Privacy policy
Sonivation (“Sonivation”, “we”) operates sonivation.ca and the AI agent of the same name. This policy explains which personal information we process, why, where it is hosted, how long we keep it and the rights you can exercise, under PIPEDA (federal), Quebec’s private-sector privacy act (“Law 25”), the equivalent provincial acts of Alberta and British Columbia (PIPA) and Canada’s anti-spam legislation (CASL). Sonivation serves SMBs in every Canadian province and territory.
Person in charge of personal information
Kenjy, founder of Sonivation, is in charge of the protection of personal information. Questions and requests: support@sonivation.ca · 508-3400 boul. Saint-Elzéar O, Laval (QC) H7P 0K3.
What we process
Prospecting: business contact details published by companies themselves (website, public business registries such as the Quebec enterprise register, business listings), never purchased nor scraped from social networks; generic addresses (info@, contact@) or those published as a commercial contact.
Diagnostic: your questionnaire answers, your website address, the emails you send us.
Customers: identity and email of your account users, data from the tools you connect (Gmail, Google Calendar, Meta, LinkedIn) with your explicit, revocable authorization, content you upload for a module (contacts, invoices, products), billing data (processed by Stripe; we never store card numbers).
Technical: access logs (IP address, date, resource) and error diagnostics, without email content.
Why
To offer our services (B2B commercial prospecting under CASL, with a documented legal basis, postal address and unsubscribe link in every email).
To produce your diagnostic and demos, then run the modules you activate.
To bill, secure the service and meet legal obligations.
We never use one customer’s data to serve another, nor to train AI models.
Where and by whom
Our servers and databases are hosted by OVH in Beauharnois (Quebec). Access to your connected accounts is encrypted.
Processors: Anthropic (AI processing of the text required by the modules, not retained for training), Google (Gmail and Calendar connectors you authorize), Stripe (payments), Clerk (authentication), Resend (transactional email), Sentry (error diagnostics, no content). Some of these providers process data outside Quebec; they are bound by contract and we send them only what is strictly necessary.
How long
Prospects: contact details and history kept at most 6 months after the last exchange, then deleted; an unsubscribe is kept indefinitely on our suppression list so it is honoured.
Customers: for the duration of the contract, then complete deletion of all account data within 30 days of the request or termination, except accounting obligations (invoices: 7 years).
Your rights
Access, correction, withdrawal of consent, portability, de-indexing and deletion: write to support@sonivation.ca. We answer within 30 days. Every prospecting email contains an immediate unsubscribe link.
You may lodge a complaint with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.
Cookies
The public website uses no tracking or advertising cookies. The customer area uses only the session cookies required for authentication.
Incidents and changes
In case of a confidentiality incident presenting a risk of serious injury, we notify the Commission d’accès à l’information and the persons concerned. Any change to this policy is published here with its date.