Privacy Policy

The controller responsible for processing personal information is Viabilio. Under Quebec's Law 25, the person in charge of the protection of personal information is Jonathan Giroux, reachable at admin@viabilio.com. You may contact him with any question, access or rectification request, consent withdrawal, or complaint regarding this policy.

We only collect the information necessary to provide the service:

• Information you provide to us: project name, email address, questionnaire answers, project context, additional details and any attachments you upload.
• Billing data: for paid reports, the information required for payment is processed by our provider, Stripe. Viabilio does not store your card data.
• Technical data: IP address, device and browser type, pages viewed, used only for security and audience-measurement purposes (if you consent).
• Communications: content of messages sent through the contact form.

• Provide the assessment and generate the report, certificate and invoice.
• Send you your documents and respond to your requests.
• Ensure security, prevent fraud, and comply with our legal obligations.
• Improve our services through aggregated usage statistics.

We do not make any fully automated decisions that produce legal effects concerning you. Scores and recommendations are indicative and do not replace your own judgment.

We process your data on the following bases: performance of the contract when you use our services, your consent for non-essential cookies and optional communications, our legitimate interest in securing and improving the service, and compliance with our legal obligations (accounting, tax).

Your information is neither sold nor rented. It may be shared with providers strictly necessary for the service:

• Stripe — payment processing and invoicing.
• Lovable Cloud (Supabase) — hosting, database and secure storage.
• Resend — sending transactional emails.
• AI providers — generation of the score summary and explanation based on the data you submit.

Some providers may host or process data outside Quebec (United States, European Union). In such cases, we ensure an adequate level of protection is in place.

We keep your data only as long as necessary for the purposes described: orders and related documents are kept for the period required by applicable accounting obligations (generally 6 years). The assessment history saved locally on your device is under your control and can be deleted from the "History" page at any time.

Exchanges with the site are encrypted (HTTPS). Access to data is restricted and protected by database-level security policies (RLS). Payments are processed by a PCI-DSS certified provider. Despite these measures, no system is infallible.

We use cookies essential to the site's operation and, with your consent, audience-measurement cookies. See our cookie policy for details and to change your preferences.

In accordance with Quebec's Law 25 and, where applicable, the GDPR, you have the following rights: access to your information, rectification, deletion, portability, withdrawal of consent, objection to processing, and the right to file a complaint with the competent authority (Quebec's Commission d'accès à l'information or the relevant national supervisory authority in the EU).

To exercise a right, write to us at admin@viabilio.com. We will respond within the timeframes required by law.

We may amend this policy to reflect legal or functional changes. The date of the last update is shown at the top of the page.

Any question or request can be sent to admin@viabilio.com or via our contact form.