Privacy Policy

1.Introduction

Sunrise Digital Labs Inc. ("Sunrise," "we," "our," or "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect when you visit this website or engage us, how we use and disclose it, how long we keep it, and what rights you have over it.

Information about a client's own environment — tenant configuration, directory data, mailbox contents and anything else we encounter while delivering work — is handled under the confidentiality terms of that engagement, not under this policy.

2.Information We Collect

We collect the following:

• What you send us. The name, work email, organization (optional) and message you submit through our contact form, together with the enquiry type you select.
• Scheduling details. If you book a call, the booking happens on Google's scheduling page. Whatever you enter there — including your name, email and the time you choose — is collected by Google and passed to us as a calendar invitation.
• Call and conversation content. If you call us, or start a conversation with our voice agent, the audio is processed in order to hold the conversation. We may keep a written summary of what was discussed so we can follow up.
• Technical data. Our hosting provider records standard server log data for every request — IP address, browser and operating system, the page requested, and a timestamp. This is used to run and secure the site.
• How you use this site. We measure the pages you visit, the links and buttons you click, how far you scroll, and where you came from — including any campaign tags on the link you arrived through. This is recorded against a random identifier stored in your browser, not against your name.
• Session recordings. Our analytics provider reconstructs visits as a replayable video of the page. That includes mouse movement, clicks, scrolling, and text you type into the contact form — including text you type and then delete without sending. Two things are excluded from every recording: the direct phone number once revealed, and the voice-call panel.

3.How We Use Your Information

We use what we collect for the following purposes:

• To reply to your enquiry and hold the conversation you asked for
• To scope, quote, deliver and support the work we are engaged to do
• To send you service and project communications relating to that work
• To keep the site available and secure, and to detect abuse and spam
• To understand which pages and channels are useful, and to fix the ones that are not
• To meet our legal, accounting and record-keeping obligations

We do not sell personal information, and we do not share it with advertisers, data brokers or ad networks. Our Google Analytics property is not linked to an advertising account, and this site carries no advertising or remarketing tags.

4.Third-Party Services

Running this site and its contact channels involves the following providers, each of which has its own privacy policy governing the data it holds:

• Vercel — hosting and delivery. Vercel processes every request to this site and retains request logs, including IP addresses.
• Cloudflare — the Turnstile check that confirms a visitor is not automated before a message is sent or a voice session starts. Cloudflare receives your IP address and browser characteristics to make that decision. Turnstile is not an advertising product and is not used to profile you.
• Resend — email delivery. When you send a message through the contact form, what you wrote is delivered to us as an email through Resend. Nothing you submit is stored in a database on this site; the email is the record.
• Google — appointment scheduling. The "book a call" link opens Google's own scheduling page in a new tab; the booking is made there, on Google's infrastructure.
• Our voice agent backend — if you start a voice conversation, your browser connects to it directly over WebRTC to carry the audio.
• PostHog — product analytics and session recording. It receives the pages you visit, what you click, how far you scroll, your approximate location derived from your IP address, and the session recordings described in section 2. Requests to it are routed through our own domain rather than sent to it directly, which means an ad blocker will not stop them — so it is stated here rather than left to be discovered.
• Google Analytics — audience and traffic measurement. It receives the pages you visit and the events listed above. It does not receive session recordings, and it does not receive anything you type.

This site carries no advertising pixels and no third-party marketing trackers. Web fonts are compiled into the site at build time and served from our own domain, so loading a page does not make a request to a font provider.

5.Cookies & Tracking

This site sets analytics cookies and browser storage for PostHog and Google Analytics. They record how this site is used. They set no advertising cookies, and they do not follow you onto other websites.

Analytics starts when you arrive, and a notice at the bottom of the page says so and offers a one-click decline. Declining stops both tools immediately, for the rest of the visit and for future visits from the same browser. If your browser sends a Global Privacy Control signal, we treat that as a decline without asking.

The Cloudflare Turnstile check may store a short-lived token in your browser in order to remember that a challenge was passed. It is used only for that purpose. Our hosting and security providers may also set cookies necessary to route and protect requests.

You can block or clear cookies and site storage through your browser settings. Doing so may prevent the voice channel from starting, since it depends on the check above, and it will clear a recorded decision to decline analytics.

6.Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure or destruction. No method of transmission over the Internet is completely secure, and we do not claim otherwise.

7.Data Breach Notification

In the event of a breach involving your personal information, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA's breach notification provisions. The notification will describe the nature of the breach, the information affected, the steps we have taken in response, and what you can do to protect yourself.

8.Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting and reporting requirements. Enquiries that do not lead to an engagement are kept only as long as they are useful for follow-up.

Session recordings are kept for 30 days and are then deleted automatically. Google Analytics data is kept for 14 months. Counts of pages viewed and links clicked, which carry no recording, are kept for longer so we can compare one year against another.

9.Your Rights

Depending on where you live, you may have the right to request:

• Access to the personal data we hold about you
• Correction of inaccurate data
• Deletion of your data
• Restriction of processing
• A portable copy of your data
• That we stop processing your data
• Withdrawal of a consent you previously gave

We honor these requests wherever you are located, whether or not the law in your jurisdiction requires it. To make one, contact us or email contact@sunrisedigitallabs.com.

10.Children's Privacy

Our services are sold to organizations and are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

11.Commercial Email & CASL

We comply with Canada's Anti-Spam Legislation (CASL). We send commercial electronic messages only with your express or implied consent, every such message carries a working unsubscribe link, and unsubscribe requests are processed within 10 business days.

Transactional and service messages — invoices, project updates, change notices, and replies to something you asked us — are not commercial electronic messages and are sent as the work requires.

12.Changes to This Policy

We may update this policy from time to time. Changes take effect when posted here, and the "last updated" date above changes with them.

13.Governing Law

Sunrise Digital Labs Inc. is a Canadian company serving clients in the United States and elsewhere. This policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, including the Personal Information Protection and Electronic Documents Act (PIPEDA). Where the privacy law of your own jurisdiction gives you stronger rights, we apply those rights to your data.

14.Contact Us

Questions about this policy, or about data we hold:

• Contact form
• Email: contact@sunrisedigitallabs.com