Security & data handling
Where your data goes, and who can act on it.
Two very different things are covered here: this marketing website, and the production systems we build for clients. We keep them separate, and so does this page.
01 · This website
Marketing website & calculator data
This site is a static marketing website. It sets no cookies and runs no analytics or advertising trackers.
- The manual work calculator runs entirely in your browser. The numbers you move on the sliders are not sent to us.
- If you choose "Email My Estimate", your email address and the four calculator numbers are sent to our server, which emails the estimate to you from our own mailbox through Proton Mail and keeps a copy so we can follow up if you reply.
- Discovery-call bookings are handled by Calendly, on Calendly's own website, under its privacy terms.
- The site is served through standard web hosting and content delivery infrastructure, which keeps ordinary server logs for security.
02 · Systems we build for you
Client production systems
The automations, AI agents and software we build for your business are kept separate from this website.
- Hosted in Canadian cloud regions, such as AWS ca-central-1 or Azure Canada Central, or inside your own cloud tenancy.
- Where you already own the cloud account, we can build and run the system there so your data never leaves infrastructure you control.
- You own the systems we build and the data in them.
03 · AI providers
AI provider controls
When a system uses AI, it calls enterprise API endpoints under business terms, never consumer chatbot apps.
- Enterprise API endpoints with zero data retention.
- Contractual guarantees that your prompts and files are not used to train AI models.
- Only the information a task needs is sent to the model.
04 · Access & governance
Access, approvals and audit
Every system is designed so people stay in control and every action can be reviewed.
- Least-privilege credentials: each agent or automation gets only the access its task needs.
- Role-based access, so staff only see the data their role requires.
- Audit logs of what each agent or automation did and when.
- Mandatory human-in-the-loop approval for sensitive actions such as sending, paying or deleting.
PIPEDA, PHIPA and Law 25
Logic Labs provides technical architecture aligned with PIPEDA, Ontario's PHIPA and Québec's Law 25. This is not legal advice or a legal certification: your organization remains responsible for its own compliance, and we recommend confirming your obligations with your privacy officer or legal counsel.
Questions about privacy or security? Email [email protected] or read our privacy policy.
Ready to talk about your business?
Not ready for a call? Email [email protected] with a question.
No tech jargon—just a practical look at where you can save time.