Privacy policy
In force since: September 6, 2026. Last updated: November 5, 2026 (the page describes only the processing that is offered); November 3, 2026 (connecting an AI assistant); November 1, 2026 (project declared on the radar and report download; details added on October 29 on the IP address fingerprint, on the data kept in the browser and how it is erased, on the log and on closing the account).
The version in force is the one published at this address; every change is dated here. This English page is a translation: the French version is the original, and it prevails in case of discrepancy.
1. Who is responsible
Levier is operated by BORÉAL.IA inc. (ASGO brand), whose head office is in Quebec City.
The person responsible for the protection of personal information is Alexandre Gobeil-Hébert, Vice-President of BORÉAL.IA inc., who can be reached at confidentialite@asgo-ia.ca.
2. What is collected
The principle is minimization: an account is an email address.
- Business profile (registration date, city, industry, revenue, headcount, answers to the scan questions and the declared project: goals, expenses, budgets, funding checked or set aside): sent to our servers with every calculation, evaluated, then never kept by them. It stays in your browser, so that the radar can pick up where your last scan left off. It is erased when you close the account, and when you sign out unless you choose to keep your application files (section 10).
- Contact details: the email address, at sign-in or at checkout.
- Subscription: the customer identifier and the state of the subscription at Stripe, the plan, the period dates, and the payment notices Stripe sends us, kept as received (they may carry the name and billing address given at checkout). No card is kept by us.
- Technical data: the open sessions, each with a fingerprint of the IP address and the browser used; a fingerprint of the IP address, used for quotas (abuse protection) and erased after 7 days; a log of account closings (the date and the account identifier). These fingerprints are computed with a secret key kept on our servers: they are pseudonyms. The address itself is never kept in the clear, but whoever holds the key can check whether a given address matches a fingerprint.
- Our own audience measurement. We count the people who arrive, those who run the scan, those who hit a locked card, those who look at the plans and those who open the checkout, that is all. Technically: a fingerprint of your network address, computed with a secret key, truncated and specific to each day (a pseudonym). The rows do not contain the address, and the pseudonym does not survive the day: two days from the same address produce two pseudonyms with no visible link in our tables. The key is the same as for quotas and stays on our servers: whoever holds it could recompute the pseudonym of a known address. The referral is reduced to the NAME of the originating site. The full address of the page is not kept, because it may carry personal information. The content of the scan never enters this measurement: we count that a scan happened, never what it said. These rows are erased automatically after 90 days. No third-party analytics tool is used: neither Google Analytics nor an advertising pixel.
- If you follow a program. Your account, the identifier of each followed record, the date you followed it, and the date and text of your consent. No information from your business profile is kept for this service.
- If you connect an AI assistant (Claude, ChatGPT or another MCP-compatible assistant). You choose to connect your assistant to Levier. The information you give it is then with the provider of that assistant, which handles it under its own terms. That provider is not a Levier subprocessor. Levier sends nothing on its own to any AI provider. When your assistant queries Levier, Levier returns data from its database: program records, sources, dates and the guided file. The assistant may send a business profile for a calculation. Levier evaluates that profile, then neither keeps nor logs it, as with the scan. For each connection, Levier keeps your account, the name the assistant declares, the connection and last-use dates, and a fingerprint of the access tokens. The tokens themselves are never kept. You see these connections in My account and can remove them at any time. Access also stops when the subscription ends and when the account is closed.
- The button that led to the payment, attached to the subscription itself, so we know what makes people subscribe. It is an attribute of the contract. It forms no browsing profile: nothing is written on your device, and whoever does not pay leaves nothing behind.
- If you have an account, two more things, attached to the account itself rather than to a pseudonym. First, the channel the account came from (the name of the channel and, where applicable, the code of the post): written once, at creation, never rewritten, and kept for as long as the account: it is what tells us which channel keeps the product alive. Second, for a subscribed account, the days on which it used the product: the date alone, without the time of day, the page visited or what was searched for. These dates are erased after 90 days. That figure answers one question only: a subscription that goes unused will not be renewed, and we would rather see it before the renewal date than in a cancellation email.
3. Purposes
- Assess the business's eligibility for the public funding programs listed.
- Open and hold the user's session (single-use sign-in code, good for 10 minutes).
- Manage the subscription, including billing and renewal.
- Write to you about the programs you chose to follow: when a date is near, 30 and 7 days before, or when the record changes status or dates.
- Send, with express consent, the alerts tied to the programs being followed (coming).
4. Consent and communications
Service emails (sign-in code, welcome after payment, invoices) follow from the contractual relationship. Anything else (a scan summary, program alerts) rests on express consent, in keeping with Canada's anti-spam legislation, with the ability to unsubscribe at any time through the link in every email or by writing to the address above.
5. Retention
| Information | Kept for |
|---|
| Email address and account | As long as the account exists; see section 8 for what closing erases, and what it leaves |
| Business profile | Not kept by our servers |
| Data kept in your browser (section 10) | On your device, until you close the account, or until you choose to erase it when you sign out |
| Log of account closings | No fixed period at this time |
| AI assistant connection (account, assistant name, dates, token fingerprints) | Until removed in My account, or 90 days at most. The record is erased 90 days later. |
| Sign-in code | Good for 10 minutes, single use; its record is erased 30 days after it expires |
| Session | Good for 30 days; signing out cuts access at once. Its record (IP address fingerprint, browser) is erased 30 days after it expires |
| IP address fingerprint (quotas) | 7 days |
| Audience measurement rows (pseudonym of the day, arrival channel, step reached) | 90 days, then erased automatically |
| First-visit origin cookie | 90 days, in your browser |
| Days on which a subscribed account used the product (the date alone) | 90 days, then erased automatically |
| Followed programs | Until you remove the program, stop following, or close the account |
| Consent to following (date and accepted text) | Kept after following stops as proof of consent; erased when the account is closed |
| Record of following emails sent (event identifier and date) | Erased when the account is closed |
| Channel an account came from (written at creation, never rewritten) | For as long as the account |
| Payment notices received from Stripe | The legal retention period for accounting records |
| Subscription and billing records | The legal retention period for accounting records, even after the account is closed |
6. Hosting
The servers that process and store the information are hosted at OVH, in Quebec (Beauharnois), and operated by BORÉAL.IA inc.
7. Subprocessors
Five subprocessors are involved, each for one precise task:
- Stripe: processing payments and billing the subscription (the email address, the card and the billing address are given to it at checkout; Stripe handles them under its own policy, outside Quebec).
- Resend: sending transactional emails (sign-in code, welcome). The email address and the content of the message pass through its servers, located outside Quebec.
- Google and Microsoft: only if you choose “Continue with Google” or “Continue with Microsoft” on the sign-in page. The provider confirms your email address and a stable identifier for your account with it; we receive neither a password nor any content from your account, and we send it nothing from your profile. These services are operated outside Quebec, under their own policies.
- OVH: hosting of the servers, in Quebec.
No third-party audience analytics, no ad network, no typeface or library loaded from an outside server, with one exception: the sign-in page loads Google's sign-in button, from Google's servers, when that door is offered.
8. Your rights
Anyone may ask for access to their personal information, for it to be corrected, withdrawn or ported, by writing to the person responsible named above. Closing the account takes no request at all: it is done from the account page.
What closing does, exactly: access stops at once, open sessions are revoked, pending sign-in codes are erased and the data Levier kept in your browser is erased (section 10). What it leaves, and why: your email address stays attached to the closed account, because the subscription's accounting records refer to it and tax law requires keeping them; the account's arrival channel also remains. If you sign in again with the same address, the closed account is reopened. To have these erased, write to the person responsible named above; ASGO acts within 30 days, except for accounting records the law requires us to keep.
9. Privacy incident
Any incident that presents a risk of serious injury to a person concerned is handled in keeping with Quebec's Law 25: entry in the register of incidents, notice to the Commission d'accès à l'information du Québec and to the persons concerned where required.
10. Cookies
Three cookies, all set by us, all first-party, none for advertising, none tracking you from one site to another:
- The session, which keeps you signed in. Unreadable by scripts, erased when you sign out.
- The first-visit origin, set for 90 days. It remembers which channel brought you here: the name of the channel and, where applicable, the code of the post that sent you (an identifier of the post; no identifier points to you), so that our audience measurement credits visits to the right place. It carries NO visitor identifier: its value is shared by thousands of people, and it makes it possible neither to recognize you nor to follow you elsewhere. It is never rewritten: it is your FIRST visit that counts.
- A security cookie, short-lived, set during a sign-in with Google or Microsoft to check that the answer received matches the request that left this page.
Besides cookies, some data stays on your device. Levier keeps the following data in your browser's storage (local storage and an IndexedDB database):
- The scan profile: your answers to the questions, your project (goals, expenses, budgets, funding checked or set aside) and the business name. The answers are sent to our servers each time the radar or an application is calculated, evaluated, then forgotten. The business name is not sent with them: it only leaves in the Word report, if you ask for it. Our servers then lay it out, send the file back and keep nothing. The PDF of the report is produced in your browser.
- The business record: the identity facts given in an application (Quebec enterprise number, fiscal year, revenue, headcount, shareholders, officers), kept so they can be offered to the next file. They reach our servers only inside the Word document you ask for.
- The application files: one per program, with your answers, your texts, the edit history and the documents ticked off. Nothing is sent until you ask for the Word document; our servers then lay it out, send the file back and keep nothing. The PDF and the copied text are produced in your browser.
- Attached files: the files (20 MB at most each) you attach to an application file. Their content never leaves your browser; their name may appear in the preparation notes of the Word document.
- Preferences and markers: the display theme, the access level seen on your last visit (for page layout only), a fingerprint of the email address and of the account's creation date, which records which account this data belongs to (never the email address itself) and, for the length of a tab, the round trip of a Microsoft sign-in.
When you close the account, all of this is erased, except the display theme. When you sign out, if application files are kept on the device, the page asks whether to keep or erase them, because there is no copy with us. With no files, or if you choose to erase them, everything is erased the same way, except the theme. If you keep them, they stay on the device, tied to your account: another account that signs in on this browser does not see them, because they are erased before the page is displayed, and the page says so. On a shared device, erase them. You can also erase everything at any time by clearing the site's data in your browser's settings.
You can block or erase these cookies in your browser's settings: the site keeps working without them; only signing in to an account needs the session cookie. The audience measurement simply fails in silence and blocks nothing.
BORÉAL.IA inc., ASGO brand.