Privacy Policy
Effective date: October 5, 2026
AashCo Inc. ("AashCo," "we," "us," or "our") is a federally incorporated company based in Ontario, Canada. This policy explains how we collect, use, disclose, and safeguard personal information through aashco.com, in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Who is responsible for your information
AashCo Inc.'s owner and operator serves as Privacy Officer and is accountable for this organization's compliance with PIPEDA. You can reach us about any privacy question, concern, or complaint at hello@aashco.com.
What we collect
When you use the Ask AashCo form, we collect the information you provide: your name, email address, business or organization name, and the details you share about what you'd like to improve. Optional fields (what you'd like to do, role, industry, company size, frequency, what you've tried, interest in a conversation) are collected only if you choose to provide them.
To limit spam and abuse, the form records a one-way, salted hash of your IP address (not the IP address itself) so we can count how often submissions come from the same source in a short period. These hashed values are deleted automatically within 24 hours and are used only for this purpose.
We also use Cloudflare Web Analytics to understand overall site traffic and page performance. It does not use cookies or store anything in your browser, and Cloudflare states that it discards the IP address it receives with each measurement rather than storing it.
Please do not include passwords, customer records, or other sensitive or confidential third-party information in the form.
Why we collect it
We collect this information to assess whether AashCo can usefully help with what you've described, and to contact you about that assessment.
Your consent
By checking the consent box and submitting the form, you consent to our collecting, using, and — only as described below — disclosing your information for these purposes. You can withdraw consent at any time by contacting us, though this may limit our ability to follow up on a submission already in progress.
Disclosure to others
We do not sell your personal information, and we do not use it for advertising.
We use these service providers to operate this website. They process information on our behalf, and each receives only what it needs for its role:
- Cloudflare — website hosting, our database, security and anti-spam (Cloudflare Turnstile), and website traffic statistics (Cloudflare Web Analytics). Cloudflare operates a global network; our database's primary location is in the United States (eastern North America).
- Resend — sends us one internal notification email for each submission, containing your name, email address, business name and an excerpt of what you wrote. Resend sends from the United States and keeps the email for up to 30 days, then deletes it automatically.
- Google — operates the email mailbox (hello@aashco.com) that receives those notifications and any correspondence with you. Google's servers are located in the United States and other countries.
Information held by these providers may be stored or processed outside Canada, including in the United States, and may be accessible to courts, law enforcement or other authorities under the laws of those places. We do not otherwise share submission information with anyone. If we add other tools — for example a customer relationship management (CRM) system — we will update this policy first.
How long we keep it
We review identifiable submissions after 12 months without meaningful contact and delete them unless an active conversation or agreed project requires continued retention. When we delete a submission, we replace your name, email address, business name and everything you wrote in our database with a placeholder or blank. We keep only a reference number, timestamps, version numbers, a workflow status and technical identifiers, none of which identify you. We delete the matching notification email from our own mailbox on the same schedule. Information we delete may remain in our database provider's backups for up to 7 days until they are overwritten. Resend deletes its copy of each notification email automatically after 30 days.
Keeping your information accurate
We rely on the accuracy of what you submit. If your contact information or business details change, or if you notice an error, contact us and we will correct it.
How we protect it
Your information is transmitted over encrypted connections (HTTPS) and encrypted at rest in our database (AES-256, managed by Cloudflare). On our side, access is limited to AashCo's owner, and access to our submission-management tools requires authentication.
We use automated safeguards to reduce misuse, including Cloudflare Turnstile, an anti-spam check on the form. Turnstile analyzes limited information about your browser and connection to distinguish people from automated programs, and may use cookies or similar browser storage for that security purpose. Our hosting provider’s security features may also run a small script to detect automated traffic.
In the event of a breach of security safeguards that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada, as required by law. We keep records of all breaches of security safeguards, regardless of whether that threshold is met, for at least 24 months.
Cookies and similar technologies
Our website does not set cookies for visitors. Cloudflare Turnstile, which protects the enquiry form, may use cookies or similar browser storage for security purposes, as described above. Cloudflare Web Analytics does not use cookies or store anything in your browser.
Your rights
You may ask us what personal information we hold about you, request a correction, or request deletion, by contacting hello@aashco.com. We will respond to access, correction and deletion requests within 30 days of receiving them. If we need more time, we will tell you why and when to expect a response, as PIPEDA allows.
If you have a concern
If you believe we have not handled your information appropriately, contact us first at hello@aashco.com so we can address it directly. You also have the right to file a complaint with the Office of the Privacy Commissioner of Canada at any time.
Visitors outside Canada
AashCo is based in Canada, and this website and this policy are governed by Canadian law regardless of where you access the site from. If you are located outside Canada, please be aware that we handle your information in Canada, and that our service providers store and process it in the United States and potentially elsewhere.
Children
This website is intended for businesses and is not directed at children. We do not knowingly collect personal information from children.
Changes to this policy
We will update this notice when our handling of website information changes, and revise the effective date accordingly.