Privacy Policy

StoneHill Marketing is the public-facing brand operated by 14471997 Canada Inc., a corporation registered in Canada. Throughout this policy, "StoneHill", "we", "us", and "our" refer to 14471997 Canada Inc. operating as StoneHill Marketing.

We provide AI receptionists, voice AI systems, websites, intelligent automations, and marketing services to small and mid-sized businesses. This policy applies to our website, our client services, and any AI receptionist or automation we operate on a client's behalf.

• Business information — company name, business address, industry, services offered, hours of operation, pricing details, and the scripts and workflows you ask us to build.
• Client and end-customer information — information callers or website visitors provide to your AI receptionist or forms, such as name, phone number, email address, requested service, and appointment preferences.
• Contact information — name, email, phone number, and company for enquiries, demo requests, onboarding, billing, and support.
• Website usage data — IP address, browser and device type, referring page, pages viewed, and time spent, collected in aggregate to understand site performance.
• Cookies and similar technologies — used for essential site function and basic analytics. You can block or delete cookies in your browser; essential features may be affected.

Our AI receptionist services necessarily process conversation data in order to answer calls and complete bookings. Specifically:

• Voice AI interactions — real-time speech is converted to text so the AI receptionist can understand and respond. Transcripts of calls may be retained so clients can review what was said and so we can improve accuracy.
• Call recordings — recordings are only captured where a client has explicitly enabled them, and only where permitted by applicable law. Where recording is enabled, callers are notified at the start of the call.
• Appointment information — names, contact details, requested services, dates, and times needed to create, reschedule, or cancel a booking in the client's calendar.
• Automation data — the data passed between connected systems to execute a workflow, such as writing a lead into a spreadsheet or CRM, or sending a confirmation message.

Where StoneHill operates an AI receptionist for a business, that business is the controller of its end-customer data and StoneHill acts as its service provider, processing data only on that business's instructions.

With a client's authorization, we connect to third-party platforms to deliver the services requested. These may include:

• Google Workspace, including Google Calendar and Google Sheets, for scheduling and lead capture
• CRM and scheduling platforms used by the client
• Meta / Facebook Platform, for managing client Pages and reporting on Page performance
• Other third-party APIs required for an agreed workflow
• Website forms and enquiry forms we build or host
• Website and campaign analytics tools

We request only the permissions needed to perform the agreed service, and access can be revoked by the client at any time from the relevant platform's settings.

• Clients explicitly authorize our application before we act on their behalf.
• We use Meta Platform APIs only to provide requested services.
• pages_manage_posts is used only to publish client-approved content to Pages we manage.
• pages_read_engagement is used only to retrieve Page analytics for internal reporting.
• We never sell Meta Platform Data.
• We only access data necessary to perform the requested services.

Meta Platform Data is deleted on request or when a client relationship ends. See our Data Deletion page for instructions.

• To build, configure, launch, and operate AI receptionists, voice AI systems, websites, and automations
• To answer calls, qualify enquiries, and book, reschedule, or cancel appointments
• To publish client-approved content and report on campaign or Page performance
• To respond to enquiries, provide support, and communicate about accounts and services
• To process payments and maintain accurate billing records
• To improve accuracy, voice quality, and reliability of our systems
• To protect our services against fraud, abuse, and security incidents
• To meet legal, tax, and regulatory obligations

We do not sell personal information, and we do not use client or end-customer data to train third-party public AI models.

• Call transcripts and recordings: retained for the period agreed with the client, and by default no longer than 12 months, unless a client requests a shorter window.
• Appointment and lead records: retained for the duration of the client relationship so the client's own records remain complete.
• Website enquiry and demo requests: retained up to 24 months.
• Billing and tax records: retained as required under Canadian law, generally seven years.
• Meta Platform Data: retained only while the authorization is active, and deleted on request or at the end of the engagement.

When data is no longer needed, it is deleted or irreversibly anonymized.

• Encryption in transit using TLS, and encryption at rest with our infrastructure providers
• Access limited to personnel who need it to deliver the service, on a least-privilege basis
• Credentials and API tokens stored in secured secret management, never in plain text or in client-side code
• Separation of client environments and workflows
• Prompt review and remediation of suspected security issues, with notification to affected clients where required by law

No system is perfectly secure, but we work continuously to protect the data entrusted to us.

We rely on a small set of reputable providers to operate our services, including cloud hosting and database providers, telephony and voice AI providers, speech and language model providers, calendar and productivity platforms, payment processors, and email delivery services. These providers process data only as instructed by us and under contractual confidentiality and security obligations. We are happy to provide a current list of subprocessors to clients on request.

StoneHill operates from Canada. Some of our providers process data in the United States or other jurisdictions, which means data may be transferred, stored, and processed outside your province or country and may be subject to the laws of those jurisdictions. Where transfers occur, we use providers that offer contractual protections such as standard contractual clauses and comparable safeguards.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your information
• Withdraw consent, including consent to call recording where applicable
• Ask how your information is used and who it is shared with
• Object to or request restriction of certain processing
• Lodge a complaint with your privacy regulator, such as the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email info@stonehillmarketing.com. If your data was collected through a business we serve, we may direct your request to that business and assist them in responding.

Our services are business-to-business and are not directed at children. We do not knowingly collect personal information from children under 13, or under 16 where a higher age applies in the relevant jurisdiction. If we learn that such information has been collected, we will delete it promptly.

We may update this policy as our services, integrations, or legal obligations change. The revised version will be posted on this page with an updated date. Material changes affecting clients will be communicated directly.

StoneHill Marketing, operated by 14471997 Canada Inc. — Ontario, Canada.
Email: info@stonehillmarketing.com