Privacy policy
Last updated: October 19, 2026
Studio Hamilton (“we”) builds and runs automations that help small businesses (“our clients”) receive and answer inquiries from their customers. This policy explains what personal information we handle, why, and your rights.
Who this applies to
Our clients’ customers: people who contact one of our clients through a website form, email, text message, Facebook Messenger, Instagram Direct or WhatsApp. Our clients: the businesses that connect their accounts to our service.
When we process a customer’s message for a client, we do it on that client’s behalf and under their instructions. You can also contact the client directly about their own privacy practices.
What we collect
- Message content: the text of your message, and any photos, files or voice notes you send.
- Contact details: your name, email address or phone number if you give them, and the identifier the messaging platform provides. On Messenger and Instagram this is an ID specific to the business’s Page or account. On WhatsApp it is your phone number and WhatsApp profile name.
- Conversation details: when you wrote, which business you wrote to, and whether a reply was sent.
- From our clients: the Facebook Page, Instagram account or WhatsApp Business account they connect, and the access tokens Meta issues so we can receive and send messages for that account.
We do not collect your Facebook or Instagram friends, posts, likes or anything beyond the conversation you start with the business.
How we use it
- To deliver your message to the business you contacted, sort it (for example, a new inquiry or spam), and record it in that business’s customer records.
- To prepare a draft reply that the business reviews, and to send the reply the business approves on the channel you used.
- To keep the service secure and fix problems.
We do not sell personal information, use it for advertising, or use it to train AI models. We use data from Meta platforms only for the messaging service described here.
Who we share it with
Only the service providers needed to run the service, under contracts that require them to protect it: Meta Platforms (Messenger, Instagram, WhatsApp), to receive and send messages; n8n, which hosts our automations; Anthropic, to sort messages and draft replies; the client’s own customer records tool (such as HubSpot or Google Sheets); and Google (Gmail), for email drafts.
Some of these providers store data outside Quebec and Canada. Before transferring information outside Quebec, we assess whether it will be adequately protected, as Quebec’s Act respecting the protection of personal information in the private sector requires.
How long we keep it
Messages and related data are kept in our automation system for 30 days for troubleshooting, then deleted. Copies in a client’s own customer records follow that client’s retention rules. Access tokens are deleted within 30 days after a client disconnects.
Your rights
You can ask to access, correct or delete your personal information, or withdraw your consent, by writing to our privacy officer. We answer within 30 days. You can also file a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada. To have your data deleted, see our data deletion instructions.
Security
Data is encrypted in transit, access is limited to the people who run the service, and incoming messages are checked to confirm they come from Meta.
Privacy officer
Bryce Hamilton, Studio Hamilton, 1235 Notre-Dame St W, Unit #321, Montreal, QC H3C 0B1, hello@studiohamilton.ca
Changes
We will post any change on this page with a new “last updated” date.