ALIGNED WEB SERVICES INC., operating as Aligned Web Services ("Aligned," "we," "us," or "our"), respects your privacy. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It applies to alignedwebservices.ca, go.alignedwebservices.ca, funnels.alignedwebservices.ca, app.alignedwebservices.ca, links.alignedwebservices.ca, our CRM at crm.alignedwebservices.ca, and the services we provide.
This is the only Privacy Policy for Aligned Web Services. If you find an older copy of it anywhere, this page replaces it.
We have written this in plain language and we have tried hard to make it accurate rather than merely reassuring. Where we keep something forever, or where we cannot fully deliver on a deletion request, we say so.
ALIGNED WEB SERVICES INC. (operating as Aligned Web Services), a British Columbia corporation
2021 Spyglass Way, West Kelowna, BC V1Z 4B6, Canada
Phone: +1 (778) 402-1516 · Email: chris@alignedwebservices.ca
We are a Canadian business and we handle personal information under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
If you put your website address into one of our free audit or "build me a plan" forms, two things happen. The first is the audit you asked for: we fetch your home page, your robots.txt and your sitemap, run a set of automated checks, and email you the report.
The second is the part most people would not expect, so we want to be plain about it. We then read your website again — your home page plus up to three more pages from your own site, chosen because they look like your about, services, pricing, contact or booking pages — and we send that page text to Anthropic's Claude to pull out a structured profile of your business. We keep that profile. It is stored under the email address you gave us.
The profile can include your business name, your trade, your city and service area, the services and products you list and any prices you publish, your booking link, the phone number and email address printed on your site, your street address and opening hours if they appear on the page, your published testimonials, credentials, guarantees and awards, the social profiles you link to, and a plain-English summary of how you describe yourself, in your own words and phrases. We only keep things that actually appear on your website; anything our AI cannot find on the page is discarded.
What we use it for. To write your content. When you ask our assistant or our content planner for videos, scripts or a 30-day plan, it reads this profile so it can write about your business without interviewing you first.
Some things you should know:
How to have it removed. If you have an account, deleting your account deletes this profile too. If you do not have an account — you only ever asked for a free audit — there is no self-service button for this yet. Email chris@alignedwebservices.ca and ask us to forget your business profile. We will delete it and confirm that we have.
If you choose to create an AI twin, you record or upload one video of yourself, one to two minutes long, talking to camera. That single clip is used to build a model of your face and a clone of your voice. Your face and your voice are biometric information. They identify you personally and, unlike a password, you cannot change them. We treat them accordingly, and we never create a twin unless you ask us to.
Here is exactly what happens to that recording:
We keep a consent record, permanently. When you begin creating a twin, our system writes a record containing your first name, the email address on your account, a dated consent statement naming you, and a short verification code. We do not delete that record when you delete your account, and we will not delete it on request. It is the only evidence we hold that a face and a voice were cloned with the permission of the person they belong to, and we keep it so that we can establish and defend that if it is ever questioned. It is kept for that reason alone — it is not used to run the service, to make content, or to market to you. Our own systems record it in those terms: it is "RETAINED, not erased … the only evidence we have that a face and voice twin was made with consent."
If you delete your account we delete your cloned voice at ElevenLabs and the twin videos and photos we hold at Cloudinary, and we remove your cloned voice at BytePlus by hand. If your twin was made before October 2026 with our former provider, HeyGen, we delete it there too. The consent record stays.
Where they go. Everything you upload — source video, product and reference photos, B-roll clips, files you attach to a chat, and anything you import from Google Drive — is stored with Cloudinary, our media host. The finished videos, generated images and voiceover audio we produce for you are stored either at Cloudinary or in our own file storage at Supabase.
How they are protected. We want you to understand this correctly rather than assume something we do not provide. Files at Cloudinary and Supabase are served over long, hard-to-guess web addresses, but they are not password-protected. Anyone who has the link can open the file. We do not publish those links and they are not listed or searchable, but please do not upload anything you would not be willing to have seen by someone who obtained the link.
How long we keep them. For as long as your account exists. There is no automatic expiry. When you delete your account we delete the media linked to your account record and everything uploaded under your account's upload prefixes. Files that are not linked to your account record may survive that sweep — if you want a specific file gone, tell us and we will remove it.
Your chats with the assistant in the app, including the files and photos you attach, are stored on your account so the assistant remembers your context and so you can reopen a conversation on another device.
The owner of Aligned Web Services can read them. There is an internal viewer that lets him open customer conversations in order to fix problems, understand what went wrong with a video, and improve the assistant's answers. Please treat the assistant like a message to a supplier rather than a private notebook: do not paste passwords, banking details, or other people's personal records into it.
Your messages, and any photos you attach, are sent to Anthropic (Claude) so it can generate the reply. Deleting your account deletes your conversations.
You connect Instagram, Facebook, YouTube, TikTok, LinkedIn, X, Pinterest, Threads or Google Business through GoHighLevel's connection screen. You approve the connection on the platform's own page. We never see or store your social passwords, and we do not hold the platforms' access keys ourselves — GoHighLevel holds them and we act through GoHighLevel.
What we can see: the list of accounts you have connected and their names; the posts we have created for you, with their status, schedule and any error; and aggregate reach and impression figures for those posts.
What we can do: publish and schedule posts to your connected accounts, and upload video and image files into your media library. Unless you use the Comment & DM Autopilot (see below), that is the extent of it: we do not read or send your direct messages and we do not read or reply to your comments. Either way, we do not access your follower lists or audience data, we do not delete your existing posts, and we do not change your profile.
We take a snapshot of your reach and impression figures once a day so we can show you a trend over time, and we keep that daily history indefinitely.
The Comment & DM Autopilot is a paid add-on. Nothing in this section happens unless you have bought it and switched it on in the app, and you can switch it off at any time.
What it reads. New comments on your Instagram and Facebook posts, the direct messages people send to your Instagram and Facebook accounts, and texts sent to your business number. It reads them through GoHighLevel, the same connection we use to post for you.
What it does with them. The comment or message, the post it was left on, and the facts about your business that you have given us or that appear on your website are sent to Anthropic (Claude) to write a reply in your voice. Until you switch a channel to live, replies are only drafts for you to read in the app. Once it is live, it sends the reply for you. Complaints, refund or billing questions, anything personal or sensitive, and anything it is not confident about are never answered in public; they are passed to you instead.
What it keeps. A copy of each comment or message it handled, the reply it drafted or sent, and a note of what it did, so you can see its work and so it never answers the same comment twice. These are removed with the other records we hold under your email address when you delete your account.
We advertise on Facebook and Instagram. To know which ads bring people to us, and which ones are a waste of money, our website check and kit pages at funnels.alignedwebservices.ca use the Meta pixel, a small piece of code from Meta Platforms (the company behind Facebook and Instagram).
What it records. That you opened one of those pages, that you started a website check, that you opened checkout, and that you paid, with the amount and what you bought. To do that it uses cookies in your browser, and if you came from one of our ads, the ad's click code. Meta may connect this with your Facebook or Instagram account under Meta's own privacy policy. Depending on Meta's settings, the pixel may also read details you type into a form on the page, such as your email address, which Meta scrambles in your browser before it is sent, to match the visit to your account.
What we use it for. To count which ads lead to visits and sales, to show our ads to people more likely to find them useful, and to show our ads again to people who have visited. We see totals in Meta's ad tools, not a record of you personally.
What we don't send. We don't send your website check results, your card details or your messages to Meta.
Your choices.
Other cookies. Checkout is run by Stripe, which sets its own cookies to prevent fraud. Our pages also remember your cookie choice. We don't use any other tracking cookies on the website check and kit pages.
We share information only with the providers who help us run the service, and only as much as each one needs. This is the current list rather than a generic one:
These providers are bound to protect your information and to use it only to provide their service to us. We may also disclose information if required by law. We do not sell your personal information, and we do not share it with anyone for their own marketing.
We are based in Canada, but most of the providers above operate in the United States, and one of our video and image providers processes requests through a data centre in Singapore. Your information may therefore be stored or processed outside Canada, where it can be accessible to the courts and authorities of those countries.
Mobile information is never shared for marketing. No mobile information (including your phone number) will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent will not be shared with any third parties under any circumstances.
We send two kinds of text message, and each has its own tick box and its own consent. Account and service texts are about something you asked for or your account (replies to your questions, reminders, project and approval updates, delivery of finished work, billing notices). Marketing texts are occasional offers and news about our services, and are only sent if you ticked the separate marketing box. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP, or get help by replying HELP. See our SMS Terms for full details. Your consent to receive texts is not a condition of purchasing any product or service.
You can delete your account yourself from Account & billing in the app. You will need your password or an active session. We then email you a confirmation link; you open it and press a button on the page that follows. The link is valid for 24 hours. Nothing is deleted until you press that button, so a link scanner that follows the emailed link cannot delete your account.
Deletion removes: your account, sign-in and password; your assistant conversations; your videos and the media linked to your account; your cloned voice at ElevenLabs and BytePlus, and any older twin at our former provider HeyGen; your business profile; your reach history, approvals, content plans and the other operational records we hold under your email address. It also cancels any active subscription at Stripe.
A small number of records deliberately survive. We would rather list them than let you assume otherwise:
Two honest limitations. Your contact record and sub-account inside GoHighLevel are not removed automatically — ask us and we will delete them by hand. And uploaded media that is not linked to your account record may survive the automatic sweep; tell us about any specific file and we will remove it.
You may request access to, correction of, or deletion of your personal information, and you may withdraw consent to marketing communications at any time. To exercise these rights, contact us at chris@alignedwebservices.ca. We will respond within 30 days. Where we cannot fully delete something, we will tell you which record it is and why, as we have set out above. Our commercial electronic messages comply with Canada's Anti-Spam Legislation (CASL).
If you are not satisfied with how we have handled your information, you may complain to the Office of the Privacy Commissioner of Canada.
We use reasonable technical and organisational measures to protect your information, including encrypted connections, access controls on our administrative tools, and shared secrets on our internal endpoints. We are a small business and we would rather be straight with you than overstate this: no method of transmission or storage is completely secure, and as noted above, media files are served over unguessable but unauthenticated links. If we ever become aware of a breach affecting your personal information, we will tell you.
If we build and host a website for you, the content of that site is public by design. Enquiries submitted through its contact form are delivered to you and pass through our systems on the way. Pages we generate load fonts from Google, which means Google receives the IP addresses of people visiting your site.
Our services are not directed to anyone under 18, and we do not knowingly collect information from minors.
We may update this Privacy Policy from time to time. We will post the updated version here with a revised "Last updated" date, and if a change materially affects how we handle your information we will tell you directly.
Questions about this policy or your data? Email chris@alignedwebservices.ca or call +1 (778) 402-1516.