Preparing your wellness experience...
Effective date: June 5, 2026 · Last updated: October 4, 2026
Incites is a booking, membership, payments, and marketing platform operated by SKomp Studio (1001594827 Ontario Ltd.) and provided to boutique fitness studios. When you book a class, buy a membership, fill out a form, or otherwise interact with a studio that uses Incites (for example, Solstice Pilates), that studio is the business you have a relationship with and is responsible for the personal information it collects about you. SKomp Studio operates the platform on the studio's behalf and processes personal information to deliver the service. This policy explains how personal information is handled across the Incites platform.
We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL). Where the laws of your province or country grant you additional rights (for example, Quebec's Law 25), we honour equivalent rights to access, correct, and delete your personal information.
gclid and Meta's fbclid), the page you landed on, and conversion events (such as a booking or purchase). For advertising measurement we may derive hashed identifiers (your email and phone irreversibly hashed with SHA-256) so that advertising platforms can match a conversion without receiving your plain-text contact details.We rely on your consent for non-essential activities. Cookies and similar technologies that are not strictly necessary, and any advertising or analytics, run only after you make a choice in our first-party consent banner — no third-party consent vendor is involved, and advertising and analytics signals default to denied until you consent. You can review or withdraw consent at any time using the cookie-preferences link in the page footer.
Marketing email (CASL). We send marketing or promotional email only after you give express consent (an explicit, unchecked-by-default opt-in). Every marketing email identifies the sender, includes a valid physical mailing address, and contains a working unsubscribe link. You can unsubscribe at any time, and we honour unsubscribe requests promptly (and in any case within 10 business days).
On the public Incites website, you can separately choose Google Analytics for public-page measurement and Google Ads for demo-enquiry measurement. These choices are separate from a studio's consent settings and are remembered in a first-party cookie for one year. Use Cookie preferences on a public Incites page to change them. We do not include your form answers, account identifiers, URL query strings or fragments in these measurement events.
When a studio has enabled Incites Marketing and you have consented, we share conversion events and hashed identifiers with the following platforms so the studio can measure and improve its advertising:
We use these platforms' data and APIs in accordance with their terms and policies. We do not sell your personal information, and we do not use data we receive from these platforms for any purpose other than providing and improving the service for the studio you interact with.
When a studio administrator uses the marketing assistant or AI copywriter, we send their request and relevant studio information through Vercel AI Gateway to an Anthropic model to generate a response or draft. This can include conversation history, connected account and campaign information, performance summaries, product and class information, and content or comments from the selected marketing screen. The assistant's automatic lead summary includes first names and masked email addresses. Information an administrator types into a request is also sent to the AI service.
The automatic context does not include stored access tokens, payment card details, full lead email addresses or lead phone numbers. Administrators should include only information needed for the task. AI responses and drafts are presented for review; publishing content and changing campaigns require an explicit administrator action. AI processing can occur outside Canada, including through the providers' international infrastructure.
We use the following providers to operate Incites:
Some of these providers process data in the United States or other countries. Where personal information is transferred outside Canada, it may be subject to the laws of those jurisdictions; we use providers that offer appropriate safeguards.
We keep personal information for as long as your account is active and as needed to provide the service. We retain certain records longer where required by law — for example, transaction records for tax and accounting purposes, and records of marketing consent and unsubscribe requests (which we keep for at least three years to meet CASL requirements). When data is no longer required, we delete or de-identify it.
Under PIPEDA (and equivalent provincial or foreign law where applicable), you have the right to:
To exercise any of these rights, contact privacy@skomp.studio. We respond within 30 days. Some information may be retained where we are legally required or permitted to keep it.
An access request is answered with a file, not a summary. Your studio produces it from your member record in the admin dashboard. The file is assembled by reading our database structure rather than a list someone maintains, so it covers each record that carries your account id, each record that carries your email address, and the records attached to those — your profile and signed waiver, your bookings and class history, memberships and credits, payment and refund records, gift cards, referrals, the messages on your conversation with the studio, the notes the studio has kept about you, actions our staff took on your account, your marketing consent decisions and the advertising events recorded against you, your newsletter subscription and any unsubscribe you sent.
Two things are left out on purpose. Login credentials — your password hash, session and sign-in tokens, and verification codes — are excluded because they prove who you are rather than describe you, and the file names every one it withheld. Records belonging to another person are excluded even where they touch yours: if you bought a gift card someone else redeemed, or a family member booked on your membership, that person's record is theirs to request, not yours. If you hold accounts at more than one studio, each studio can produce only its own records, except for platform-wide unsubscribes, which are recorded against your email address rather than against any one studio. Records you hold with us rather than with a studio — an application to open a studio of your own, for example — are not in a studio's export either; write to privacy@skomp.studio for those. Every export is recorded in the studio's audit log.
Saved copies of transactional email messages are included in your access export. We clear their message bodies on a verified deletion request, or after 365 days through our daily retention job. We keep delivery metadata, including bounce and complaint records, to investigate delivery problems and prevent unwanted resends. This does not change the retention of your booking and payment records.
You can request deletion of your personal information at any time. See our Data Deletion page for instructions. When you request deletion, we remove your profile details from the Incites platform — health information, your phone number and date of birth, emergency contacts, and any notes a studio kept about you — and, where applicable, send deletion requests to the advertising platforms (Meta and Google) that received hashed identifiers about you. We retain your signed waiver as a legal record, and your bookings and payment records as accounting records, for as long as the law requires, along with your name and email so those records stay attributable.
We use technical and organizational safeguards to protect personal information, including encryption of sensitive credentials and access controls. No system is perfectly secure, but we work to protect your information and to respond promptly to any incident.
Incites is not directed to children. We do not knowingly collect personal information from anyone under the age of majority in their province without appropriate consent.
We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date above.
Privacy officer: privacy@skomp.studio
SKomp Studio (1001594827 Ontario Ltd.), operator of the Incites platform