Privacy Policy

This Privacy Policy explains how Alambic Solutions inc. ("Scanable," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit our website, request a demo, contact us, or otherwise interact with our marketing and sales activities (collectively, the "Site").

We are committed to protecting personal information in accordance with the Quebec Act respecting the protection of personal information in the private sector (the "Quebec Privacy Act," as modernized by Law 25) and Canada's Personal Information Protection and Electronic Documents Act ("PIPEDA").

This policy does not apply to personal information that we process on behalf of our customers as a service provider (processor) in the course of providing the Scanable platform. That information is governed by the agreement between Scanable and the relevant customer — including our Master Subscription Agreement and Data Processing Agreement (DPA) — under which the customer is the controller and Scanable acts on the customer's instructions.

1. Personal information we collect

We collect the following categories of personal information:

• Information you provide — name, business email, company, job title, phone number, and the contents of demo requests, contact forms, and other communications.
• Information collected automatically — IP address, device and browser details, pages viewed, referring URLs, and similar usage data gathered through cookies and analytics technologies (see Cookies and tracking technologies).
• Information from third parties — business-contact and enrichment data from marketing and analytics providers, and information from integrations you choose to connect.

2. How we use personal information

We use personal information for the following purposes:

• to operate, maintain, and improve the Site;
• to respond to inquiries, schedule demos, and provide sales support;
• to send marketing communications you have consented to receive, consistent with Canada's Anti-Spam Legislation (CASL);
• to analyze and measure the performance of the Site and our marketing;
• to protect the security and integrity of the Site and prevent fraud or misuse; and
• to comply with our legal and regulatory obligations.

We collect, use, and disclose personal information only for these purposes and with your consent, except where the law otherwise permits or requires.

3. Consent

We obtain your consent before collecting, using, or disclosing your personal information, and we request consent for each specific purpose separately from any other information. Where the information is sensitive, we obtain your express consent. You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting our Privacy Officer (see Contact); withdrawal does not affect processing carried out before withdrawal.

4. Cookies and tracking technologies

We use cookies and similar technologies to operate the Site, remember your preferences, and measure usage. Some of these technologies can be used to identify, locate, or build a profile of you; where that is the case, those functions are off by default and are activated only with your consent. You can manage or refuse non-essential cookies through our consent banner or your browser settings. Refusing certain cookies may affect how the Site functions.

5. How we share and disclose personal information

We may disclose personal information to:

• Service providers who process information on our behalf (e.g. hosting, analytics, CRM, and email providers) under contractual confidentiality and security obligations;
• Affiliates within our corporate group;
• Legal and regulatory authorities where required by law or to protect our rights; and
• a successor entity in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information.

6. Transfers outside Quebec

Some of our service providers store or process personal information outside Quebec, including elsewhere in Canada and in the United States. Before transferring personal information outside Quebec, we conduct a privacy impact assessment that weighs the sensitivity of the information, the purposes of its use, the protection measures in place, and the legal framework of the destination jurisdiction, and we put a written agreement in place. We transfer information only where it will receive adequate protection.

7. Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected or as required by law. When the purpose has been achieved and no legal obligation requires us to keep it, we destroy or anonymize the information in accordance with generally accepted best practices.

8. Security

We maintain reasonable physical, technological, and organizational safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, or use. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Automated processing

We do not make decisions about you on the Site that are based exclusively on automated processing of your personal information. If this changes, we will inform you at or before the time any such decision is made and, on request, provide the personal information used, the principal factors and parameters that led to the decision, and your right to have that information corrected and to submit observations to a member of our staff who can review the decision.

10. Your rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Rectify information that is inaccurate, incomplete, or out of date;
• Withdraw consent to our use or disclosure of your information;
• Request de-indexing or that we cease disseminating your information where the conditions in the law are met;
• Data portability — receive the computerized personal information you provided to us in a structured, commonly used technological format; and
• Complain about how we handle your information.

To exercise any of these rights, contact our Privacy Officer below. We will respond within the time required by law (generally 30 days). If you are not satisfied with our response, you may file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

11. Third-party links

The Site may link to third-party websites and services that we do not control. This policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

12. Children's privacy

The Site is intended for businesses and is not directed to children. We do not knowingly collect personal information from children. Where consent is required from a minor under 14, it is given by the person having parental authority.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date above reflects the most recent version. Material changes will be communicated through the Site or by other appropriate means.

14. Contact and Privacy Officer

The person responsible for the protection of personal information at Scanable is:

• Nicolas Berthiaume, Privacy Officer
• Email: nicolas@alambic.ai

For any question about this policy or to exercise your rights, please contact our Privacy Officer using the details above.