Privacy policy

The term "personal information" means any information (in any format) about a natural person that allows them to be identified, directly or indirectly: for example your name, email address, mailing address, phone number, or information about your use of our Services.

When you browse our site or use our Services (booking a meeting, contact form, newsletter subscription, exchanges by email or phone, participation in the free offer or an engagement), we collect:

• Usage data, collected automatically as you browse (technical information, browser type, etc.) — see the "Cookies" section.
• Identification data you provide: first and last name, email address, phone number, organization, job title, industry, address, city, province, postal code, as well as the content of your requests.
• The advertising click identifier and campaign parameters carried in the address, if you arrive from one of our ads — see the "Measuring our advertising campaigns" section.

We use your personal information in order to:

• respond to your inquiries and schedule your meetings;
• deliver our intelligent automation, AI assistant, development and audit Services, including under the free offer;
• improve our site and our services;
• measure how our advertising campaigns perform and attribute the meetings we obtain to the campaign that prompted them;
• send you our newsletter and communications (with your consent).

Managing our website

Handling information and contact requests — answering your questions, preparing proposals, scheduling meetings — as well as optimizing and securing the site.

Marketing

Contact form: with your consent, to respond to your request. Advertising measurement: see section 11, which sets out exactly what is collected and what is disclosed.

Newsletter

Subscription works by double consent: you enter your address, then confirm by clicking the link in a first email. Without that confirmation, the address never enters our list. Delivery is handled by our provider Brevo.

This purpose is separate from every other one and is never inferred. The booking form offers a subscription checkbox: ticking it is a separate step that goes through the same email confirmation. Without that explicit action, requesting a meeting subscribes you to nothing. You can withdraw your consent at any time via the unsubscribe link at the bottom of each message.

Delivering engagements

As part of an engagement, we collect the information needed to design, integrate and monitor the solution, applying the narrowest possible access.

When you provide your information by using our Services or browsing the site, we assume you consent to its use and disclosure for the purposes set out in this policy. Unless the law permits otherwise, we will obtain specific consent before any other use. Your consent is valid for the duration of your business relationship with us, subject to your rights of objection and erasure.

We keep your information for as long as necessary to fulfill the purposes stated or to meet our legal obligations. If you wish to exercise your right to erasure, we will handle your request diligently, within the conditions and limits set by applicable laws. All collected information is stored securely, on systems accessible only to authorized members.

Two periods are set in advance:

• The advertising click identifier attached to a meeting request is erased no later than 90 days after that request. Past that point Google no longer accepts it and it serves no purpose. Erasure is automatic.
• Your newsletter subscriber address is kept until you unsubscribe.

Information tied to a meeting or an engagement is kept for as long as the follow-up requires, then for as long as our accounting and legal obligations impose.

We do not sell your information. We may share it where necessary for the purposes described or to meet our legal obligations.

Service delivery. Your information may be shared with our team members and the providers that support our Services, notably the cloud file server Google Cloud and the newsletter platform Brevo. Access is restricted to expressly authorized persons, strictly for authorized purposes.

Appointments. A booking creates an event in our Google Calendar: your contact details and the form answers are stored with that event, at Google, not in a database we operate ourselves. If you arrived through an ad, the ad click identifier is stored in the same place. Those bookings are carried over into an internal register kept in Google Sheets, which lets us follow up on our meetings and record our working notes; only authorized members can access it. A confirmation is sent to you through Brevo.

Advertising measurement. The click identifier attached to a meeting is disclosed to Google Ads, under the conditions described in section 11. That disclosure includes none of your contact details.

Legal compliance. Your information may be disclosed where we reasonably believe it is required to comply with applicable laws, legal proceedings or requests from authorities, or to protect our rights.

Some of our providers may be based outside Canada, including in the United States, and may therefore access, store or process your information outside Quebec. Organizations outside Canada may not be subject to laws offering the same protections as in Canada; your information may then be subject to the laws of a foreign jurisdiction. Where applicable, we carry out a privacy impact assessment and take the measures needed to ensure adequate protection.

Providers concerned. Google (meeting calendar, internal register and advertising measurement) and Brevo (newsletter and confirmation emails) process information outside Quebec. Disclosing a click identifier to Google Ads, described in section 11, is a disclosure outside Quebec and has been covered by that assessment.

Individuals residing in the European Union. Your information may be transferred outside the EU — to Canada, and possibly to the United States or other countries. These transfers rely on adequacy decisions (Art. 45 GDPR) or are governed by appropriate safeguards (Art. 46 GDPR), such as standard contractual clauses adopted by the European Commission.

The security of your data is a priority. We apply reasonable administrative, technical and physical measures:

• HTTPS — a secure, encrypted connection between your browser and our server.
• SSL — encryption of the information you enter on the site.
• Password encryption — stored in encrypted form.
• Access control — only authorized persons can access and modify sensitive data.
• Continuous monitoring — detection of suspicious activity and rapid response.
• Updates and maintenance — security patches applied regularly.

In accordance with applicable law and within the limits it sets, you may exercise the following rights:

• Right of access — confirm the existence of your information and obtain a copy.
• Right to rectification — have inaccurate or incomplete information corrected.
• Right to erasure — in certain cases; we may however retain information where the law requires it or on another legal basis.
• Right to object — object to the processing of your data.
• Right to withdraw consent — where processing is based on consent; this withdrawal may limit our ability to provide certain Services.
• Right to de-indexation — require that the dissemination of information about you cease, or that a link giving access to it be de-indexed, in the cases provided for by Law 25.
• Right to lodge a complaint — with the competent supervisory authority (in Quebec, the Commission d'accès à l'information).

Individuals in the European Union also have a right to restriction and a right to portability, exercised under the conditions set by Regulation (EU) 2016/679 (GDPR).

How to exercise them

Write to the person in charge of the protection of personal information, whose contact details appear at the end of this page. A written request is enough; we may ask you to establish your identity before acting on it. You receive an answer within 30 days of our receiving your request.

To withdraw your consent to the newsletter, the unsubscribe link at the bottom of each message is enough and takes effect immediately.

A cookie is a small file stored on your device when you visit; it collects information about browsing. We use this term for all similar technologies, including browser storage.

The site uses only cookies necessary for its core functions. These cookies store no personal information and cannot be disabled. We use no analytics cookie, no advertising cookie, and no technology that would identify you, locate you or build your profile. No consent banner is therefore displayed: there is nothing to enable or refuse.

One exception worth knowing. If you arrive from one of our ads, the click identifier carried in the address is held in your browser's session storage, which is cleared as soon as you close the tab. No cookie is set for this and nothing survives from one visit to the next. Section 11 explains what that identifier is used for.

If you do not want cookies stored, you can disable them in your browser; some features may then be limited.

We run online ads, notably through Google Ads. This section sets out exactly what that activity means for your information.

What we do not do

• No third-party advertising or analytics tag is loaded on the pages of this site.
• No profiling cookie, no persistent identifier.
• No audience list is built from our visitors, and we do no remarketing.
• We do not follow anyone from one visit to the next, or across devices.

This site makes no request to any third-party domain: fonts and icons are hosted by us. It is a constraint we impose on ourselves and verify at every release.

The click identifier

When you reach our site from one of our ads, the address carries a click identifier assigned by Google — the "gclid" — and sometimes parameters describing the originating campaign. We read them on arrival and hold them in your browser's session storage, which is cleared when you close the tab.

If you then request a meeting, that identifier is recorded alongside your request. It tells us which ad led to that meeting. Afterwards we add an internal assessment: did the meeting take place, and did it match what we offer.

That identifier is attached to an identifiable person. It is therefore personal information and is treated as such in this policy.

What is disclosed to Google

Meetings we consider relevant are sent back to Google Ads as conversions, attached to the originating click identifier. The upload comes from our servers, after the meeting. Google thereby learns that one of its clicks led to a meeting.

That upload includes none of your contact details and none of the content of your request. It remains a disclosure of personal information to a third party established outside Quebec; section 7 sets out the framework.

Purpose and retention

The purpose is to measure how our campaigns perform and to steer our budget toward the ads that bring useful meetings. No decision about you follows from it.

The click identifier is erased no later than 90 days after your meeting request. Past that point Google refuses it and it loses all usefulness.

If you would rather stay out of this measurement

Write to us and we will erase the identifier attached to your request. Your meeting is unaffected. You can also adjust ad personalization from your Google account.

We review this policy regularly and may make changes to comply with applicable regulations. Any change will be published on this page; significant changes will be highlighted, notably through a notice on the site before they take effect. By continuing to use the site after publication, you accept the changes.

Our site may contain links to sites operated by other companies. We did not create or verify their content and exercise no control over their operation. Any information you share there is governed by their own privacy policies, which we encourage you to review.