DRAFT — template to be validated by legal counsel before publication.

Privacy policy

Last updated · June 16, 2026

Siana is committed to protecting personal information in accordance with Law 25 (Quebec's private-sector privacy law). This policy describes what information we collect, why, and the rights you have.

Privacy officer

The designated privacy officer oversees compliance with this policy. Contact: Yaovi Houndenou, 145 Broad St., apt. 204, Gatineau, Quebec J9H 7M3, Canada — yaovi@siana-ai.ca.

Information we collect

When you contact us or use our scorecard, we collect the information you provide: name, work email, company and the content of your message.

We also collect limited technical information (pages viewed, device type), only with your consent for non-essential cookies.

Purposes

We use this information to respond to your requests, provide our services, and — with your explicit consent (CASL) — send you communications. We never sell your information.

Basis of consent

Processing is based on your consent, which you may withdraw at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Retention periods

We keep your information for as long as necessary for the stated purposes, then destroy or anonymise it per our retention schedules. The maximum retention period is 99 years, unless you withdraw your consent or the law requires earlier destruction.

Decisions based on automated processing

Should a decision about you be based exclusively on automated processing, you would be informed and would have the right to request a review of that decision by a person, and to submit your observations. To date, the public site performs no such automated decision.

Your rights

You have the right to access your information, to have it corrected, to request its communication (portability), and to withdraw your consent. To exercise these rights, contact our privacy officer.

Transfers outside Quebec

Some of our processors may handle information outside Quebec. Where applicable, we conduct a privacy impact assessment and require adequate contractual protections. Our infrastructure processors are listed in the next section.

Processors and the "no-train" guarantee

We rely on processors (hosting, infrastructure, AI model providers). Our main processors are Supabase (hosting and database) and Vercel (web hosting and content delivery). We contractually require that client data is not used to train any model ("no-train") and govern their processing terms.

Cookies

No non-essential cookie is set before your consent. You can change your choices at any time via "Cookie preferences" at the bottom of every page.

Security

We apply reasonable technical and organisational measures (encryption in transit and at rest, access control, logging). In the event of a confidentiality incident posing a serious risk, we make the disclosures required by Law 25.

Changes and contact

We may update this policy; the update date appears at the top of the page. For any question, write to hello@siana-ai.ca.