Privacy Policy.
Last updated on 25th of October, 2026
The short version. We collect what we need to run your account, bill you, support you and improve our products, and nothing more. Card numbers go to Stripe and never reach us. Competitor Intelligence reads public dealership websites; it does not collect your dealership’s customer records. Most of the companies that help us run our products are in the United States; our database is in Canada. We never sell personal information. You can see, correct, export or delete what we hold about you by emailing system@addedhours.ai.
Who we are and who to contact
ADDEDHOURS LTD., doing business as Added Hours, Alberta, Canada. Our Privacy Officer is Kris Mahler, system@addedhours.ai. We follow the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information Protection Act (PIPA). British Columbia’s PIPA applies where we deal with people in BC.
What this covers
Our website (addedhours.ai) and Added Hours Competitor Intelligence.
What we collect and why
| Who | What | Why |
|---|---|---|
| Website visitors | Standard request logs kept by our host (IP address, browser, pages requested), and anything you email us. | To keep the site running and secure, and to reply to you. |
| Competitor Intelligence users | Name, work email, dealership name, role, login records and IP address, how you use Competitor Intelligence, support messages, billing status. | To run your account, bill you, support you, keep the service secure and improve it. |
| People named on public dealership pages | A name that appears on a public page we read, such as a salesperson on a listing or a published review, is kept as part of our copy of that page. | We keep the page as the record of what the dealership published. We read listings from it and use names for nothing. |
What we do not collect
Card numbers: Stripe handles payment and we see only limited card details such as the last four digits, plus the billing status. Your dealership’s customer records, or anything from your dealer management or CRM system.
Consent
By creating an account, you consent to the collection and uses described above. We send marketing email only to people who have opted in. You can withdraw any consent by emailing us; we then stop the use you withdrew from, except where we need the information to finish a contract or keep a record the law requires.
Who sees your information
The Added Hours team members who need it to do their work, and the service providers below, each only for the purpose shown. We tell account owners by email at least 14 days before adding a provider.
Most of these providers are in the United States. While your information is there, US courts and law enforcement can require them to hand it over. Our database is in Canada. Questions about this go to Kris Mahler, Privacy Officer, system@addedhours.ai.
We never sell personal information. We disclose it only if a court order, warrant, subpoena or a written demand from a body with legal authority to compel it requires us to. If that happens we tell you first unless the law forbids it, and we give only what the order requires.
Our service providers
| Provider | What it does for us | Data it handles | Country |
|---|---|---|---|
| Stripe | Billing and card payments | Cardholder name, email, card details, billing address, invoices | United States |
| Vercel | Hosts the website and the Competitor Intelligence app | Request logs and IP addresses | United States |
| Supabase | The Competitor Intelligence database and file storage | Account data (users, dealership, saved sets, settings, reports) and our copies of public dealership web pages | Canada |
| WorkOS | Login | Name, email, IP address at login | United States |
| Resend | Sends our email | Recipient addresses, subject lines, delivery logs | United States |
| Firecrawl | Loads public dealership web pages for Competitor Intelligence | Public web pages only | United States |
| Anthropic | Reads public listing text when our own parser cannot | Public web page text only | United States |
| Sentry | Tells us when something breaks in Competitor Intelligence | Technical error reports, with personal information removed before they are sent | United States |
| Google Workspace | Our email and documents | Anything you email us | United States and others |
| Google Fonts | Serves the typefaces on our website | Visitors’ IP address and browser details | United States |
| Google Analytics and Tag Manager | Counts visits to our website and Competitor Intelligence | Pages visited, buttons clicked, browser and device type, approximate location; cookies only if you allow them | United States |
Our promise about dealer data
Section 9 of our Terms of Service is also a privacy promise: we never sell, license, give, report or otherwise provide your dealership’s pricing, inventory or usage data to any manufacturer, lender, regulator, dealer association or data broker. Only the service providers above handle it, for us and for no other purpose. Combined market statistics are built only from at least five dealerships and never name one.
How long we keep it
| Information | Kept until |
|---|---|
| Competitor Intelligence account data (saved sets, settings, reports, users) | While your account is open. After your plan ends, until you ask us to delete it; we delete within 30 days of your request. |
| Invoices and payment records | Six years, as tax law requires. |
| Server, login and email delivery logs | For our hosting, login and email providers’ standard retention periods. |
| Our copies of public dealership web pages | Kept as the record of what each dealership published. |
| Email you send us | As long as we need it to help you, and deleted when you ask. |
Your rights
Email system@addedhours.ai to see, correct, export or delete the personal information we hold about you, or to withdraw marketing consent. We answer within 30 days (45 days where Alberta’s PIPA sets that limit), at no charge. We delete on request except for records the law requires us to keep. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner of Alberta.
How we protect it
- Card payments are handled by Stripe. Card numbers never reach our servers.
- Every connection to our website and app is encrypted, and browsers are told never to fall back to an unencrypted connection.
- Our database is in Canada and is encrypted at rest.
If we ever have a security incident that affects your personal information, we tell you directly and without unreasonable delay, and report it to the privacy regulators as the law requires. Report a security problem to system@addedhours.ai.
We send email about your account (receipts, failed payments, trial reminders, your reports, changes to these terms) to everyone with an account. Marketing email goes only to people who opted in. Every marketing email has an unsubscribe link, honoured within 10 business days.
Changes
Every version of this policy carries a date, and we keep earlier versions; ask us for any of them. A material change gets 30 days’ email notice to account owners, the same as the Terms. Minor changes are posted on this page with a new date.
Contact us
Questions about this policy or your personal information go to system@addedhours.ai.