Privacy Policy
Effective 17 August 2026
SatoLab takes the protection of your personal information seriously. This policy explains what information we collect, why, and how we protect it, in accordance with Québec's Act respecting the protection of personal information in the private sector (as amended by "Law 25").
1. Person in charge of protecting personal information
This policy is established by SatoLab. The person responsible for the protection of personal information is Erwan Jonchères, lawyer. For any question or to exercise your rights, write to us at contact@satolab.ai or at the following address: 3509 Durocher Street, Montréal, Québec.
2. Information we collect
We keep collection to a strict minimum: • Contact and resource-download forms: name, email address, company (optional), nature of your request and the content of your message. • Client data and files: the information and documents you send us as part of an engagement. • Booking: the information you enter when booking a call through the Clio Grow tool. We do not collect any information without your knowledge and do not purchase third-party lists.
3. Interface for AI agents
The site exposes a public interface for software agents at /api/mcp, described on the “For AI” page. This interface is read-only: it creates no file, sends no email and writes to no database. • What is collected: the caller's IP address and the timestamp of the call, for the sole purpose of rate limiting and preventing abuse. This data is held briefly in memory, for no longer than that purpose requires; it is written to no durable medium, does not survive a restart of the service, and is linked to no other information. • What is not collected: the content of calls is not recorded. We ask that you send no personal information through this interface, and no confidential information belonging to a third party. • No cookie is set and no authentication is required. When an agent prepares a request, the interface merely returns a link to our contact form. The request exists, and is retained, only once a person has submitted that form; sections 2, 3 and 8 then apply.
4. Purposes of collection
Your information is used solely to: respond to your requests; provide our AI advisory and governance services; manage the client relationship; and meet our legal and professional obligations. Whether each item is optional or required is indicated in our forms; a refusal may prevent us from acting on your request.
5. Consent
By sending us your information, you consent to its use for the purposes described in this policy. You may withdraw your consent at any time, subject to processing already carried out and to our legal obligations.
6. Cookies and trackers
The satolab.ai site uses no advertising cookies and no advertising. To understand site traffic, we use Matomo, an audience-measurement tool hosted on our own infrastructure and configured without cookies: nothing is stored on your device, your IP address is anonymized and traffic data is shared with no third party. Only a session cookie strictly necessary for the internal administration area is used; it does not track you.
7. Disclosure to third parties
We do not sell or rent your information. We rely on a small number of providers acting on our behalf: • Clio Grow — appointment booking; • Hostinger — site hosting and outbound email service; These providers are bound by confidentiality and security commitments and may only use your information for the intended purposes.
8. Hosting and transfers outside Québec
Your information is hosted on dedicated infrastructure located in Europe, protected by a firewall, a reverse proxy and communication encryption (TLS). Your information is therefore processed outside Québec; outbound email passes through our host's servers, also located in the European Union. Where the law requires it, we first carry out a privacy impact assessment to ensure that the information receives adequate protection, in accordance with Law 25.
9. Retention
We keep your information for as long as necessary for the stated purposes, then for the period required by our legal and professional obligations — in particular the rules of the Québec Bar applicable to legal files. At the end of these periods, the information is securely destroyed or anonymized.
10. Security
We put in place security measures appropriate to the sensitivity of the information: communication encryption, firewall, access restricted to authorized personnel, secure credential management and logging. As no measure is infallible, we cannot guarantee absolute security, but we strive to protect your information at all times.
11. Your rights
Under Québec law, you have the right to: access the information we hold about you; have it corrected if it is inaccurate, incomplete or ambiguous; withdraw your consent; and, where applicable, receive a copy in a structured, commonly used technological format (portability). To exercise these rights, write to contact@satolab.ai with proof of identity. We will respond within a reasonable time, generally within 30 days.
12. Automated decisions
We do not make any decision concerning you based exclusively on the automated processing of your personal information.
13. Confidentiality incident
In the event of a confidentiality incident presenting a risk of serious injury, we will take reasonable measures to reduce its consequences and will notify the affected individuals as well as the Commission d'accès à l'information, in accordance with the law.
14. European Union residents
If you reside in the European Union, the General Data Protection Regulation (GDPR) may apply to certain processing. You then have the rights provided by that regulation; write to us to exercise them.
15. Complaint
If you believe we have not respected your rights, you may file a complaint with Québec's Commission d'accès à l'information (cai.gouv.qc.ca).
16. Changes
We may amend this policy to reflect changes in our practices or in the law. The current version is always published on this page.
This document provides general information and does not constitute legal advice.