Privacy Policy

Last updated: November 2, 2026

At Hutton Tech Solutions, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (huttontech.solutions), call our phone line, or use our business automation and AI services.

This policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's Anti-Spam Legislation (CASL), and applicable British Columbia privacy laws.

1. Accountability

We are responsible for the personal information under our control. We have designated a Privacy Officer who is accountable for our compliance with this policy and applicable privacy laws.

If you have questions, concerns, or wish to make a complaint regarding our privacy practices, please contact:

Privacy Officer
Travis Hutton, Hutton Tech Solutions
1850 Hugh Allan Dr, Kamloops, BC V1S 0C2
travis@huttontech.solutions
(236) 326-0322

2. Information We Collect and Why

We only collect information that is necessary to provide you with our services. This may include:

  • Contact Information: Name, email address, phone number, and business name (collected when you fill out a contact form, request a quote, or call us).
  • Account Information: Login details for our Single Sign-On (SSO) account system, used across Hutton Tech Solutions and Hutton Aerographics.
  • Technical Data: IP address, browser type, operating system, and usage patterns (collected via cookies and analytics to improve our website performance).
  • Service Data: Information you provide to help us build automation workflows or AI solutions for your business.

Why we collect it: We use this information to respond to inquiries, provide requested services, process transactions, improve our website, and comply with legal obligations.

3. Phone Calls and Our AI Receptionist

Calls to our phone line are answered by an AI receptionist that can answer questions and book appointments.

  • What we keep: a written transcript of the call, your phone number, and any name, business or booking details you give. We do not keep an audio recording of the call.
  • Where it is processed: the speech-to-text, the AI model and the voice run on our own servers in British Columbia. The call itself is carried by our phone provider, Telnyx, which may route calls through the United States.
  • Why: to book your appointment, follow up on your call, and improve the receptionist's answers.
  • Your choice: you can ask to speak with a person at any time during the call, and you can ask us to delete your call transcript by contacting our Privacy Officer.

4. Business Outreach Emails

We sometimes email local businesses about our services. We only write to business email addresses that the business publishes itself, and only about matters relevant to that business. Information in these emails comes from the business's own public website.

Every such email names us, gives our mailing address, and includes a way to unsubscribe. If you unsubscribe or ask us to stop, we record that and do not email you again.

5. Payments

Payments are processed by Stripe. We never see or store your full card number; Stripe handles card details under its own privacy policy and security standards. We keep records of invoices and payments as long as Canadian tax law requires (generally six years).

6. Consent

How we obtain consent

We collect your information when you voluntarily provide it to us (e.g., by submitting a form or calling us) or when you use our services. By using our website or services, you consent to the collection and use of your information as described in this policy.

How to withdraw consent

You have the right to withdraw your consent at any time. You may do so by:

  • Contacting us via the contact information provided in Section 1.
  • Unsubscribing from any marketing emails using the "unsubscribe" link.
  • Adjusting your browser settings to block cookies.

Please note: Withdrawing consent may limit our ability to provide certain services to you.

7. Access and Correction

You have the right to access the personal information we hold about you and to request that we correct any inaccuracies.

To make a request, please contact our Privacy Officer. We will respond to your request within a reasonable timeframe as required by law.

8. Retention and Disposal

We retain your personal information only as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

When information is no longer required, we will securely destroy, erase, or anonymize it using methods that prevent reconstruction or unauthorized access.

9. Third-Party Disclosure and International Transfers

We do not sell your personal information. We may share your information with trusted third-party service providers (such as our phone provider, payment processor, or email delivery services) to help us operate our business.

International Transfers: Some of our service providers may be located outside of Canada (for example, in the United States). In such cases, your information may be subject to the laws of those jurisdictions, which may differ from Canadian privacy laws.

10. Data Security

We implement physical, electronic, and procedural safeguards to protect your information from unauthorized access, loss, or misuse. While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet is 100% secure.

11. Cookies and Analytics

Our website uses cookies and similar tracking technologies to enhance your experience and analyze website traffic.

  • Cookies: These are small files stored on your device that help us remember your preferences.
  • Analytics: We may use third-party analytics tools (such as Google Analytics) to understand how visitors interact with our website. These tools collect information such as your IP address and browsing behavior.

You can choose to disable cookies through your browser settings, though this may affect how the website functions.

12. Google User Data Policy

To facilitate Single Sign-On (SSO) and calendar integration, our application requests access to specific Google User Data. In compliance with the Google API Services User Data Policy, we adhere to the following standards:

Data Accessed

  • Profile Information: Name, Email Address, and Profile Picture (via userinfo.profile and userinfo.email scopes).
  • Calendar Data (Optional): If you enable AI Calendar Agents, we access calendar events to read schedules and create appointments (via calendar.events scope).

Data Usage

We use this data strictly to:

  • Authenticate your identity and create your Unified Account.
  • Display your profile information on your dashboard.
  • (For AI Agents) Check availability and schedule meetings on your behalf only when explicitly instructed by you.

We do not use Google User Data for advertising, surveillance, or any purpose other than the specific features requested.

Data Sharing

We do not share your Google User Data with any third parties (including advertisers, data brokers, or other service providers) except where responding to a valid legal process or to strictly fulfill the application's functionality (e.g., Google's own API infrastructure).

Storage & Protection

Google tokens (Access/Refresh Tokens) are encrypted using AES-256 encryption at rest within our secure database. They are transmitted securely via TLS 1.2+. Access to these keys is restricted to essential backend processes only.

Retention & Deletion

We retain your Google User Data only as long as your account is active. You may request full data deletion at any time by:

Upon request, all associated tokens and personal data are permanently erased from our servers within 30 days.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the new policy on this page with a revised "Last updated" date.