Privacy Policy

Last updated: September 1, 2026

Conduit9 Labs Demo (conduit9.com) is operated by Conduit9 Labs. This page explains what information we collect, why we collect it, and what happens to it. We collect only what the service needs, and we do not sell or rent personal information to anyone.

What we collect

• Voice analysis orders: your name, email address, date of birth, height and weight, and a short voice recording you make or upload. These are the inputs the analysis requires.
• Payments: processed entirely by Stripe. Your card number never touches our systems; we receive only a confirmation of payment and the amount.
• Clinic bookings: your name, email, and optional phone number, plus the appointment details.
• The free Listening Session: your email address and your consent record. The recording you make on that page never leaves your browser — nothing is uploaded.
• Referral partners: account details partners provide to track and receive their commissions. Bank details for automatic payouts are held by Stripe, not by us.

How we use it

• To produce and deliver your voice analysis report and audio prescription.
• To manage your appointment, including creating the calendar invitation.
• To send you the emails the service requires: receipts, delivery of your report, and a small number of follow-ups about your order. Marketing-style emails carry a one-click unsubscribe that takes effect immediately.

How long we keep it

• Voice recordings and audio files are deleted 30 days after your report is delivered.
• Your report and order record are retained so we can re-send your report and honour follow-up questions.
• Unsubscribing adds your address to a suppression list that all commercial email checks before sending.
• Backups: encrypted copies of our database and files are kept off-site for up to 60 days, then deleted. Voice recordings and audio files are never included in backups.

Who processes it for us

We use a small number of service providers, each only for its purpose: Stripe (payments and partner payouts), Resend (email delivery), Supabase (secure storage and database), Anthropic (the AI that writes your report from the analysis, confirms the uploaded scan carries your name, and checks your photo suits the report cover), CustomJS (turns your report into a PDF), Google Calendar (appointment scheduling), Netlify (website hosting), Cloudflare (encrypted off-site backups), and Sentry (tells us when part of the site breaks; error reports are stripped of names, email addresses, answers, photos and voice recordings before they are sent). Voice recordings are stored privately — they are never publicly accessible, and access links expire.

Analytics and advertising

We count visits with Plausible, which uses no cookies and stores nothing personal. We do not run advertising trackers without consent. If ad measurement is ever active (Meta's pixel, for Facebook and Instagram ads), it loads only after you accept it through a consent banner; declining leaves the site fully functional.

Your rights

You can ask at any time to see the personal information we hold about you, to correct it, or to have it deleted. Write to hello@conduit9.com or reply to any email we have sent you, and we will respond within 30 days. Deletion requests are honoured except where a record must be kept for tax or accounting law.

This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). If we change this policy, the date above changes with it.