Privacy policy

1. Scope — our two roles

• As controller: information collected directly (visitors to solutionsprosperia.com, prospects, workshop participants, client contacts).
• As service provider: in our advisory mandates and platform, we may process personal information on behalf of a client, who remains the controller. This processing — including any involving AI tools — is governed by our service agreement and the client’s instructions.

2. Person responsible for the protection of personal information

Philippe Daoust, Solutions ProspèrIA inc. — [email protected].

3. Information we collect

• Contact details: name, company, email, phone, position.
• Content you submit to us in the course of an advisory engagement or platform use.
• Browsing data (see section 8).

We limit collection to what is strictly necessary.

4. Purposes of collection

• Provide our advisory services and platform (MASP);
• Manage the relationship, billing, and support;
• Improve our services responsibly;
• Send relevant information (with your consent).

5. Consent

Consent is free and informed, given for the stated purposes, and may be withdrawn at any time (see section 12).

6. Artificial intelligence and data processing

• Our services use generative AI systems. We inform our clients of the AI tools and subcontractors used and of processing locations.
• We transmit to AI systems only the data that is necessary, and favour configurations that do not use your data to train third-party models.
• AI outputs may contain inaccuracies; they are intended to be validated by a human. ProspèrIA makes no decision producing a legal effect on a person based solely on automated processing.

7. Disclosure to third parties and hosting outside Québec

We do not sell your information. We use subcontractors (AI providers, hosts, tools) bound by confidentiality commitments. Some may process data outside Québec; in that case we carry out a privacy impact assessment and put the required protections in place.

8. Cookies

Our site may use cookies for its operation and for audience statistics. Non-essential cookies are enabled only with your consent; you can manage them through your browser.

9. Retention and destruction

We keep your information for as long as necessary for the stated purposes and our legal obligations, then securely destroy or anonymize it.

10. Security measures

We apply reasonable technical, physical, and organizational measures, proportionate to the sensitivity of the information (access control, encryption, logging).

11. Automated decisions

Should a service ever rely on a decision based exclusively on automated processing, we would inform you and allow you to submit observations, in accordance with Law 25. To date, our services maintain human oversight.

12. Your rights

At any time you may: access your information, request its correction, withdraw your consent, request the portability of your computerized information, or de-indexing in the cases provided by law. We respond within 30 days.

13. Confidentiality incidents

In the event of an incident presenting a risk of serious injury, we take reasonable measures to reduce its effects, notify the persons concerned and the Commission d’accès à l’information (CAI), and keep an incident register.

14. Complaints

Any complaint may be addressed to our Responsible person (section 2). You may also contact the Commission d’accès à l’information du Québec.

15. Changes

The current version of this policy is published on solutionsprosperia.com.