Aligned Web Services ("Aligned," "we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to alignedwebservices.ca, go.alignedwebservices.ca, app.alignedwebservices.ca, links.alignedwebservices.ca, our CRM at crm.alignedwebservices.ca, and the services we provide.
This is the only Privacy Policy for Aligned Web Services. If you find an older copy of it anywhere, this page replaces it.
We have written this in plain language and we have tried hard to make it accurate rather than merely reassuring. Where we keep something forever, or where we cannot fully deliver on a deletion request, we say so.
Aligned Web Services
Suite 201, 5020 48 Street, Lloydminster, Alberta, Canada
Phone: +1 (778) 402-1516 · Email: chris@alignedwebservices.ca
We are a Canadian business and we handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
If you put your website address into one of our free audit or "build me a plan" forms, two things happen. The first is the audit you asked for: we fetch your home page, your robots.txt and your sitemap, run a set of automated checks, and email you the report.
The second is the part most people would not expect, so we want to be plain about it. We then read your website again — your home page plus up to three more pages from your own site, chosen because they look like your about, services, pricing, contact or booking pages — and we send that page text to Anthropic's Claude to pull out a structured profile of your business. We keep that profile. It is stored under the email address you gave us.
The profile can include your business name, your trade, your city and service area, the services and products you list and any prices you publish, your booking link, the phone number and email address printed on your site, your street address and opening hours if they appear on the page, your published testimonials, credentials, guarantees and awards, the social profiles you link to, and a plain-English summary of how you describe yourself, in your own words and phrases. We only keep things that actually appear on your website; anything our AI cannot find on the page is discarded.
What we use it for. To write your content. When you ask our assistant or our content planner for videos, scripts or a 30-day plan, it reads this profile so it can write about your business without interviewing you first.
Some things you should know:
How to have it removed. If you have an account, deleting your account deletes this profile too. If you do not have an account — you only ever asked for a free audit — there is no self-service button for this yet. Email chris@alignedwebservices.ca and ask us to forget your business profile. We will delete it and confirm that we have.
If you choose to create an AI twin, you record or upload one video of yourself, one to two minutes long, talking to camera. That single clip is used to build a model of your face and a clone of your voice. Your face and your voice are biometric information. They identify you personally and, unlike a password, you cannot change them. We treat them accordingly, and we never create a twin unless you ask us to.
Here is exactly what happens to that recording:
We keep a consent record, permanently. When you begin creating a twin, our system writes a record containing your first name, the email address on your account, a dated consent statement naming you, and a short verification code. We do not delete that record when you delete your account, and we will not delete it on request. It is the only evidence we hold that a face and a voice were cloned with the permission of the person they belong to, and we keep it so that we can establish and defend that if it is ever questioned. It is kept for that reason alone — it is not used to run the service, to make content, or to market to you. Our own systems record it in those terms: it is "RETAINED, not erased … the only evidence we have that a face and voice twin was made with consent."
If you delete your account we delete the face model at HeyGen, the cloned voice at ElevenLabs, and the twin videos and photos we hold at Cloudinary. The consent record stays.
Where they go. Everything you upload — source video, product and reference photos, B-roll clips, files you attach to a chat, and anything you import from Google Drive — is stored with Cloudinary, our media host. The finished videos, generated images and voiceover audio we produce for you are stored there too.
How they are protected. We want you to understand this correctly rather than assume something we do not provide. Files on Cloudinary are served over long, hard-to-guess web addresses, but they are not password-protected. Anyone who has the link can open the file. We do not publish those links and they are not listed or searchable, but please do not upload anything you would not be willing to have seen by someone who obtained the link.
How long we keep them. For as long as your account exists. There is no automatic expiry. When you delete your account we delete the media linked to your account record and everything uploaded under your account's upload prefixes. Files that are not linked to your account record may survive that sweep — if you want a specific file gone, tell us and we will remove it.
Your chats with the assistant in the app, including the files and photos you attach, are stored on your account so the assistant remembers your context and so you can reopen a conversation on another device.
The owner of Aligned Web Services can read them. There is an internal viewer that lets him open customer conversations in order to fix problems, understand what went wrong with a video, and improve the assistant's answers. Please treat the assistant like a message to a supplier rather than a private notebook: do not paste passwords, banking details, or other people's personal records into it.
Your messages, and any photos you attach, are sent to Anthropic (Claude) so it can generate the reply. Deleting your account deletes your conversations.
You connect Instagram, Facebook, YouTube, TikTok, LinkedIn, X, Pinterest, Threads or Google Business through GoHighLevel's connection screen. You approve the connection on the platform's own page. We never see or store your social passwords, and we do not hold the platforms' access keys ourselves — GoHighLevel holds them and we act through GoHighLevel.
What we can see: the list of accounts you have connected and their names; the posts we have created for you, with their status, schedule and any error; and aggregate reach and impression figures for those posts.
What we can do: publish and schedule posts to your connected accounts, and upload video and image files into your media library. That is the extent of it. We do not read or send your direct messages, we do not read or reply to your comments, we do not access your follower lists or audience data, we do not delete your existing posts, and we do not change your profile.
We take a snapshot of your reach and impression figures once a day so we can show you a trend over time, and we keep that daily history indefinitely.
We share information only with the providers who help us run the service, and only as much as each one needs. This is the current list rather than a generic one:
These providers are bound to protect your information and to use it only to provide their service to us. We may also disclose information if required by law. We do not sell your personal information, and we do not share it with anyone for their own marketing.
We are based in Canada, but most of the providers above operate in the United States, and one of our video and image providers processes requests through a data centre in Singapore. Your information may therefore be stored or processed outside Canada, where it can be accessible to the courts and authorities of those countries.
Mobile information is never shared for marketing. No mobile information (including your phone number) will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third parties under any circumstances.
If you opt in, we send text messages related to your account and video orders, and — only if you separately agree — occasional updates. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP, or get help by replying HELP. See our SMS Terms for full details. Your consent to receive texts is not a condition of purchasing any product or service.
You can delete your account yourself from Account & billing in the app. You will need your password or an active session. We then email you a confirmation link; you open it and press a button on the page that follows. The link is valid for 24 hours. Nothing is deleted until you press that button, so a link scanner that follows the emailed link cannot delete your account.
Deletion removes: your account, sign-in and password; your assistant conversations; your videos and the media linked to your account; your face model at HeyGen and your cloned voice at ElevenLabs; your business profile; your reach history, approvals, content plans and the other operational records we hold under your email address. It also cancels any active subscription at Stripe.
A small number of records deliberately survive. We would rather list them than let you assume otherwise:
Two honest limitations. Your contact record and sub-account inside GoHighLevel are not removed automatically — ask us and we will delete them by hand. And uploaded media that is not linked to your account record may survive the automatic sweep; tell us about any specific file and we will remove it.
You may request access to, correction of, or deletion of your personal information, and you may withdraw consent to marketing communications at any time. To exercise these rights, contact us at chris@alignedwebservices.ca. We will respond within 30 days. Where we cannot fully delete something, we will tell you which record it is and why, as we have set out above. Our commercial electronic messages comply with Canada's Anti-Spam Legislation (CASL).
If you are not satisfied with how we have handled your information, you may complain to the Office of the Privacy Commissioner of Canada.
We use reasonable technical and organisational measures to protect your information, including encrypted connections, access controls on our administrative tools, and shared secrets on our internal endpoints. We are a small business and we would rather be straight with you than overstate this: no method of transmission or storage is completely secure, and as noted above, media files are served over unguessable but unauthenticated links. If we ever become aware of a breach affecting your personal information, we will tell you.
If we build and host a website for you, the content of that site is public by design. Enquiries submitted through its contact form are delivered to you and pass through our systems on the way. Pages we generate load fonts from Google, which means Google receives the IP addresses of people visiting your site.
Our services are not directed to anyone under 18, and we do not knowingly collect information from minors.
We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last updated" date, and if a change materially affects how we handle your information we will tell you directly.
Questions about this policy or your data? Email chris@alignedwebservices.ca or call +1 (778) 402-1516.