Privacy Policy
Who we are
Capacity Products is a sole proprietorship owned by Johann Robertson, based in British Columbia, Canada. It makes tools and educational materials, and it operates the social media accounts of Capacity Products and of Capacity Counselling (Johann's counselling practice). The privacy officer for both is Johann Robertson. Contact: info@capacityproducts.com.
This policy is written under British Columbia's Personal Information Protection Act (PIPA). Where followers live outside British Columbia, Canada's federal law (PIPEDA) may also apply, and we follow both.
What this policy covers
It covers this website and the social media accounts we operate on Instagram, Facebook, LinkedIn, YouTube and TikTok. It does not cover counselling services themselves. Counselling clients receive a separate privacy notice at intake, and nothing on social media is part of a counselling record.
What we collect, and why
- Public comments and reactions on our posts. We read them to reply and to understand which topics help people. They stay on the platform where you left them.
- Direct messages you send to one of our accounts. We read them to reply. A message that asks about counselling gets a short reply that points to the practice's intake channel; we do not provide counselling in messages and we never create a counselling record from a message.
- Platform statistics such as reach, follower counts and view time, which the platforms provide in aggregate. We use them to plan content.
- Website visits. This site sets no cookies and runs no analytics or advertising trackers. Our hosting provider (Vercel) keeps standard server logs for a short period.
We do not sell personal information, use it for advertising, or profile individuals. We do not send unsolicited commercial messages.
Automated tools and AI
We use software on our own computer to collect comments and messages from the platforms and to draft suggested replies. Every reply is written or approved by Johann before it is sent; nothing is sent automatically.
Text of public comments may be sent to an AI service (Anthropic's Claude API, processed in the United States) to help draft a reply. Direct messages are never sent to any AI service outside our own computer. Images and videos we are about to post publicly are stored with Cloudflare (a content delivery service that may store data outside Canada) only for the purpose of publishing them.
How long we keep it
- Direct message text is deleted from our systems seven days after we receive it. After that we keep only a count and a status (for example, "replied").
- Public comments remain on the platform under the platform's own policy. Our own copies are kept only as long as needed to reply.
- Aggregate statistics are kept indefinitely; they contain no names.
Platforms
Meta (Instagram, Facebook), LinkedIn, Google (YouTube) and TikTok each process your data under their own privacy policies, which apply alongside this one. We use their developer platforms to publish our posts and read comments and messages on our own accounts only. We do not request access to anyone else's account data.
Your rights, and how to request deletion
You can ask what personal information we hold about you, ask us to correct it, or ask us to delete it. Email info@capacityproducts.com with the platform and account name you used. We respond within 30 days and delete anything we hold, subject to legal retention duties.
Data deletion for Meta users. If you interacted with our Facebook Page or Instagram account and want the data we obtained through Meta's platform deleted, send the request to the same address. You can also remove our access from your side: on Facebook, Settings, Apps and Websites, remove "Capacity Social"; on Instagram, Settings, Apps and Websites, remove it there. Any message text we hold is deleted on our seven-day schedule regardless.
Safeguards and breaches
Data we hold is stored on an encrypted computer in British Columbia with access limited to Johann. We keep a log of any privacy breach for 24 months and notify affected people, and the relevant privacy commissioner, when a breach creates a real risk of significant harm.
Changes
We will post any change here with a new effective date.