Privacy notice.

This notice is from Atheron Network Inc., a company incorporated in British Columbia, Canada.

Write to us about your privacy at privacy@aton-network.org.

Reading this site needs nothing from you. It sets no tracking cookies and runs no advertising or tracking scripts. We use cookie-free performance and error monitoring (Amazon CloudWatch) to keep the sites fast and working. On about one visit in five, it records how long pages take to load, errors on the page, the page address (never the part after a ?), and your browser, device type and approximate country. It doesn't record who you are, and no cookies are set.

When you send an enquiry, save an estimate, book a call or use the support chat, we keep what you sent so we can reply and plan your project, and we delete it on the schedule below.

The Start a project form collects:

• the kind of project, your budget band and when you need it;
• your description of the project;
• your name, your email address and, if you give it, your company;
• any PDF files you attach, such as a scope of work;
• the page you came from, a saved estimate or starter package if you attached one, and whether the form was filled in from an ATON Atlas conversation.

To reply to you, to scope and price the project, and, if we work together, to run it. Your enquiry goes into our customer records, where only staff who handle enquiries can read it. Attachments are stored privately and are opened by those staff through our team portal.

We also check the timeline of each enquiry with an AI model: your description of the project, its attached PDFs and the estimate are sent to Anthropic for that check. Anthropic does not use them to train its models, and the answer is kept with your enquiry.

We send you one confirmation email when you send an enquiry. We do not add you to a mailing list because you wrote to us.

Your network address is used for a few minutes to stop the form being abused, in memory only, and is not stored with your enquiry.

When you save an estimate we keep the choices you made and the result, under a private link only you and anyone you share it with can open. We may also keep a review of its timeline with it. An estimate holds no name or email address unless you send it to us with an enquiry. The estimate terms say what an estimate is and is not.

To book a Teams call, or to ask for a call on a Saturday, we keep your name, email, company if given, any note, and the time you chose. We email you a link to confirm the booking, and only once you confirm do we create the meeting in our calendar. To show free times we read only whether our calendar is free or busy, never the details of any meeting.

The booking forms ask Cloudflare Turnstile to check that a person, not a script, is filling them in. Cloudflare receives your network address and details of your browser for that check, under its own privacy policy. We keep nothing from that check.

When an enquiry arrives we email ourselves a short notice: the kind of project, the budget band, when it is needed, the industry, how many files are attached and a link to the enquiry in our team portal. It does not include your name, description or files, but its reply-to is your email address. A booked call is also an event in our Microsoft 365 calendar, with your name and email as the guest. These are kept in our Microsoft 365 mailbox and calendar. When a booking is cancelled or deleted, its calendar event is cancelled too, and when you ask us to delete your data we delete these as well.

The chat bubble on this site is our own support chat. ATON Atlas, an AI assistant built on Claude, answers first and always says it is an AI. A person on our team takes over when you ask for one, or when the assistant cannot help.

We keep the conversation: what you and we wrote, the name and email address you give, your answers to any questions the chat asks before it starts, a rating if you leave one, and the language. For 90 days we also keep the page you were on (without anything after its address), the country, region and city your connection appears to come from, and your browser's family, system and kind of device. Then those are cleared.

To answer you, the conversation so far is sent to Anthropic, and the assistant may look up our estimator and our open times for a call. Anthropic does not use it to train its models.

A conversation is kept for two years after its last message, then deleted. If it becomes part of the record of a project we sign with you, it may be kept with that project's records until a date we set, seven years at most.

The chat keeps a random identifier in your browser's storage, so a conversation can carry on when you come back. The cookie notice lists it.

Where the support chat is not switched on, ATON Atlas opens on its own. What you type there is sent to Anthropic to produce its replies, and to nothing else. We do not store that conversation. We keep only counts: how many replies were made each day and what they cost, with nothing that identifies you or what you said. If you send an enquiry the assistant helped you write, the enquiry is kept like any other.

Each kind of data is deleted by a scheduled job when its time is up:

We use these services, each only for the purpose shown:

• Amazon Web Services (AWS): hosting, the database, private file storage and backups, in Canada (Montreal, with backup copies in Calgary), and the cookie-free performance and error monitoring described above.
• Cloudflare: delivering the site, protecting it from attacks, and the check on the booking forms.
• Resend: sending the confirmation email and our notice of a new enquiry.
• Microsoft 365: our calendar and Teams, for booked calls.
• Anthropic: ATON Atlas's replies, in the support chat and on its own, and checking estimated timelines, including an enquiry's description and attached PDFs.
• Stripe: invoices and card payments, if we work together.
• Didit: checking the identity of each person who signs an agreement with us.

The support chat itself is our own system, run by us on the same hosting.

We host our sites, services and databases with Amazon Web Services (AWS) in Canada, in its Montreal region (ca-central-1). Backup copies are kept in Canada too, in AWS's Calgary region. Two parts run outside Canada, and neither holds customer data: we collect public market data (the prices and trades exchanges publish) in the United States (Virginia) and the United Kingdom (London), and our test systems run in the United States. Anthropic, Resend and Stripe process what they handle for us in the United States, Microsoft and Cloudflare may process it in the United States or other countries, and Didit processes identity checks outside Canada. Information processed outside Canada is protected by our contracts with those services, but it is subject to the laws of the country where it is held, and the courts and authorities there may be able to reach it.

There are no tracking, advertising or analytics cookies. The assistant on its own sets one cookie, and the support chat keeps one identifier in your browser's storage. The cookie notice lists each, what it is for and how long it lasts.

The client portal has its own privacy page, which lists what it keeps about the people at your organisation. Personal information we handle for you in your project, such as the users of software we build or host, is covered by our data processing addendum: there you decide, and we act on your instructions.

When you sign an agreement with us, each signer's identity is checked by Didit, with a government-issued ID and a live face match. We keep the signing evidence: each signer's name and email address, and for each step the time, network address, approximate city, region and country, device and browser, with the reference and result of the identity check. We keep it for 7 years after the agreement ends, as the record of who agreed to what. Didit keeps the ID images and documents under its own terms, and we ask it to delete the check 90 days after its decision.

This site and our services are for businesses and adults. We do not knowingly collect information from anyone under 16. If you think a child has sent us information, write to us and we will delete it.

You can ask to see what we hold about you, to correct it, or to have it deleted, at the address above. We answer within the time the law where you live allows, and within one month at the latest. If you are not satisfied with our answer, you can complain to the privacy regulator where you live.

This notice is published in English and in French. Both versions are equally authoritative.