What you send us, and what we do with it.

Who is responsible

westcode.io is a small studio in British Columbia. The person in charge of the personal information we hold is Loic Bachellerie, founder. Write to loic@westcode.io with any question or request.

When you send us a message

The contact form sends us your name, email, the kind of help you’re after, your budget and timing, your current website if you give it, and your message. It also records how you arrived: the page you landed on, the site that sent you, campaign tags in the link, and the click ID Google Ads adds when you come from an ad. We use this to reply to you and to see which pages and ads lead to real conversations. We don’t add you to a mailing list.

When you book a call

Bookings run on Calendly, which collects the details you enter under its own privacy policy. We receive them to prepare for the call.

Analytics and ad measurement

Google Analytics counts visits: the pages you view, your device and your approximate location, with IP addresses anonymized. It never receives your form answers or contact details.

Google Ads tells us whether a visit from one of our ads led to a message or a booking. When you send the form, your email is hashed in your browser before Google uses it to match that result to the ad. We don’t use remarketing or personalized advertising.

In Quebec, the European Economic Area, the United Kingdom and Switzerland, analytics and advertising cookies are off by default and visits are counted only in aggregate. Anywhere, you can block cookies in your browser.

Our iPhone app

Anyone can open the app to read our work and blog or to send us a project inquiry, without an account. Clients sign in with the email address we use for their project: we email them a 6-digit code (sent through Resend), and they see only what our team shares about their project, answer our requests and write to us. Messages a client writes are stored with the project in our admin. A client can delete their sign-in from the app (Account, then Delete my account): that removes their sign-in, devices and push tokens, while the project and its history stay with us.

Our team signs in with a westcode.io Google account. Both sides have a demo account for App Review, which shows made-up data only. The app keeps its sign-in in the iPhone’s Keychain and, if you allow notifications, a push token so our admin can alert you. It shows the email, projects and tasks our admin already holds. On the phone it keeps only a 24-hour cache of lists, never message bodies or attachments, and signing out deletes it.

The voice assistant uses the microphone only while you talk to it. Your voice goes to LiveKit (the call), Deepgram (speech to text), Anthropic (the model that answers) and Cartesia (the spoken reply). We don’t keep recordings; what the assistant does is logged like any other action in our admin. The app has no ads, no analytics and no tracking.

Who processes it for us

Google (Analytics, Ads, and Cloud Firestore, where our admin stores messages), Vercel (hosting for this site and our admin), Resend (the notification emails we send ourselves), Calendly, and for the app Expo (push notifications), LiveKit, Deepgram, Anthropic and Cartesia. These services may store information outside Quebec and Canada, including in the United States.

How long we keep it

We keep a message while we need it to reply and follow up. If it doesn’t lead to a project, we delete it within 24 months. Analytics data follows the retention period set in our Google Analytics account.

Your choices

You can ask to see the information we hold about you, correct it, or have it deleted. Email loic@westcode.io and we’ll take care of it.