Overview
T6AI Inc. ("we", "us", "T6AI") is a Canadian federal corporation headquartered in Québec. We operate this website (t6ai.co) and several AI SaaS products. This policy explains what data we collect, why, where it lives, and what you can do about it.
One-sentence summary: we collect the minimum necessary, host it in Canada (Quebec), encrypt it at rest and in transit, and honour every applicable data subject right.
What we collect on this website
- Visit analytics — page views, referrer, country (not IP), browser. Privacy-respecting analytics. No cookies. No fingerprinting.
- Contact form / email — if you write us, we keep the message and your email for follow-up. That's it.
- No advertising cookies. No retargeting. No third-party trackers.
What our products collect
Each T6AI product has its own privacy notice describing what it collects and why. As a general rule:
- Account data: email, name, authentication credentials (hashed).
- Product-specific data: appointments (Calypack), career profiles (Relevia), agent telemetry (OpenTac).
- All LLM calls pass through our safety layer (NVIDIA NeMo Guardrails) for PII screening before any third-party API.
Loi 25 — Québec specific
Data residency. Personal information collected through T6AI products is hosted in AWS Montréal (ca-central-1). Cross-border transfer is disabled by default. When a subprocessor requires US transfer (e.g. a model provider), we disclose this in the product privacy notice and obtain consent.
Privacy Impact Assessment. An évaluation des facteurs relatifs à la vie privée (EFVP) is completed for every product before its first user. Available on request to contact@t6ai.co.
Automated decision-making (art. 12.1). When a product makes a decision affecting you using AI alone, we tell you, explain the criteria in plain language, and offer a path to human review.
Person responsible. Francis Lévesque, co-founder. Reach at contact@t6ai.co with subject "Compliance inquiry".
GDPR — EU residents
If you are in the EU/EEA/UK and use a T6AI product, you have the right to access, rectify, port, restrict, or erase your personal data, and to object to processing. Write to contact@t6ai.co. We respond within 30 days.
Lawful basis. Contract (when you sign up), legitimate interest (analytics on this website, no cookies), explicit consent (for any optional feature involving cross-border transfer).
Cookies and trackers
This website uses zero cookies for analytics or advertising. The only browser storage we use is localStorage for your dark/light mode preference — that never leaves your device.
Our products may use first-party session cookies strictly necessary for authentication. These are disclosed per product.
Subprocessors
This website uses:
- Netlify — hosting and CDN. Some traffic logs may be processed in the US.
- Google Fonts — Instrument Serif and Geist served from fonts.googleapis.com. Google receives your IP when you load these fonts.
Per-product subprocessor lists are documented in each product's privacy notice and PIA.
Retention
Website contact emails: kept 24 months, then deleted unless the conversation is active.
Product data: per-product retention policy (typically tied to your account lifetime + 30 days).
Audit logs (Loi 25 art. 14): 7 years.
Security
AES-256 encryption at rest. TLS 1.2+ in transit. MFA on admin accounts. Penetration tests and dependency vulnerability scans on a regular cadence. Loi 25 art. 10 reasonable security measures apply.
Breach notification
If we experience a confidentiality incident likely to cause serious harm, we notify affected users and the Commission d'accès à l'information du Québec within 72 hours of discovery, per Loi 25 art. 3.5–3.7.
Contact
For any question, right exercise, or complaint: contact@t6ai.co.
If we cannot resolve your concern, you may file a complaint with the Commission d'accès à l'information du Québec (CAI) or your local data protection authority.
Changes to this policy
We will post material changes here at least 30 days before they take effect. Last 12 months of versions kept in the version note above.