Security and data: the plain version
What we connect to, where it runs, who can see it, and how you switch it off. Written for owners and office managers, not lawyers. Questions: paras@evensteadautomation.com.
What we connect to
- Only the accounts the system needs, for example your Gmail, your calendar and one sheet.
- You sign in yourself. We never ask for your passwords.
- You can remove our access any time from your Google or Microsoft account settings.
- Your data stays in your own accounts where possible: your sheet, your calendar, your inbox.
Where it runs
| Provider | What it does | Where |
|---|---|---|
| n8n on Elestio (Netcup servers) | Runs the automation steps. Connection details for your accounts are stored encrypted. | United States (Virginia) |
| Anthropic (Claude) | Writes replies, reads documents, answers staff questions | United States |
| Twilio, Deepgram, ElevenLabs | Phone Answering only: carries the call, turns speech into text, makes the voice | United States |
| Google or Microsoft | Your own email, calendar and sheets | Your account's settings |
We do not claim Canadian hosting. If your data must stay in Canada, tell us before we start and we'll tell you honestly whether we can do it.
Anthropic's policy for its commercial API is that it does not train its models on that data by default (Anthropic privacy center).
Who can see it
- Paras, who runs Evenstead. If a contractor ever helps with your build, it is under a written confidentiality agreement and only for your system.
- Our server keeps run logs so we can fix problems. We delete our copies when you leave.
- We reuse only the general pattern of a workflow, never your data, prices, messages or customer details.
What our systems never do
- Pay anything or move money.
- Sign anything or accept terms for you.
- Give legal, medical or HR rulings. They point to the document and the person.
- Contact people who haven't contacted you or aren't your customers (Canada's anti-spam law, CASL). Anyone who says stop is stopped at once.
- Send customers anything with a price, discount or refund you haven't approved.
Pausing and leaving
- Every system has a pause switch you control, written on your one-page handover sheet.
- To cancel, email us. We switch it off and remove our access within 2 business days, delete our copies, and send you an export on request.
- For Alberta's privacy law (PIPA) we give you a short paragraph for your own privacy notice that names these providers.
See also our privacy policy for this website.
Have a question your IT person would ask?
Send it over. You'll get a straight answer, including “we can't do that” when that's the truth.