# Privacy Policy

Effective date: July 22, 2026

5 Stones ("we," "us") is a digital growth agency based in Calgary, Alberta, Canada. We provide social media automation, website design and management, local SEO, Google Business Profile management, review automation, advertising management, and marketing automation services to small businesses. This policy explains what information we collect, how we use it, and how to request its deletion.

Questions? Email us at hello@5stones.ca.

## Information we collect

Information clients give us directly. When you sign up for our services, we collect your name, business name, phone number, email address, billing details, brand preferences (such as voice, hashtags, and target audience), and the photos, videos, and business information you provide for use in your marketing.

Access you authorize. Depending on the services you engage, you may grant us authorized access to accounts you own — such as your Facebook Page and Instagram account (through Meta Business Manager), your Google Business Profile, your Google Ads and Analytics accounts, and your website platform. We receive the account identifiers and credentials needed to do the work, along with basic performance information from those accounts (such as whether a post published, or how a page or campaign is performing).

Your customers' information, when you ask us to process it. Some services — review requests, missed-call text-backs, auto-replies, and email marketing — involve sending communications to your customers on your behalf. For those services, we process the customer contact details that you, or software you connect (such as your job management system), provide to us: typically a name, a phone number or email address, and basic job details. We use this information only to perform the service you've asked for.

Website information. Like most websites, 5stones.ca collects basic analytics such as pages visited. Intake form submissions come to us through Google Forms.

## How we use information

We use this information to set up and operate the services you've engaged: publishing and scheduling social media content, generating captions and marketing copy, building and maintaining website pages, managing your Google Business Profile and advertising campaigns, sending review requests and other communications to your customers on your behalf, tracking the performance of that work, processing billing, and providing support.

We do not sell personal information. We do not use your information — or your customers' information — for our own marketing.

## Our role with your customers' information

When we send communications to your customers on your behalf, we act as your service provider: you decide who receives what, and you are responsible for having the right to share their contact information with us and for obtaining any consent required. We use customer information only on your instructions, protect it the same way we protect yours, and delete it when the engagement ends or when you tell us to. Communications we send on your behalf include an opt-out where the law requires one, and we honour opt-outs.

## AI-assisted content generation

Photos, videos, and business information you provide may be processed by third-party AI services (Anthropic and Google) to generate captions and other marketing content. These files are shared only as needed to produce that content.

## Facebook and Instagram data

Our Meta app ("5 Stones Agency") is used solely to publish and manage content on our clients' own Facebook Pages and Instagram accounts, with authorization granted by the client through Meta Business Manager. The app publishes only content provided by our clients through our service. It does not collect information about other Facebook or Instagram users and does not access messages. Where clients engage us for Meta advertising, we manage their ad accounts through the same authorized Business Manager access.

## How we share information

We share information only with the service providers needed to run our services: Meta (Facebook and Instagram publishing and advertising), Google (file storage, scheduling, AI captioning, Business Profile, Ads, and Analytics), Anthropic (AI captioning), Square (billing), our hosting and website platform providers, messaging and email delivery providers used to send communications on your behalf, and business management software you choose to connect (such as Jobber). Each receives only what it needs to perform its function. We may also disclose information if required by law.

## Data retention

We keep client information for as long as the client relationship is active. When a client leaves, we delete their media, schedules, customer lists, and access credentials from our systems, typically within 30 days of offboarding.

## How to request data deletion

If you are a 5 Stones client: email hello@5stones.ca with the subject line "Data deletion request." Include the business name and email address associated with your account. We will confirm your request, delete your information from our systems within 30 days, and send you written confirmation.

You can also revoke our access directly at any time: remove 5 Stones as a partner in Meta Business Manager (Business Settings → Partners), or remove our access from your Google account (myaccount.google.com → Security → Third-party access).

If you are a customer of one of our clients and received a communication sent through our systems (such as a review request or text-back), you can contact the business you dealt with directly, or email us at hello@5stones.ca and we will delete the information we hold about you within 30 days.

## Security

We limit access to client information to the people and systems that need it, use access controls on our storage and automation tools, and use official platform APIs (such as the Meta Graph API) rather than password sharing wherever possible.

## Your rights

Canadian privacy law (PIPEDA and Alberta's Personal Information Protection Act) gives you the right to access, correct, and request deletion of your personal information. Contact us at hello@5stones.ca to exercise any of these rights. If you have an unresolved concern, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.

## Changes to this policy

We may update this policy from time to time. The effective date at the top reflects the latest revision. Material changes will be communicated to active clients by email.

## Contact

5 Stones · Calgary, Alberta

Email: hello@5stones.ca

Phone: (825) 733-9105