Privacy Policy
Last updated: September 26, 2026
Client Intelligence Agency ("CIA," "we," "us") is a Canadian business owned by Catharine O'Leary. This policy explains what we collect across clientintelligenceagency.com, sia.clientintelligenceagency.com, and discover.clientintelligenceagency.com (together, the "Services"), how we use it, and the choices you have. We comply with Canada's Anti-Spam Legislation (CASL) and applicable Canadian privacy law.
CIA is the data controller for the personal information described here. If you are in the United Kingdom or the European Economic Area, the UK GDPR and EU GDPR also apply to you, and the sections on our lawful bases, international transfers, and your rights set out what that means in practice.
What we collect
- Browsing clientintelligenceagency.com and reading Signals do not send anything to us.
- Discover Your Clients' Patterns is different. What you paste, upload, or link to is sent to us, and to Anthropic, the AI provider that does the reading, to make your report. We do not keep it. The one-page report itself, with your name and email, is stored so it is ready if you book a call. Ask and we delete it.
- The report gives your clients' own words back to you, so the copy we store contains short fragments written by people other than you. We store no name, no email, and no other detail about them. We never contact them, and their words are used for nothing except your report.
- When you run a report we record the IP address it came from. We use it only to stop one address running the tool hundreds of times, which would be a cost problem before it was anything else.
- If you book the Strategic Intelligence Advantage, we collect your name, email address, and, if you provide it, your phone number.
- Before your session, we ask a short set of preparation questions about your business and a longer assessment questionnaire. Your written answers and scored responses are stored so Catharine can prepare for your call.
- Payment for the Advantage is processed directly by Stripe. We never receive or store your card number. We receive confirmation that payment was made.
How we use your information
- To schedule, prepare for, and deliver your Strategic Intelligence Advantage.
- To follow up with you about that session and, if you choose to move forward, about further engagements.
- With your consent, to send you Signals and other CIA communications.
Our lawful bases for using your information
If the UK or EU GDPR applies to you, we must have a lawful basis for each thing we do with your information. Ours are:
- Your consent, for sending you Signals and other CIA marketing. You can withdraw it at any time by clicking unsubscribe or emailing us, and withdrawing it does not affect anything we sent before.
- Performing a contract with you, for scheduling, preparing, and delivering the Strategic Intelligence Advantage, and for taking payment.
- Our legitimate interests, for producing the report you asked for, for keeping a copy of it so it is ready if you book a call, and for recording an IP address to stop the tool being abused. We have weighed these against your rights and use the least information that will do the job.
- A legal obligation, for keeping payment records for the period the Canada Revenue Agency requires.
Words your clients wrote
Discover Your Clients' Patterns only works because you give us things other people wrote about you. That makes their words personal information too, and it puts a small responsibility on both of us.
When you submit testimonials, reviews, survey answers, or messages, you confirm that you are entitled to share them with us for this purpose. In data protection terms you are the controller of that material and we handle it only on your behalf and only to make your report.
We hold no contact details for the people who wrote those words, so we have no way to write to them, and telling each of them individually would take effort out of all proportion to the fragments we keep. This section is how we make that handling public instead. If someone whose words appear in a report contacts us, we will find and delete those fragments on request.
Please do not submit anything containing health information, financial account details, government identifiers, or other sensitive personal information. The tool does not need it and we do not want it.
Where your information is stored
- Your booking and preparation data is stored using Supabase, a secure cloud database provider, and is accessible only to CIA.
- Your name and email address are also copied to HighLevel (LeadConnector), a US-based customer relationship platform, under HighLevel's own privacy policy. We use it to send our emails and, if you have agreed to them, texts. From Discover Your Clients' Patterns we also copy your business name, the link to your report, and two short lines from it: its headline, which can quote a few words your clients wrote, and the question it suggests you ask them. From the Strategic Intelligence Advantage, your phone number is copied only if you tick the box agreeing to texts and calls.
- Reports are made by Anthropic, a US-based AI provider, under Anthropic's own privacy policy. What you submit is sent to Anthropic to produce your report, and under Anthropic's commercial API terms it is not used to train their models.
- Payment is handled entirely by Stripe, a US-based payment processor, under Stripe's own privacy policy.
- Scheduling is handled by Calendly, a US-based scheduling provider, under Calendly's own privacy policy.
Stripe, Calendly, Anthropic, and HighLevel are based in the United States, and your information may be processed on servers located outside Canada. That means it may be accessible to courts, law enforcement, and national security authorities in the countries where it is processed, under the laws of those countries. We only work with providers who maintain safeguards appropriate to the sensitivity of the information involved.
If you are in the United Kingdom or the European Economic Area, transfers of your information to these providers are made under the Standard Contractual Clauses approved by the European Commission, together with the UK Addendum where it applies. You may ask us for a copy of the safeguards that cover any particular transfer.
What we never do
- We never sell your personal information.
- We never share your assessment answers or preparation notes with anyone outside CIA.
- Your card details never reach CIA. Stripe handles payment directly.
- We never contact the clients whose words you submit, and we never use their words for anything but your report.
- We do not make decisions about you that have a legal or similarly significant effect using automated processing alone.
Email and unsubscribing (CASL)
Every commercial email we send identifies the sender and includes a working unsubscribe link. You may withdraw your consent at any time by clicking unsubscribe or by contacting us at the address below. Unsubscribe requests are honoured promptly and no later than 10 business days after receipt.
Text messages
The Strategic Intelligence Advantage has an optional box you can tick to agree to texts and calls from CIA, including automated and prerecorded messages. It starts unticked, and you never need to tick it to take the assessment or to buy anything.
If you tick it, we keep a record of your consent: the phone number, the exact wording you agreed to, when you agreed, and the IP address it came from. We use your number only to send the texts and calls you agreed to. Message frequency varies, and message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. You can also withdraw your consent at any time by emailing us at the address below.
When we send texts, they go through HighLevel (LeadConnector), the US-based customer relationship platform we use, and its telecommunications partners.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Cookies
clientintelligenceagency.com does not use cookies or third-party advertising trackers. discover.clientintelligenceagency.com sets no cookies and runs no analytics or advertising trackers. The Advantage booking flow at sia.clientintelligenceagency.com embeds Stripe and Calendly, which may set their own cookies under their own policies.
Data retention and security
We keep your information for as long as needed to deliver the Services, and we use reputable infrastructure providers with industry-standard safeguards to store it. Records related to a payment, including your name, email, and transaction details, are kept for 6 years from the end of the relevant tax year, as required by the Canada Revenue Agency. If you ask us to delete information that we are not required to retain, we will do so.
Reports made with Discover Your Clients' Patterns are kept for 24 months and then deleted, unless you have booked with us, in which case they are kept for as long as we work together. What you pasted, uploaded, or linked to is never stored at all: it exists only for the minute or two it takes to make your report.
Your rights
You may request access to, correction of, or deletion of your personal information at any time by emailing us. Catharine O'Leary is CIA's privacy contact and is responsible for handling these requests.
If the UK or EU GDPR applies to you, you also have the right to ask us to restrict how we use your information, to object to our using it on the basis of our legitimate interests, to receive the information you gave us in a portable machine-readable form, and to withdraw any consent you have given. We answer requests within one month. We do not charge for this, and we will never treat you differently for asking.
If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada. If you are in the United Kingdom you may complain to the Information Commissioner's Office, and if you are in the European Economic Area you may complain to the supervisory authority in the country where you live or work.
Changes to this policy
We may update this policy from time to time. The date at the top reflects the most recent update.
Contact
Questions about this policy or your data: catharine@catharineoleary.com