Privacy Policy

Who we are

Echelon Digital Solutions is operated by Tyler Osborn and based in Canada. We serve trades businesses in Canada and the United States. This policy covers our marketing site (echelontrades.com), the Echelon app (app.echelontrades.com), and the websites we host for customers on echelontrades.com subdomains.

What we collect

• Account data. Your name, email, password (stored as a hash), and business name when you sign up.
• Business profile. Your trade, service area, pricing, payment terms, logo, and any branding you add.
• Customer and job data you enter. Your customers' names, phone numbers, emails, addresses, job descriptions, photos, quotes, and invoices. This data belongs to you. We process it only to run the product for you.
• What you teach Echelon. When you describe your business out loud or in writing, or upload past quotes, price sheets, or photos of paper quotes, we read them to build your price book and a set of durable facts about how you work. You can see, correct, and delete every one of those facts at any time under Intelligence.
• Voice input. Where you dictate instead of typing, your browser converts speech to text and Echelon receives only the text. See "Voice and dictation" below, because the conversion itself may involve your browser's own provider.
• Call and SMS metadata. When you use Catch, Answer, or Reviews, we log phone numbers, timestamps, delivery status, call recordings or transcripts where the feature produces them, and message content, so the features work and you have a record of what was sent.
• Billing data. Payments are handled by Stripe. We never see or store full card numbers.
• Usage data. Basic server logs (IP address, browser, pages visited) to keep the service secure and working.

What Echelon learns about your business

Echelon builds a working memory of your business so it can quote and write like you. That memory is derived from things you have already given us — what you say during setup, documents you upload, and corrections you make to generated quotes — and it is stored as a list of plain-language facts you can read.

• Nothing enters that memory silently. New facts are proposed and stay invisible to every AI feature until you approve them.
• You can edit a fact's value, archive it, or delete it at any time under Intelligence. Archived facts stop being used immediately.
• The memory is scoped to your company. It is never pooled with, compared against, or shared with any other Echelon customer.
• We do not build profiles about you for advertising, and we do not sell or license any of it.

Some of what Echelon remembers concerns your individual customers — for example that a particular homeowner prefers texts to calls. That information is covered by "Your customers' information" below.

Voice and dictation

Several parts of Echelon let you talk instead of type. Speech-to-text is performed by your web browser, not by Echelon. Depending on the browser you use, that conversion may happen on your device or may involve the browser vendor's own speech service — for example, Google Chrome sends audio to Google for transcription. That processing is governed by your browser vendor's privacy policy, not this one.

Echelon receives only the resulting text, and we do not store the underlying audio. If you would rather no audio leave your device, type instead — every voice input in Echelon has a typed equivalent, and the same box accepts both.

This is separate from Answer, our AI phone agent. Where you switch Answer on, calls to your Echelon number are handled and transcribed by our voice provider so you get a record of the call. Recording and notification obligations for those calls vary by province and state and are your responsibility as the business receiving the call.

AI processing

Echelon uses AI to draft quotes, invoices, emails, texts, and renders, and to answer your questions about your own data. To do that, the relevant information — job descriptions, notes, photos, uploaded quote documents, and the facts you have approved about your business — is sent to our AI providers for processing.

• Your data is sent solely to produce your output. Our AI providers do not use it to train their models.
• AI-drafted messages to your customers are not sent automatically. They wait in an approval queue for you to read, edit, and approve first.
• AI output is a draft. You are responsible for what you send, and prices or terms in a generated document should be checked before it goes to a customer.

SMS and text messaging

Echelon products send text messages on behalf of the businesses that use them. Specifically:

• Catch sends an automatic text-back, in about 5 seconds, to people who call a business and do not get an answer. The message is sent on behalf of that business, from that business's dedicated number, in direct response to the call the person just placed.
• Reviews sends review request texts to a business's existing customers after a completed job, triggered by the business owner.
• Test messages can be sent by account owners to their own phone while setting up.

Message and data rates may apply. Message frequency varies depending on how often a business misses calls or sends review requests. Anyone receiving these messages can reply STOP at any time to opt out, or reply HELP for help. Opt-outs take effect immediately and the number is suppressed from all future sends.

Phone numbers, message content, and consent or opt-in records collected through our SMS features are not shared with, sold to, or rented to any third party or affiliate for marketing or promotional purposes.

Who processes your data

We use a small set of service providers to run Echelon. Each one receives only the data it needs to do its job:

• Supabase. Database hosting, file storage, and authentication. This is where your data lives.
• Vercel. Web hosting and server logs.
• Anthropic. AI processing of job descriptions, notes, documents, and business memory to generate quotes, messages, and answers.
• Replicate. AI image generation in Render.
• Retell. AI voice handling and call transcription, where Answer is switched on.
• Twilio. Phone numbers, SMS, and voice.
• Resend. Transactional email, where you have not connected your own mailbox.
• Google. Sign-in, and — only if you connect them — sending from your Gmail address, reading your calendar's busy times, and address autocomplete.
• Microsoft. Sending from your Outlook address, only if you connect it.
• Stripe. Payments and subscription billing.

If you connect your own email account instead of using ours, we store the credentials needed to send on your behalf in encrypted form, and use them only to send the messages you ask us to send.

Who can see your data

Your customer list, your prices, your quotes and everything Echelon has learned about your business belong to you. Here is exactly who can reach them.

• Other Echelon customers — never, and they couldn't if they tried. Every record is walled off by business inside the database itself, not merely by the app. Another contractor's account has no route to your data even if our software had a bug. Your prices are not pooled, averaged, benchmarked or compared against anyone else's.
• Your customers — only the one document you send them. A homeowner who opens a quote link sees that quote. Not your other customers, not your price book, not your margins, not anything else.
• Us — we don't look. We don't read your quotes, browse your customer list, or mine what Echelon has learned about you. We're not going to pretend nobody here has technical access to the database — someone has to run the thing, and any company telling you otherwise is being cute with words. What we commit to is not using it: we access your data only to keep the service running or to fix something you've specifically asked us to look at, and never for our own purposes.
• Advertisers, data brokers, AI training — none of the above. We don't sell your data, we don't rent it, we don't share it for marketing, and neither we nor our AI providers train models on it.

Your customers' information

Much of what Echelon holds is information about your customers — homeowners and businesses who have a relationship with you, not with us. For that information you are the controlling party and Echelon acts on your instructions.

• You are responsible for having a lawful basis to collect it and, where required, consent to contact them.
• We process it only to run Echelon for you: producing your documents, sending the messages you send, and keeping your records.
• We never contact your customers for our own purposes, and we never market to them.
• If one of your customers asks us for access to or deletion of their information, we will route the request to you and help you fulfil it, because it is your record to act on.

How we protect it

• Data is encrypted in transit and at rest.
• Every business's records are isolated at the database level, not merely in application code, so one Echelon account cannot read another's.
• Access to production data by us is limited to what is needed to operate and support the service.
• No system is perfectly secure. If a breach affects your data, we will tell you and the relevant regulator as required by law.

Canadian and US privacy law

We are a Canadian company and align our practices with PIPEDA (the Personal Information Protection and Electronic Documents Act): we collect with consent, use data only for the purposes stated here, and apply safeguards appropriate to the sensitivity of the data. Our email and SMS tooling is built with CASL mechanisms. If you use Echelon to message your own customers, you are responsible for having their consent.

For US users, we honor the rights granted by applicable state privacy laws, including access, correction, and deletion. In practice we extend those rights to everyone, regardless of where you live. Your data is stored and processed in the United States and Canada, and our AI and messaging providers may process it in the United States.

How long we keep data

While your account is open, we keep your data — and Echelon keeps what it has learned about your business — for as long as you want it. It does not expire, reset, or get cleared out on a schedule. The whole point is that it gets better the longer you use it, and that only works if it accumulates.

If you cancel, we keep your account and its data so it's all still there if you come back. We don't delete it on a timer, because a contractor who returns after a slow winter should find their price book and their history exactly where they left them.

When you want it gone, ask and we'll delete it — the whole account, permanently, along with everything Echelon learned from it. Email tyler@echelondigitalsolutions.net and we'll confirm once it's done. You can also delete any individual thing it has learned, yourself, at any time, under Intelligence. SMS consent and opt-out records are kept longer where carrier rules or law require it, and backups age out on their own schedule shortly after deletion.

Your rights

You can request access to, correction of, export of, or deletion of your personal data at any time. Email tyler@echelondigitalsolutions.net and we will respond within 30 days. You can also read and delete what Echelon has learned about your business yourself, at any time, under Intelligence. If you are a customer of one of the businesses that uses Echelon, see "Your customers' information" above — we will work with that business to fulfil your request, since they control that data.

Cookies

The marketing site uses essential cookies only. No advertising trackers. We use Vercel's privacy-friendly analytics, which counts page views without cookies and without building a profile of you. The app uses cookies to keep you signed in. That's it.

Children

Echelon is built for business owners and is not directed at anyone under 18. We do not knowingly collect data from minors.

Changes to this policy

If we change this policy, we will post the update here and revise the effective date. For material changes, we will email account holders before the change takes effect.

Contact

Tyler Osborn, Echelon Digital Solutions. tyler@echelondigitalsolutions.net