Privacy Policy

About This Policy

This privacy policy describes how SUMI Lab ("we," "us," or "our") collects, uses, and shares personal information through our website at sumilab.ca and related tools, including our social media scheduling service at post.sumilab.ca.

Who We Are

SUMI Lab is a design and product agency based in British Columbia, Canada. We focus on AI-native design, branding, UX/UI, and website development for businesses and startups.

For questions about this policy or to exercise your privacy rights, you can contact us through the booking system on our website at sumilab.ca/#booking.

Information We Collect

Optional Website Analytics

If you accept analytics, we use PostHog, hosted in the United States, to understand which pages and campaigns lead to inquiries. We send public page paths, campaign labels, referring domains, device and browser information, and events such as booking-button clicks, calendar views, bookings created, and successful contact-form submissions. Random identifiers stored in your browser connect these events. Campaign labels are retained for the browser tab session.

PostHog analytics are off until you accept. Rejecting analytics does not prevent you from using the website or booking a call. Use the Analytics preferences button to change your choice at any time. We remember your choice for up to 180 days. Withdrawing consent stops future PostHog collection and clears its analytics identifiers from your browser; it does not automatically delete previously sent events.

We do not send names, email addresses, contact-form messages, booking answers, complete query strings, or booking IDs to PostHog. Session recordings and advertising tracking are disabled. Network requests necessarily expose an IP address to the receiving service; we disable IP-based location enrichment in our analytics configuration. Our current PostHog free plan provides one year of event retention.

Hosting and Performance

Cloudflare hosts and protects our website and provides aggregate performance analytics. Cloudflare Web Analytics does not use cookies or local storage to measure usage. This existing service operates separately from the optional PostHog preference. See Cloudflare Web Analytics for its data practices.

Bookings and Inquiries

Our calendar is provided by Cal.com. Booking information you submit is processed by Cal.com to arrange the meeting. The calendar works independently of your optional analytics choice. We may record contact details, inquiry source, meeting outcomes, and follow-up notes in our Notion lead tracker to respond to your inquiry and manage the business relationship. Contact us to request access, correction, or deletion of these records.

Social Media Publishing Tool

When you connect social media accounts (Facebook Pages, Instagram professional accounts, or Threads) to our scheduling tool at post.sumilab.ca, we collect and store:

• OAuth access tokens from Meta platforms
• Social media account identifiers and Page IDs
• Profile information necessary to publish content (account names, profile pictures)
• Content you create and schedule for publication through our tool

How We Use Your Information

We use the information described above to:

• Respond to inquiries, arrange meetings, and manage sales follow-ups
• With your consent, measure website usage and inquiry conversions
• Schedule and publish SUMI Lab's own marketing and business content to connected social media accounts
• Maintain connections to your social media accounts for ongoing publishing
• Operate and improve our internal publishing workflows

Our social media scheduling tool is primarily an internal SUMI Lab tool for publishing our own content. We do not sell your personal data to third parties.

Information Sharing

We share your information only as necessary to:

• Provide optional website analytics through PostHog
• Arrange meetings through Cal.com and manage inquiry records in Notion
• Communicate with Meta platforms (Facebook, Instagram, Threads) to publish scheduled content
• Operate our infrastructure (hosting providers, cloud services)

We do not sell personal data to third parties or use it for advertising purposes beyond publishing the content you schedule through our tool.

Data Retention

We retain your social media account information and access tokens for as long as:

• Your social media accounts remain connected to our tool, or
• We need the information to fulfill scheduled publications you have created

You can request disconnection and deletion of your account information at any time by contacting us.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Disconnect your social media accounts from our tool
• Revoke OAuth permissions through Meta platform settings

To exercise these rights, contact us through the booking system at sumilab.ca/#booking.

Security

We implement reasonable technical and organizational measures to protect your personal information. However, no method of transmission over the internet or electronic storage is completely secure.

Changes to This Policy

We may update this privacy policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. Continued use of our services after changes constitutes acceptance of the updated policy.

Contact Us

For questions about this privacy policy or our privacy practices, please contact us through the booking system at sumilab.ca/#booking.