Privacy policy
Last updated: 7 October 2026
Who we are
Wonpost is operated by Brendan Elgie in Sault Ste. Marie, Ontario, Canada. Brendan is responsible for privacy at Wonpost. Contact hello@wonpost.com with a question or request about your information.
This policy covers the Wonpost website, pilot applications and related correspondence. The connected service described below is planned for the pilot. Applying does not connect your CRM or Google Ads accounts or give Wonpost access to them.
Information we collect
When you visit the website, Cloudflare processes network and device information to deliver and protect it. Cloudflare Web Analytics reports aggregate page visits and website performance without analytics cookies. We do not use advertising pixels on this website.
When you apply, we collect your name, work email, company, role, deal source, ad platforms and monthly ad spend range. You can also provide a website and a description of your sales process. Please leave customer records, passwords and sensitive personal information out of your application.
We record the application time, its status, your browser's user agent and the country reported by Cloudflare. Cloudflare Turnstile processes browser and network signals, including your IP address, to verify the submission. Our submission counter stores a hash derived from your IP address and the current hour, rather than the raw address.
If you contact us by email, we receive your address, message and any information you include.
How we use and share information
We use application information to assess whether the pilot fits your business, reply to you and manage the resulting conversation. We use technical information to operate the website, understand its performance and prevent abuse.
Your application is saved in our database and sent to Brendan by email. We use Cloudflare for hosting, database storage, verification, analytics and notification delivery. Google Workspace provides our business email. These providers process information as needed to provide those services.
We do not sell personal information or use customer data to train AI models. Applying does not subscribe you to a marketing mailing list. We may disclose information when required by law or when necessary to address fraud, abuse or a security incident.
The planned connected service
Wonpost is designed to send selected CRM outcomes and values to Google Ads. Connecting accounts will require a separate authorization. Before asking you to connect, we will explain the information, permissions and service providers involved.
The proposed connection uses account identifiers, authorization tokens and the CRM fields selected for conversion reporting. Those fields include deal stages, values, click identifiers and associated contact information used for matching. See the data handling page for the planned data flow.
Google user data
The planned Google connection uses the https://www.googleapis.com/auth/datamanager permission to upload conversion events to the Google Ads accounts you authorize and check delivery diagnostics. The permission shown during account authorization will describe the access requested. This website's application form does not request Google account access.
Information received from Google APIs will be used only to provide and support the connection you authorize. It will not be sold, used for personalized advertising or shared for unrelated purposes. This is separate from the CRM conversion information you choose to send to Google for advertising measurement and bidding.
Human access to Google user data will be limited to support with your explicit permission, necessary security work or legal requirements.
Wonpost's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Read the Google API Services User Data Policy.
Retention and deletion
Application records and related email are kept for pilot assessment, follow-up and any resulting business relationship. How long they are needed depends on the conversation, the service agreed and any legal record-keeping requirements. Application records do not have a scheduled automatic deletion date.
You can ask Brendan to delete an application or related correspondence by emailing hello@wonpost.com. We will explain any information that must be retained and the reason. Requests are handled individually and include the database and email copies we control.
The submission counter uses hourly periods. Expired counter records are removed when a later application is successfully saved. Retention and deletion arrangements for connected account data will be explained before that service is enabled.
Security and international processing
The website uses HTTPS. Application records are stored in Cloudflare D1, which encrypts database data at rest and protects transfers to the database. Notification and correspondence copies are held in our business email account. No method of storage or transmission can guarantee complete security.
Cloudflare and Google operate internationally. Information may be processed outside Canada and may be subject to the laws and lawful access requirements of other countries.
Your rights and choices
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws, you may request access to your personal information, ask how it has been used or shared, and request correction of inaccurate or incomplete information. You can also withdraw consent to further use, subject to legal or contractual limits, and request deletion.
Email hello@wonpost.com to make a request or raise a concern. We may need to verify your identity. We will respond within the time required by applicable law and explain any restriction on access, correction or deletion. You can also contact the Office of the Privacy Commissioner of Canada.
Changes to this policy
We will update the date above when this policy changes. If the purposes for collecting or using your information change, we will provide notice and obtain consent where required before using it for the new purpose.