Privacy Policy

We collect only the information necessary to operate the Service.

• Account information. Your first name, last name, email address, and the password you choose. Your password is never stored in plain text: it is stored as a cryptographic hash (bcrypt).
• Team and workspace information. When you create or join a team, we keep your membership in that workspace, your role, and any invitations exchanged.
• Billing information. Depending on your usage: your history of credit purchases and transactions, along with the data required to process payments. Payment card details are handled directly by our payment provider (PayPal) and do not pass through our servers in full (see section 4).
• Files and datasets you submit. The files you upload to run a job, and the results produced (including downloadable archives). These files may contain personal information you place in them; you remain responsible for them and must only submit information you have the right to process.
• Job-related information. The processing plans you create, the chosen processing mode, execution parameters, streamed execution logs, and your job history.
• Exchanges with the planning assistant. The content you enter in the AI planning chat to refine a job. This content is processed by an AI model self-hosted on Cloud Paradise’s infrastructure; it is not sent to any third-party AI provider (see sections 2 and 4).
• Messages exchanged in internal messaging. When you use team messaging, the content of your messages and your presence status.
• Technical logs and connection data. IP address, timestamps, browser type, pages visited, and technical events (errors, executions), for the security and operation of the Service.

We use your information for the following purposes only:

• Providing the Service: authenticating your account, running the jobs you request, streaming logs, and delivering results to you.
• AI planning assistance: processing your input in the planning chat, using a self-hosted model, to suggest job plans to you.
• Billing: recording your credit purchases, processing payments, and preventing fraud.
• Support and service communications: responding to your requests and sending you essential notices (confirmations, password resets, security alerts, important changes to the Service). These transactional messages are not marketing communications.
• Security and integrity: detecting abuse, preventing incidents, and protecting the Service and its users.
• Improving the Service: for internal analysis purposes, based on aggregated or de-identified information whenever possible.

We do not use your files or your results to train models, nor for advertising profiling purposes. Since the AI model used for the planning assistant is self-hosted, your exchanges are also never used to train a third party’s models. We do not reuse any information for a purpose incompatible with those above without your consent.

Automated processing. The planning assistant suggests plans to you, but decisions about execution remain yours: no decision producing effects on you is made solely on the basis of automated processing.

We process your information on the following bases:

• Performance of the contract: the information necessary to provide the Service you requested (account, job execution, billing).
• Consent: for any processing that goes beyond what is necessary to provide the Service. This consent is requested separately, in clear and simple terms, for each purpose.
• Legal obligations and legitimate interest: security, fraud prevention, and retention required by law.

You may withdraw your consent at any time for processing that relies on it (see section 8). Withdrawal has no retroactive effect and may, depending on the case, limit your access to certain features.

We do not sell any personal information.

A significant part of our infrastructure is self-hosted by Cloud Paradise (application hosting, database, file storage, service email delivery, and the AI model). These processing activities therefore do not involve any third-party provider.

We use a limited number of subcontractors (service providers) who process information on our behalf, solely under our instructions and subject to confidentiality and security commitments:

• Payment — PayPal. Payment processing for credit purchases is handled by PayPal. Card or payment account details are entered and processed directly by PayPal; we only receive confirmation of the transaction.
• Physical hosting of the infrastructure. Our servers are operated directly by Cloud Paradise, on our own business premises located at 238, 1st Avenue West, Amos, Quebec — no third-party data centre is involved.

To avoid any ambiguity:

• AI planning assistant: the model is self-hosted on our servers. Content you enter there is not shared with any third party (in particular, not with OpenAI).
• Transactional email: service emails (confirmations, resets, alerts) are sent using our own mail server, without relying on a third-party sending service.
• File hosting and storage: the database and files are hosted on our own infrastructure (self-hosted object storage), not with a third-party cloud provider.
• Audience measurement: we use Matomo, an audience-measurement tool self-hosted on our own infrastructure — no browsing data is shared with a third party (in particular, not with Google Analytics). Tracking only starts after your explicit consent (see section 6).

We may also disclose information where required by law, to respond to a valid legal request, or to protect our rights, our security, and that of our users.

Your information (account, database, files, job results) and processing by the AI assistant are hosted on infrastructure operated by Cloud Paradise, located in Amos, Quebec, Canada.

Unlike a model relying on external cloud services, the vast majority of processing takes place on our own infrastructure and is not disclosed outside Quebec. This is also true of audience-measurement data (Matomo), hosted on that same infrastructure.

The only disclosure likely to result in processing outside Quebec is payment processing by PayPal. Law 25 requires, before any disclosure of personal information outside Quebec, a privacy impact assessment to verify that the information will benefit from adequate protection. This assessment is underway for PayPal, and the disclosure is governed by that provider’s applicable terms pending its completion.

We use cookies that are strictly necessary for the Service to function, notably to keep you signed in once logged in and for security. These cookies cannot be disabled without preventing the Service from working.

• Audience measurement — Matomo. We use Matomo, self-hosted on our own infrastructure, to know which pages are visited, how often, and which outbound links are clicked. No data is shared with a third-party service (in particular, not with Google Analytics), and this information is never used for advertising purposes.

This tracking only starts once you click “Accept” in the banner shown on your first visit. If you click “Decline”, or make no choice, no audience-measurement cookie is set. You can change your mind at any time by clearing the browsing data stored for this site in your browser settings, which will show the banner again.

We retain your information only for as long as necessary for the purposes for which it was collected, or for the period required by law.

• Submitted files and job results: kept in your workspace until you delete them. Files you upload are not erased once the job finishes: they stay with you exactly as the results do. You may delete them at any time; they are then destroyed from our storage systems. This retention has one limit: after 1 year of account inactivity, they are deleted automatically.
• Deleting your account: when you request the deletion of your account, a 30-day grace period begins. During those 30 days, you may cancel your request and recover your account intact. The grace period covers the whole account: your files, your results and your account information.
• Permanent purge: once those 30 days have elapsed, all your files and all your account data are permanently purged. Only your invoices are kept beyond that point.
• Invoices: kept for six (6) years, the only exception to the purge, to meet tax and accounting obligations.
• Technical logs: kept for 12 months for security and troubleshooting purposes.

Once the applicable periods expire, information is securely destroyed or irreversibly anonymized.

Subject to the conditions set out in Law 25, you may exercise the following rights:

• Access: obtain a copy of the personal information we hold about you.
• Correction: have inaccurate, incomplete, or ambiguous information corrected.
• Withdrawal of consent: withdraw a previously given consent, for processing that depends on it.
• Portability: obtain, in a structured, commonly used technological format, the computerized information you provided to us (see Settings → Account → Export my data).
• De-indexing / cessation of distribution: request that the distribution of information cease, or that a hyperlink be de-indexed, in the cases provided for by law.

To exercise any of these rights, contact our privacy officer (section 10). We respond within 30 days of receiving your request.

We implement reasonable security measures, appropriate to the sensitivity of the information, including:

• encryption in transit of communications (HTTPS/TLS);
• encryption at rest of the database and object storage (encrypted disk);
• hashing of passwords using the bcrypt algorithm (no password stored in plain text);
• access control based on the principle of least privilege, a role and permission system, and access logging.

Privacy incident. In the event of an incident presenting a risk of serious harm, we take reasonable measures to contain it, we notify Quebec’s access to information commission (the CAI) and the individuals concerned, and we record the incident in a register, in accordance with Law 25.

In accordance with Law 25, we have designated a privacy officer responsible for ensuring compliance with this policy and handling your requests.

• Officer: Maxime Murray
• Email: maxime@cloudparadise.ca
• Address: 238 1re Avenue Ouest, Amos (Québec) J9T 1V2

We may amend this policy to reflect changes to the Service or to our legal obligations. The “Last updated” date indicates the version in effect. In the event of a significant change, we will notify you by a reasonable means (a notice within the Service or by email) before it takes effect.

For any question relating to this policy or to your personal information, contact our privacy officer (section 10) or visit our Contact page.

If you believe we have not adequately addressed your concerns, you may file a complaint with Quebec’s access to information commission (the CAI): cai.gouv.qc.ca.