§ Legal

Privacy policy.

The short version: we only collect what we need to run your engagement, we don't sell anything to anyone, and you can ask us to show you, change, or delete what we have on you any time.

Last reviewed May 20, 2026. We review this policy at least annually and any time a material change to our data practices happens (new subprocessor, new region, new product). The current version always lives at this URL.

§ 01 — Who we are

Chello Operations Inc. (“Chello,” “we,” “us”) is a private company incorporated in British Columbia, Canada. We provide operations consulting, virtual administrator placement, technology assessments, and executive coaching to small and mid-sized businesses. If you're reading this you're probably one of our clients, prospective clients, or a teammate of one.

Reach us at hello@chello.ca with any privacy question. We respond within five business days.

§ 02 — What we collect

We collect only what's needed to deliver the service you asked for or to keep the platform secure. The categories:

Account information — your name, work email, phone number, role, and company. Provided when you sign up, book a discovery call, or are invited to a client portal by someone at your organization.
Business information — your company name, industry, team size, and the operational details you choose to share during an assessment (revenue tracking, processes, tools, team structure). You decide what to share; we don't scrape third-party sources to fill in gaps.
Assessment responses — the answers you (and any teammates you invite) provide during a free diagnostic or full assessment. These are tied to your organization and used to produce your report.
Engagement data — notes, goal updates, weekly status reports, time logged by VAs we've placed with you, and messages exchanged through your client portal.
Usage data — basic analytics on how the chello.ca and portal.chello.ca surfaces are used: page views, referrers, device type, approximate location (city-level from IP). We do not run third-party advertising trackers.
Payment information — if you become a paying client, we'll collect billing contact info and process payments through a regulated payment processor. Chello does not store full card numbers on its own systems.

§ 03 — How we use it

Everything we collect is used for one of these purposes:

To deliver the service you've engaged us for.
To communicate with you about your engagement, our work product, or service-relevant operational matters.
To improve our service quality — internal benchmarking, methodology refinement, and AI model evaluation on aggregated and de-identified signal only.
To keep the platform secure (detecting fraud, abuse, or misuse).
To meet our legal obligations.

We don't sell your personal information. We don't share it with advertisers. We don't use it to train public AI models. Full stop.

§ 04 — Subprocessors

We run a small, deliberate technology stack. The third-party services that may process your data on our behalf are:

Supabase — our primary database and authentication provider. Data is hosted in the ca-central-1 region (Montreal). Privacy policy: supabase.com/privacy.
Vercel — application hosting and content delivery. Edge processing is global; primary servers in the United States. Privacy policy: vercel.com/legal/privacy-policy.
Anthropic — the Claude family of models, which we use to draft elements of assessment reports, weekly goal suggestions, and time-on-task summaries. Anthropic processes prompts in the United States but does not retain them for model training. Privacy policy: anthropic.com/legal/privacy.
Deepgram — speech-to-text transcription for any voice interviews. US-based; transcripts are retained only for the duration of your assessment.
Google Cloud Identity Platform & Microsoft Entra ID — used only if you choose “Sign in with Google” or “Sign in with Microsoft.” They provide the identity assertion; they don't see your usage of Chello.

When we add a new subprocessor we update this list before the integration goes live. If you want a current copy of the list with version stamps for compliance review, write us and we'll send one.

§ 05 — Where your data lives

Your primary records (account, organization, assessment responses, engagement data) live in Canada at Supabase's Montreal data centre. Some processing — application hosting, AI inference, transcription — happens at subprocessors based in the United States, with appropriate contractual safeguards in place. If cross-border processing is a concern for your organization, write to us before signing an engagement and we'll walk through the data flow with you.

§ 06 — How long we keep it

For active clients, we retain your data for the duration of the engagement plus seven years after, which aligns with Canadian tax-record retention requirements. You can ask us to delete specific records earlier (subject to any legal hold or regulatory obligation). For prospective clients who took the free diagnostic but never engaged us, we retain the assessment for two years so you can return to it later, then delete it unless you ask us to keep it longer.

§ 07 — Your rights

Under Canadian privacy law (PIPEDA, plus provincial statutes where they apply, including Quebec's Law 25), you have the right to:

Access the personal information we hold about you.
Ask us to correct anything inaccurate.
Withdraw consent for any specific use (within the limits of any active contract).
Request deletion of your account and associated personal records.
Request a portable copy of your data in a machine-readable format.
Complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator if you believe we've mishandled your data.

To exercise any of these, email hello@chello.ca with “Privacy request” in the subject. We'll respond within thirty days, usually much sooner.

§ 08 — Cookies

chello.ca uses only essential cookies (session state, light preference storage like theme choice). portal.chello.ca uses authentication cookies set by Supabase. We don't use third-party advertising cookies and don't plant tracking pixels for ad retargeting. If your browser blocks cookies, the marketing site still works; the portal does not (authentication requires the cookie).

§ 09 — Children

Chello is a business-to-business service. We don't knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we'll delete it.

§ 10 — Changes

When we make a material change, we update the “Last reviewed” date above and email active clients ahead of the change taking effect. The current version always lives at this URL.

§ 11 — Contact

Chello Operations Inc.
British Columbia, Canada
hello@chello.ca