records and our audit log (kept for 7 years).
• If a breach affects your personal information, we tell you and the regulators as the law requires; for customer records, DPA section 7 sets a 72 hour notice.

9. Your choices and rights

• You can ask us for access to the personal information we hold about you, ask us to correct it, or ask us to delete it. You can withdraw a consent you gave, and you can ask us to stop outreach emails. Write to support@zerotouchintegrations.com. We answer within 30 days and may need to confirm who you are first.
• In Canada, your rights come from the Personal Information Protection and Electronic Documents Act (PIPEDA) and the provincial privacy laws that apply. In the United States, a state privacy law may give you similar rights, such as the California Consumer Privacy Act. We do not treat you differently for using your rights.
• If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to the privacy authority where you live.
• If your information is in records a customer of ours sent to an integration, that customer decides about it. We pass your request to them.

10. Children

• Our service is for businesses and is not directed at children. We do not knowingly collect information about children.

11. Changes to this policy

• When we change this policy, we publish a new version here with a new version number and effective date. If the change is significant, we also email the owners of customer accounts.