Canada and Québec Privacy Notice

Effective date: [EFFECTIVE DATE]

This is the English copy of our Canadian privacy notice in French. [If the two versions differ, the French version prevails for residents of Québec.]

This notice applies to personal information of individuals in Canada, including Québec, and adds to the Privacy Policy. It reflects the Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec's Act respecting the protection of personal information in the private sector, as amended by Law 25.

Person in charge of the protection of personal information

[TITLE], [NAME], [EMAIL], [POSTAL ADDRESS].

This person ensures that we comply with privacy laws and handles access requests and complaints.

What we collect, how and why

We collect the personal information described in the Privacy Policy: account, workspace, token, usage, billing and technical data. We collect it from you through our sign-up and console forms, from GitHub or Google if you sign in with them, and automatically when you or your agents use the Service. We use it only to provide the Service, enforce quotas, bill usage, secure the Service and send service communications. We do not use it for any other purpose without your consent, unless the law allows it.

Technologies that identify, locate or profile

We do not use technology that allows you to be identified, located or profiled. The console stores only your session, language and theme in your browser.

Communication outside Québec

Our service providers (Supabase, Stripe, [CLOUD PROVIDER], [STATIC HOST], [EMAIL PROVIDER]) may store or process personal information outside Québec, including in [COUNTRIES]. Before communicating it outside Québec, we conduct a privacy impact assessment and put written agreements in place so that the information receives adequate protection.

Retention and destruction

We keep personal information only as long as needed for the purposes above, as set out in the Privacy Policy, and then destroy or anonymize it.

Your rights

You may:

• access your personal information and ask for its correction;
• withdraw your consent, subject to legal and contractual restrictions;
• [in Québec] ask us to stop disseminating your information or to de-index a link that leads to it, where the law allows;
• [in Québec] receive computerized personal information you provided in a structured, commonly used technological format, or have it sent to someone else.

Send requests to the person in charge above. We respond within 30 days.

Confidentiality incidents

We keep a register of confidentiality incidents. If an incident presents a risk of serious injury, we notify Québec's Commission d'accès à l'information and the people affected; where an incident creates a real risk of significant harm, we notify the Office of the Privacy Commissioner of Canada and the people affected.

Complaints

Please contact the person in charge first. You may also complain to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca) or to the Office of the Privacy Commissioner of Canada (priv.gc.ca).