Compliance
Privacy Policy
Last updated: June 12, 2026
At The Skill Corner, we build AI automations that connect your existing business tools. Data privacy, confidentiality, and compliance with Canadian privacy regulations (including PIPEDA and PHIPA) are core to our software design and operational practices.
1. Information We Collect
We only collect information necessary to fulfill our service engagements, deliver our lead magnets, and respond to your direct queries:
- Prospect Data: Contact details (name, email, phone number, business name) provided when requesting our checklist, submitting a contact form, or booking an audit.
- Client Operational Data: API tokens, software credentials, or webhook endpoints required to integrate your systems (e.g., Cal.com, CRM, SMS/voice gateways).
2. How We Handle Data
We operate on a minimal-retention, done-in-place data architecture:
- No Central Database: We do not store or compile database records of your customers, patients, or clients.
- Transit-Only Processing: Automations process data in transit (e.g., receiving a webhook payload from your booking system, formatting an SMS reminder, and handing it to Twilio). Once successfully delivered, the transit logs are purged.
- Use of Existing Systems: We configure AI models to read and write directly to your existing, compliant systems (such as electronic medical records or client intake software) rather than hosting your records ourselves.
3. PIPEDA & PHIPA Compliance
For our professional practice clients (medical clinics, dental offices, law firms, and accounting practices):
- PHIPA (Ontario): We act as a "Health Information Network Provider" (HINP) or electronic service provider under Ontario’s Personal Health Information Protection Act. We do not use or access personal health information (PHI) except as strictly required to run your automation pathways.
- PIPEDA: We conform to the ten fair information principles of the Personal Information Protection and Electronic Documents Act.
- Data Residency: We prioritize routing and storing client logs within Canadian data centers where available and contractually supported by cloud vendors.
- Business Associate Agreements: For medical practices, we sign standard Business Associate Agreements or custom data protection agreements prior to beginning any custom build.
4. Third-Party Service Providers
Our builds rely on industry-standard infrastructure and APIs. When we implement an automation, we use:
- OpenAI / Anthropic APIs: We use enterprise API developer portals. Under enterprise terms, inputs sent to their API are never used to train their models and are retained for abuse monitoring for a maximum of 30 days.
- Communication Gateways: SMS and voice traffic is routed through Twilio or standard carrier APIs under secure data transit terms.
5. Contact Information
If you have questions about this Privacy Policy or wish to request details about data handling for a custom integration, please contact our privacy representative:
The Skill Corner Inc.
Email: hello@theskillcorner.com
Location: Toronto, ON, CA