Privacy policy

In effect as of October 14, 2026.

• 1. Who is responsible
• 2. Information collected
• 3. What it is used for
• 4. Your consent
• 5. Who can access it
• 6. Hosting outside Quebec
• 7. How long it is kept
• 8. Security
• 9. Your rights
• 10. If you are in the European Union
• 11. Cookies and local storage
• 12. Confidentiality incidents
• 13. Internal rules
• 14. Changes

1. Who is responsible

This is the website of Studio Épure, a sole proprietorship operated by Timothé Chaigneau in Montréal (Quebec), NEQ 2282643743.

In accordance with Quebec's Act respecting the protection of personal information in the private sector, the person in charge of the protection of personal information is:

• Timothé Chaigneau, founder of Studio Épure
• Email: contact@studioepure.com
• Or through the site's contact form

2. Information collected

The contact form

When you fill in the form, we receive: your name, the name of your business (optional), your email address, the type of project you chose and the message you write.

The downloadable guide form

To download the guide “La PME connectée” (in French), we receive your first name, your company name (optional), your email address and whether you want to receive future guides. Your address may be used to write to you once about the guide. Further emails are sent only if you ticked the box provided, and each one lets you unsubscribe.

Booking a call

The "Book a call" button opens a Google Calendar booking page, on Google's site. Your name, your email and the time slot you choose are recorded there to arrange the call. This page is also governed by Google's privacy policy.

The site's AI assistant

The chat bubble opens a chat assistant. It is an artificial intelligence program, not a person, and its answers may contain mistakes: only a written quote is binding on Studio Épure.

When you write to it, your questions, the answers already given in the conversation and the page you are on go through our host Netlify, then are sent to Anthropic, PBC (United States), which provides the AI model (Claude) and produces the answer. To limit abuse, your IP address is used to count your questions, in temporary memory only.

Studio Épure does not record these conversations: they stay in the page and disappear when you close or reload it. Under its commercial terms, Anthropic does not use these exchanges to train its models and keeps them only for a limited period, unless the law requires it to keep them or its usage policies have been breached.

Do not write personal or confidential information in the assistant. To discuss your project, use the contact form instead. The assistant makes no decisions about you.

If you become a client

We also collect what is needed for the project and for billing: billing details, your site's content, access to the tools to be connected, and project-related exchanges. Your payments are made on a secure page from Stripe, our payment provider, which collects the card information directly. We only receive what is needed to track the payment (name, email, amount, date, card type and its last four digits, payment status): we never have access to your full card number or its security code.

What we do not collect

The site has no user accounts, no audience measurement tool (such as Google Analytics), no advertising pixel and no social media button that would track you. Fonts, icons, images and videos are hosted with the site: no other company is contacted when you visit it. The demo websites send nothing you enter in them.

The host's technical data

As with any website, our host automatically logs technical data on each visit: IP address, browser type, page requested, date and time. It uses this data to run the site and protect it against abuse. We do not use it to identify you or to analyze your browsing.

3. What it is used for

Your information is used only to:

• reply to your message, arrange the call you booked and prepare a proposal or a quote;
• answer the questions put to the site's AI assistant;
• build, deliver and maintain your project if you become a client;
• bill you, collect your payments and meet our accounting and tax obligations;
• protect the site against abuse.

It is never sold, rented or used for advertising. We do not add you to any mailing list and do not send you any commercial message without your express consent, as Canada's Anti-Spam Legislation (CASL) requires.

4. Your consent

By sending the form, booking a call or writing to the AI assistant, you consent to the information provided being used for the purposes described in section 3. This consent covers only those purposes. You can withdraw it at any time by writing to us: we will then stop using your information, subject to what the law requires us to keep (invoices, for example).

Our services are intended for businesses. The site is not aimed at people under 14 and does not knowingly collect their information.

5. Who can access it

Only Timothé Chaigneau has access to the information collected. It also passes through providers who serve us, only as far as necessary:

• Netlify, Inc. hosts the site, receives the form messages and relays the questions asked to the AI assistant;
• Anthropic, PBC provides the AI model behind the site's assistant and receives the questions asked to it (see section 2);
• Google LLC, through its Google Workspace business email (the contact@studioepure.com address), used to reply to you, and through Google Calendar if you book a call;
• Stripe Payments Canada, Ltd. and Stripe, Inc. process your payments if you become a client. For some activities, such as fraud prevention, Stripe acts on its own behalf, under its privacy policy;
• if you become a client, the tools your project needs, which we choose with you.

We do not share your information with anyone else without your consent, unless the law requires it.

6. Hosting outside Quebec

Netlify, Inc., Google LLC, Anthropic, PBC and Stripe, Inc. are American companies whose servers may be located outside Quebec, notably in the United States. Your information may therefore be stored there and be subject to the laws of those countries.

As the law requires, before entrusting personal information to a provider outside Quebec, we assess whether it will be adequately protected, taking into account its sensitivity, the purposes of its use and the provider's contractual commitments on confidentiality and security.

7. How long it is kept

• Enquiry with no follow-up: your message and contact details are deleted no later than 24 months after our last exchange.
• AI assistant: conversations are not kept by Studio Épure; Anthropic keeps them only for the limited period described in section 2.
• Client: project-related information is kept for the length of our relationship. Invoices, payment receipts and accounting records are kept for six years, as tax laws require.

At the end of these periods, the information is securely destroyed or anonymized.

8. Security

The accounts used to receive and handle your messages are protected by strong passwords and by two-factor authentication where available. The site is served only over an encrypted connection (HTTPS). Access is limited to the person who needs it to reply to you.

9. Your rights

At any time, you can:

• ask whether we hold information about you and receive a copy;
• have it corrected if it is inaccurate, incomplete or ambiguous;
• withdraw your consent or ask for it to be deleted;
• receive the information you gave us in a structured, commonly used technological format.

To exercise these rights, write to the person in charge named in section 1. We reply within 30 days of receiving your request, free of charge.

If you are not satisfied with our reply, you can contact the Commission d'accès à l'information du Québec.

10. If you are in the European Union

If you write to us from the European Union, the General Data Protection Regulation (GDPR) may apply. Studio Épure is then the controller, and:

• legal bases: pre-contractual steps taken at your request (replying, preparing a quote) and performance of the contract if you become a client; compliance with our legal obligations (invoices); our legitimate interest in protecting the site against abuse; your consent for the AI assistant;
• transfers: your information is processed in Canada, a country recognized by the European Commission as providing adequate protection for private businesses, and by the American providers listed in section 5, on the basis of appropriate safeguards (certification under the EU–US Data Privacy Framework or standard contractual clauses, depending on the provider);
• your rights: in addition to those in section 9, you can ask for processing to be restricted and object to it; you can also lodge a complaint with the data protection authority in your country (in France, the CNIL).

11. Cookies and local storage

This site sets no cookies. It uses no audience measurement, profiling or advertising tools. That is why no consent banner appears.

No marker is kept in your browser to track your visit.

The Google Calendar and Stripe pages, which open on their own sites, may use their own cookies, governed by their policies.

If we ever add a tool that collects information about your browsing, it will be turned off by default and only turned on with your consent.

12. Confidentiality incidents

We keep a register of confidentiality incidents (unauthorized access to, use of or loss of personal information). If an incident presents a risk of serious harm, we promptly notify the Commission d'accès à l'information and the people concerned, and we take steps to limit its consequences.

13. Internal rules

Studio Épure is a one-person business. The person in charge of the protection of personal information (section 1) is also the only one who handles your information. This person:

• collects only the information needed for the stated purposes;
• applies the retention periods in section 7;
• handles access, correction and deletion requests within 30 days;
• assesses privacy risks before any new project or tool involving personal information;
• keeps the incident register described in section 12.

14. Changes

This policy may change, for example if a new tool is added to the site. The effective date at the top of the page shows the latest version. In the event of a significant change, the new version will apply only to information collected after it is published, unless you consent otherwise.