Privacy Policy

Last updated: October 8, 2026

Who we are

LumenStack Inc. ("LumenStack", "we", "us") is a corporation based in Ontario, Canada. We set up and run observability (monitoring, logging and alerting) for our clients. This policy explains what personal information we collect through lumenstack.ca and in providing our services, why we collect it, and the choices you have. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

• When you book a call: your name, email address, the time you choose and anything you add to the booking form. Bookings are handled by our scheduling provider, TidyCal.
• When you email us: your email address and the contents of your message.
• When you become a client: business contact details (names, work email addresses), your billing address, and billing records. Bank account details for pre-authorized debit (Canada) or ACH debit (United States) are collected and held by our payment processor, Stripe; we don't receive or store your full account numbers.
• Support: the names, work email addresses and GitHub usernames of client staff given access to their private support space, and the contents of support tickets and change requests.
• Your monitoring data: the observability stack we run is deployed in your own cloud account, and the metrics and logs it collects stay there. We access them only to provide the service, under the terms of our client agreement. If your logs contain personal information, we handle it on your behalf and only as that agreement allows.
• Prospective clients: we may contact people about our services using business contact information that is publicly available or comes from business data providers. Every such message tells you who we are and lets you opt out.

This website

• We don't use analytics cookies, advertising or retargeting pixels, or other tracking technologies.
• The site is delivered by Cloudflare, which processes visitors' IP addresses to deliver and protect the site and may set a strictly necessary security cookie to filter out malicious traffic.
• If we measure visits, we use Cloudflare Web Analytics, which counts page views without cookies and without identifying you.
• Our fonts are hosted on our own site, so your browser doesn't contact third-party font services.
• TidyCal's booking window loads only when you choose to open it.
• If you use the currency switch on our pricing, your choice is saved in your own browser so it's remembered next time. It isn't sent to us.

How we use it

We use personal information to respond to enquiries, schedule and hold calls, provide and support our service, send service notices (such as upgrade and maintenance emails and monthly reports), bill for our services, and meet our legal, tax and accounting obligations. We don't sell personal information, and we don't use it for advertising.

Who we share it with

We share personal information only with service providers that help us run LumenStack, and only as much as they need to do their job:

• Google Workspace for email and internal communication
• TidyCal for scheduling calls
• Stripe for invoicing and payments
• Cloudflare for website delivery, security, and secure sign-in to client dashboards
• GitHub for client support tickets and change requests
• PandaDoc for signing agreements

We may also disclose information where the law requires it.

Where it's stored

Some of our service providers store and process information outside Canada, including in the United States. While it's there, it's subject to the laws of that country, which may allow government authorities to access it.

How long we keep it

We keep personal information only as long as we need it for the purposes above. Billing and accounting records are kept for as long as Canadian tax law requires (generally six years). Booking and enquiry details that don't lead to an engagement are deleted when they're no longer needed.

How we protect it

We use access controls, encryption and least-privilege access across our systems. We hold no standing credentials to clients' cloud accounts; access uses short-lived credentials and is logged.

Your choices and rights

You can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent to our using it (which may affect our ability to provide the service). You can opt out of our emails at any time. To do any of these, contact us below. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

Contact

Privacy Officer, LumenStack Inc.
270 George St N, Unit 102
Peterborough, ON K9J 3H1
Canada
hello@lumenstack.ca

Changes to this policy

We'll update this page if our practices change, and revise the date at the top.