Legal
Privacy Policy
Last updated: March 22, 2026
The AI Shed is operated by Kelly Waters, based in Burnaby, British Columbia, Canada. This policy explains what personal information we collect, why we collect it, and how we handle it — in plain English, because that's kind of our thing.
We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).
What we collect
Account and membership information
When you create an account or purchase a membership, we collect your name and email address. Payment is processed securely by Stripe — we never see or store your card number.
Newsletter subscriptions
If you subscribe to our newsletter, we collect your email address. You won't be subscribed to anything without your explicit consent, and every email includes an unsubscribe link. This is stored in our self-hosted Listmonk instance on our own server.
Contact and lead forms
If you fill out a contact or booking form on a city page, we collect your name, email, and message. This information is shared with the local operator for that city so they can follow up with you.
Usage data
We use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect any personally identifiable information. It only tells us aggregate things like which pages are popular and which country visitors are from.
How we use your information
- To provide and manage your membership or subscription
- To send you the newsletter you signed up for
- To connect you with local operators when you request a booking
- To send transactional emails related to your account (e.g. password reset, payment receipts)
- To improve the site and understand what content is useful
We do not sell your data. We do not run ads. Full stop.
Who we share your information with
We use a small number of trusted third-party services to operate the site. Each one only receives the data they need to do their job:
- Stripe — payment processing. Stripe is PCI-DSS compliant. We never store card details ourselves.
- Vercel — website hosting. Vercel processes web requests and may log IP addresses for security purposes.
- Cloudflare — DNS and tunnel service. Used to securely expose our self-hosted services.
- Resend — transactional email delivery (account emails, digest emails).
- Listmonk — newsletter delivery. Self-hosted on our own server; your email address stays on our infrastructure.
- Notion — internal content planning. We do not store any customer data in Notion.
- Local operators — if you submit a booking or contact form on a city page, your name, email, and message are shared with the operator for that city to follow up with you.
How long we keep your data
We keep your account and membership data for as long as your account is active, plus a reasonable period afterward for legal and accounting purposes (typically 7 years for financial records, as required by Canadian law). Newsletter subscriber records are kept until you unsubscribe. Contact form submissions are kept for up to 2 years.
Your rights
Under PIPEDA, you have the right to access the personal information we hold about you, request corrections to inaccurate information, and withdraw consent for non-essential uses of your data. To exercise any of these rights, email us at hello@theaished.ca.
You can unsubscribe from the newsletter at any time using the link in any email, or by emailing us directly.
You can request deletion of your account by emailing us. Note that we may retain certain records as required by law or to resolve disputes.
Cookies
The AI Shed uses a single session cookie to keep you logged in to your account. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. Plausible Analytics runs without cookies entirely.
Security
We use HTTPS throughout the site, and passwords are hashed. Payment data is handled entirely by Stripe and never touches our servers. That said, no system is perfectly secure — please use a strong, unique password for your account.
Children
The AI Shed is not directed at children under 13. We do not knowingly collect personal information from children.
Changes to this policy
If we make material changes to how we handle your data, we'll update this page and note the new date at the top. If you have an account, we may also email you about significant changes.
Contact
Questions about this policy or how we handle your data? Email hello@theaished.caand we'll get back to you.