Privacy policy

Two forms on this site collect a name, an email address, optionally a phone number and a business name, and whatever you type in the message box. They are used to reply to you and for nothing else. They are not sold, rented, or added to a marketing list you did not ask for.

Page visits are counted, without cookies and without anything that identifies you. It never records what you typed into a form.

Braav Labs, a business operating in Ontario, Canada. For anything on this page, write to info@braavlabs.com or call +1 (942) 381-3156. Braav Labs, Scarborough, Toronto, ON M1P 1S4. That address reaches a person, not a ticket queue.

Form submissions

The contact form and the automation audit collect your name, email address, and the answers you select or type. The legal basis is your own request: you filled in a form asking to be contacted. Without this information there is no way to answer you.

Page analytics

Vercel Web Analytics counts page views. It records the page URL, the referring site, an approximate country and a general device type. It sets no cookie and assigns no persistent identifier, so it cannot tell whether two visits came from the same person. Nothing you typed reaches it.

Analytics events

A second, finer layer (a CTA clicked, a service page opened, a form completed) exists in the code but only reports if a Google Analytics 4 measurement ID is configured for this site. None is configured at the date above, so these events currently go nowhere. If one is added, this page changes with it. Either way, event names and option keys are what would be recorded. Nothing you typed is: not your name, not your email address, not the free-text box.

Server logs

The site is hosted on Vercel, which keeps standard request logs (IP address, timestamp, requested URL, user agent) for operational and security purposes. This is a normal part of serving a web page and is not used to build a profile of you.

Three processors, and no one else. No data is sold, and there is no advertising network attached to this site.

Web3Forms

Receives the form submission and delivers it to us as email. It is the transport for the message; it is not a CRM and it does not market to you.

Vercel

Hosts and serves the site, and therefore handles the request that delivers each page to you.

Vercel Web Analytics

Counts page views for the site. Cookieless, with no cross-site identifier and no advertising use.

Google Analytics 4

Only when a measurement ID is configured, which it is not at the date above. IP anonymisation is on and advertising features and signals are off, so the data is not used to build an advertising audience.

Some of these operate servers outside Canada, which means your information may be processed in another country and be subject to that country's law. This is disclosed rather than buried, because it is a real consequence of using them.

This site sets no cookies of its own. There is no login, no session, no cart and no preference to remember, so there is nothing to store.

The page analytics that is running sets no cookie either. It counts a view and keeps no identifier, which is why there is no cookie banner on this site: there is nothing a banner would be asking you to accept.

If a Google Analytics 4 measurement ID is ever added, Google sets its own first-party cookies to tell one visit from another, and this paragraph changes to say so. You would be able to block them in your browser and every page here would keep working exactly as it does now.

Form submissions

Kept as email for as long as the conversation is live, and for up to two years after the last exchange in case you come back. Then deleted.

Page analytics

Kept by Vercel as aggregate counts. There is no per-visitor record to retain, because none is created.

Analytics events

Nothing is being collected. If Google Analytics 4 is switched on, retention is 14 months, the shortest GA4 offers, then deleted automatically.

Server logs

Kept for Vercel's standard retention period, which is measured in weeks, not years.

Under PIPEDA you can ask what personal information is held about you, ask for a copy of it, ask for a correction if it is wrong, and ask for it to be deleted. Write to info@braavlabs.com and you will get an answer within 30 days, usually much sooner. There is no fee and no form to fill in. An email in your own words is enough.

You can also complain to the Office of the Privacy Commissioner of Canada. You do not have to come to us first.

The site is served over HTTPS only, so form submissions travel encrypted. Nothing you submit is stored in a database we run, because there is no such database: the submission becomes an email and lives in an inbox protected by two-factor authentication.

No one can promise a system is unbreachable. What can be promised is that if a breach affects your information, you will be told what happened, when, and what to do about it.

This site sells business services and is not directed at anyone under 18. No information is knowingly collected from children.

When this policy changes, the date at the top changes with it. A change that materially affects how your information is handled will be described in plain words rather than slipped into a paragraph.