Privacy Policy

1. Who we are

AudoPath Consulting ("AudoPath", "we", "us") operates the AudoPath Launch Manager, a secure workspace that helps hearing clinic founders plan and execute their clinic launch. This policy explains what personal information we collect, why, and how it is protected. We operate in Canada and design our practices to comply with PIPEDA and applicable provincial privacy legislation.

2. Information we collect

Account information: name, email address, phone number, and role, provided when AudoPath provisions your invite-only account.

Launch workspace content: tasks, comments, budgets, supplier records, purchase orders, and documents you upload (for example leases, signage proofs, supplier agreements, price books). This content may be commercially sensitive; it is stored in access-controlled, organization-isolated storage.

Booking enquiries: if you request a discovery call on our public site, we collect the contact details you submit in order to respond.

Operational logs: we keep audit logs of significant actions in the workspace (uploads, approvals, status changes) for security and accountability.

3. What we do not collect

The Launch Manager is a business planning tool. It is not designed to store patient health information, and you must not upload patient records or audiological data about identifiable individuals.

4. How we use information

We use your information to operate the workspace, provide consulting oversight (your assigned AudoPath consultant can view your workspace), send operational notifications (task reminders, review outcomes, weekly summaries), and respond to help and quote requests you submit. We do not sell personal information, and we do not use your workspace content for advertising.

5. Sharing

Workspace data is visible only to members of your organization and assigned AudoPath staff. If you use the supplier delivery-tracking feature, a supplier you designate receives a scoped, expiring link showing only the specific purchase order they are fulfilling. We use service providers (cloud hosting, database, and email delivery) bound by confidentiality obligations to process data on our behalf.

6. Security

All data is encrypted in transit. Access is enforced with row-level security at the database layer, per-organization storage isolation, role-based permissions, and audit logging. Accounts are invite-only; there is no public self-registration.

7. Retention and deletion

We retain workspace data for the duration of your engagement with AudoPath and for a reasonable period afterwards to satisfy legal and contractual obligations. You may request export or deletion of your organization's data by contacting us.

8. Your rights

You may request access to, correction of, or deletion of your personal information, and you may withdraw consent to non-essential communications at any time. Contact us at [email protected]. You may also complain to the Office of the Privacy Commissioner of Canada.

9. Changes

We will post updates to this policy on this page and note the effective date above. Material changes will be communicated to account holders by email.